./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1286180431 <...> Warning: Permanently added '10.128.1.174' (ECDSA) to the list of known hosts. execve("./syz-executor1286180431", ["./syz-executor1286180431"], 0x7ffe71931840 /* 10 vars */) = 0 brk(NULL) = 0x5555573f8000 brk(0x5555573f8c40) = 0x5555573f8c40 arch_prctl(ARCH_SET_FS, 0x5555573f8300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1286180431", 4096) = 28 brk(0x555557419c40) = 0x555557419c40 brk(0x55555741a000) = 0x55555741a000 mprotect(0x7ff39dbe5000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5062 attached , child_tidptr=0x5555573f85d0) = 5062 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] getpid( [pid 5061] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5063 [pid 5062] <... getpid resumed>) = 5062 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5063 attached [pid 5062] mkdir("./syzkaller.pqDxRW", 0700 [pid 5061] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5064 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5065 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... mkdir resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5066 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] chmod("./syzkaller.pqDxRW", 0777 [pid 5061] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5067 ./strace-static-x86_64: Process 5066 attached [pid 5062] <... chmod resumed>) = 0 [pid 5062] chdir("./syzkaller.pqDxRW"./strace-static-x86_64: Process 5067 attached ) = 0 [pid 5067] getpid( [pid 5062] mkdir("./0", 0777./strace-static-x86_64: Process 5065 attached [pid 5066] getpid() = 5066 [pid 5067] <... getpid resumed>) = 5067 [pid 5066] mkdir("./syzkaller.vvOItf", 0700 [pid 5065] getpid( [pid 5067] mkdir("./syzkaller.LDWLfm", 0700) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5065] <... getpid resumed>) = 5065 [pid 5063] getpid( [pid 5065] mkdir("./syzkaller.NY5cJb", 0700 [pid 5067] chmod("./syzkaller.LDWLfm", 0777 [pid 5063] <... getpid resumed>) = 5063 [pid 5062] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5064 attached [pid 5067] <... chmod resumed>) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5062] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] mkdir("./syzkaller.EwXaE4", 0700 [pid 5062] close(3 [pid 5067] chdir("./syzkaller.LDWLfm" [pid 5065] <... mkdir resumed>) = 0 [pid 5067] <... chdir resumed>) = 0 [pid 5067] mkdir("./0", 0777 [pid 5062] <... close resumed>) = 0 [pid 5065] chmod("./syzkaller.NY5cJb", 0777) = 0 [pid 5066] chmod("./syzkaller.vvOItf", 0777) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5065] chdir("./syzkaller.NY5cJb") = 0 [pid 5065] mkdir("./0", 0777 [pid 5066] chdir("./syzkaller.vvOItf") = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5066] mkdir("./0", 0777 [pid 5063] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] chmod("./syzkaller.EwXaE4", 0777 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5066] <... mkdir resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5063] <... chmod resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5067] close(3) = 0 [pid 5063] chdir("./syzkaller.EwXaE4" [pid 5062] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5068 [pid 5066] <... openat resumed>) = 3 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... chdir resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] mkdir("./0", 0777 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... mkdir resumed>) = 0 [pid 5066] close(3 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5066] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... openat resumed>) = 3 [pid 5067] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5069 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5065] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5070 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5071 [pid 5063] close(3./strace-static-x86_64: Process 5069 attached ) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5069] chdir("./0" [pid 5063] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5072 [pid 5064] getpid( [pid 5069] <... chdir resumed>) = 0 [pid 5069] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5069] setpgid(0, 0) = 0 [pid 5069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5070 attached [pid 5064] <... getpid resumed>) = 5064 [pid 5070] chdir("./0" [pid 5069] <... openat resumed>) = 3 [pid 5070] <... chdir resumed>) = 0 [pid 5069] write(3, "1000", 4 [pid 5064] mkdir("./syzkaller.DN1NI6", 0700 [pid 5070] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5069] <... write resumed>) = 4 [pid 5070] <... prctl resumed>) = 0 [pid 5069] close(3 [pid 5070] setpgid(0, 0 [pid 5069] <... close resumed>) = 0 [pid 5070] <... setpgid resumed>) = 0 [pid 5069] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5072 attached [pid 5070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] <... symlink resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5071 attached ./strace-static-x86_64: Process 5068 attached [pid 5070] <... openat resumed>) = 3 [pid 5069] memfd_create("syzkaller", 0 [pid 5072] chdir("./0" [pid 5070] write(3, "1000", 4 [pid 5069] <... memfd_create resumed>) = 3 [pid 5064] chmod("./syzkaller.DN1NI6", 0777 [pid 5072] <... chdir resumed>) = 0 [pid 5070] <... write resumed>) = 4 [pid 5069] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] chdir("./0" [pid 5071] chdir("./0" [pid 5072] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5070] close(3 [pid 5069] <... mmap resumed>) = 0x7ff395729000 [pid 5064] <... chmod resumed>) = 0 [pid 5072] <... prctl resumed>) = 0 [pid 5071] <... chdir resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 5069] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5068] <... chdir resumed>) = 0 [pid 5070] symlink("/dev/binderfs", "./binderfs" [pid 5072] setpgid(0, 0 [pid 5071] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5070] <... symlink resumed>) = 0 [pid 5068] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] chdir("./syzkaller.DN1NI6" [pid 5070] memfd_create("syzkaller", 0) = 3 [pid 5070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5072] <... setpgid resumed>) = 0 [pid 5071] <... prctl resumed>) = 0 [pid 5068] <... prctl resumed>) = 0 [pid 5064] <... chdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5071] setpgid(0, 0 [pid 5068] setpgid(0, 0 [pid 5064] mkdir("./0", 0777 [pid 5072] <... openat resumed>) = 3 [pid 5071] <... setpgid resumed>) = 0 [pid 5068] <... setpgid resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5072] write(3, "1000", 4 [pid 5071] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] <... write resumed>) = 4 [pid 5071] <... openat resumed>) = 3 [pid 5068] <... openat resumed>) = 3 [pid 5064] <... openat resumed>) = 3 [pid 5072] close(3 [pid 5068] write(3, "1000", 4 [pid 5071] write(3, "1000", 4 [pid 5072] <... close resumed>) = 0 [pid 5068] <... write resumed>) = 4 [pid 5072] symlink("/dev/binderfs", "./binderfs" [pid 5071] <... write resumed>) = 4 [pid 5068] close(3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5072] <... symlink resumed>) = 0 [pid 5071] close(3 [pid 5068] <... close resumed>) = 0 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5071] <... close resumed>) = 0 [pid 5068] symlink("/dev/binderfs", "./binderfs" [pid 5064] close(3 [pid 5072] memfd_create("syzkaller", 0 [pid 5071] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... symlink resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5072] <... memfd_create resumed>) = 3 [pid 5071] <... symlink resumed>) = 0 [pid 5068] memfd_create("syzkaller", 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5072] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5071] memfd_create("syzkaller", 0 [pid 5068] <... memfd_create resumed>) = 3 [pid 5072] <... mmap resumed>) = 0x7ff395729000 [pid 5071] <... memfd_create resumed>) = 3 [pid 5070] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5074 [pid 5071] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5074 attached [pid 5074] chdir("./0") = 0 [pid 5071] <... mmap resumed>) = 0x7ff395729000 [pid 5068] <... mmap resumed>) = 0x7ff395729000 [pid 5074] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5074] setpgid(0, 0) = 0 [pid 5074] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5074] write(3, "1000", 4) = 4 [pid 5074] close(3) = 0 [pid 5074] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5074] memfd_create("syzkaller", 0) = 3 [pid 5074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5069] <... write resumed>) = 2097152 [pid 5068] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5072] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5071] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5070] <... write resumed>) = 2097152 [pid 5069] munmap(0x7ff395729000, 2097152) = 0 [pid 5069] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5069] ioctl(4, LOOP_SET_FD, 3 [pid 5074] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5070] munmap(0x7ff395729000, 2097152) = 0 [pid 5070] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5070] ioctl(4, LOOP_SET_FD, 3 [pid 5069] <... ioctl resumed>) = 0 [pid 5068] <... write resumed>) = 2097152 [pid 5069] close(3) = 0 [pid 5069] mkdir("./file0", 0777) = 0 syzkaller login: [ 56.136124][ T5069] loop5: detected capacity change from 0 to 4096 [ 56.155078][ T5070] loop3: detected capacity change from 0 to 4096 [pid 5069] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5072] <... write resumed>) = 2097152 [pid 5070] <... ioctl resumed>) = 0 [pid 5070] close(3) = 0 [pid 5070] mkdir("./file0", 0777 [pid 5072] munmap(0x7ff395729000, 2097152 [pid 5071] <... write resumed>) = 2097152 [pid 5070] <... mkdir resumed>) = 0 [pid 5068] munmap(0x7ff395729000, 2097152 [pid 5070] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5072] <... munmap resumed>) = 0 [pid 5068] <... munmap resumed>) = 0 [pid 5071] munmap(0x7ff395729000, 2097152 [pid 5072] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5068] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5072] <... openat resumed>) = 4 [pid 5071] <... munmap resumed>) = 0 [pid 5068] ioctl(4, LOOP_SET_FD, 3 [pid 5072] ioctl(4, LOOP_SET_FD, 3 [pid 5071] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5071] ioctl(4, LOOP_SET_FD, 3 [pid 5068] <... ioctl resumed>) = 0 [pid 5074] <... write resumed>) = 2097152 [pid 5072] <... ioctl resumed>) = 0 [pid 5072] close(3 [pid 5068] close(3 [pid 5072] <... close resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 5068] <... close resumed>) = 0 [pid 5074] munmap(0x7ff395729000, 2097152 [pid 5072] mkdir("./file0", 0777 [pid 5071] close(3 [ 56.217371][ T5068] loop0: detected capacity change from 0 to 4096 [ 56.226609][ T5072] loop1: detected capacity change from 0 to 4096 [ 56.237138][ T5071] loop4: detected capacity change from 0 to 4096 [ 56.251994][ T5069] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5068] mkdir("./file0", 0777 [pid 5074] <... munmap resumed>) = 0 [pid 5072] <... mkdir resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5074] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5072] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5071] mkdir("./file0", 0777 [pid 5068] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5074] <... openat resumed>) = 4 [pid 5074] ioctl(4, LOOP_SET_FD, 3 [pid 5071] <... mkdir resumed>) = 0 [pid 5071] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5074] <... ioctl resumed>) = 0 [pid 5074] close(3) = 0 [ 56.271759][ T5070] NILFS (loop3): invalid segment: Checksum error in segment payload [ 56.279808][ T5070] NILFS (loop3): trying rollback from an earlier position [ 56.291928][ T5074] loop2: detected capacity change from 0 to 4096 [ 56.305656][ T5068] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5074] mkdir("./file0", 0777) = 0 [ 56.322384][ T5072] NILFS (loop1): invalid segment: Checksum error in segment payload [ 56.325273][ T5069] NILFS (loop5): trying rollback from an earlier position [ 56.336020][ T5068] NILFS (loop0): trying rollback from an earlier position [ 56.345181][ T5071] NILFS (loop4): invalid segment: Checksum error in segment payload [ 56.353713][ T5072] NILFS (loop1): trying rollback from an earlier position [ 56.361888][ T5071] NILFS (loop4): trying rollback from an earlier position [pid 5074] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5068] <... mount resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5068] chdir("./file0") = 0 [pid 5068] ioctl(4, LOOP_CLR_FD) = 0 [pid 5068] close(4) = 0 [pid 5068] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5068] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [ 56.382514][ T5074] NILFS (loop2): invalid segment: Checksum error in segment payload [ 56.403493][ T5071] NILFS (loop4): recovery complete [ 56.407331][ T5069] NILFS (loop5): recovery complete [ 56.410113][ T5068] NILFS (loop0): recovery complete [ 56.415372][ T5074] NILFS (loop2): trying rollback from an earlier position [ 56.423823][ T5072] NILFS (loop1): recovery complete [pid 5068] ftruncate(5, 33587195) = 0 [pid 5068] sendfile(4, 5, NULL, 281474978811909 [ 56.437664][ T5079] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 56.450423][ T5070] NILFS (loop3): recovery complete [ 56.456042][ T5078] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 56.471026][ T5080] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 56.475920][ T5074] NILFS (loop2): recovery complete [pid 5069] <... mount resumed>) = 0 [pid 5071] <... mount resumed>) = 0 [pid 5070] <... mount resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5071] chdir("./file0") = 0 [pid 5071] ioctl(4, LOOP_CLR_FD) = 0 [pid 5071] close(4 [pid 5072] <... mount resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5070] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5069] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5072] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5071] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5070] <... openat resumed>) = 3 [pid 5069] <... openat resumed>) = 3 [pid 5074] <... mount resumed>) = 0 [pid 5072] <... openat resumed>) = 3 [pid 5071] <... open resumed>) = 4 [pid 5070] chdir("./file0" [pid 5071] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5070] <... chdir resumed>) = 0 [pid 5071] <... open resumed>) = 5 [pid 5070] ioctl(4, LOOP_CLR_FD [pid 5071] ftruncate(5, 33587195 [pid 5070] <... ioctl resumed>) = 0 [pid 5071] <... ftruncate resumed>) = 0 [pid 5070] close(4 [pid 5071] sendfile(4, 5, NULL, 281474978811909 [pid 5070] <... close resumed>) = 0 [pid 5074] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5072] chdir("./file0" [pid 5070] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [ 56.489483][ T5081] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 56.501894][ T5082] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 56.526935][ T5083] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5069] chdir("./file0" [pid 5074] <... openat resumed>) = 3 [pid 5072] <... chdir resumed>) = 0 [pid 5070] <... open resumed>) = 4 [pid 5069] <... chdir resumed>) = 0 [pid 5074] chdir("./file0" [pid 5072] ioctl(4, LOOP_CLR_FD [pid 5070] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5069] ioctl(4, LOOP_CLR_FD [pid 5074] <... chdir resumed>) = 0 [pid 5072] <... ioctl resumed>) = 0 [pid 5070] <... open resumed>) = 5 [pid 5069] <... ioctl resumed>) = 0 [pid 5074] ioctl(4, LOOP_CLR_FD [pid 5072] close(4 [pid 5070] ftruncate(5, 33587195 [pid 5069] close(4 [pid 5074] <... ioctl resumed>) = 0 [pid 5074] close(4 [pid 5072] <... close resumed>) = 0 [pid 5070] <... ftruncate resumed>) = 0 [pid 5069] <... close resumed>) = 0 [pid 5074] <... close resumed>) = 0 [pid 5072] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5070] sendfile(4, 5, NULL, 281474978811909 [pid 5069] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5074] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5072] <... open resumed>) = 4 [pid 5069] <... open resumed>) = 4 [pid 5074] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5072] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5069] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5074] <... open resumed>) = 5 [pid 5072] <... open resumed>) = 5 [pid 5069] <... open resumed>) = 5 [pid 5074] ftruncate(5, 33587195 [pid 5072] ftruncate(5, 33587195 [pid 5069] ftruncate(5, 33587195 [pid 5074] <... ftruncate resumed>) = 0 [pid 5072] <... ftruncate resumed>) = 0 [pid 5069] <... ftruncate resumed>) = 0 [pid 5074] sendfile(4, 5, NULL, 281474978811909 [pid 5072] sendfile(4, 5, NULL, 281474978811909 [pid 5069] sendfile(4, 5, NULL, 281474978811909 [pid 5068] <... sendfile resumed>) = 1048576 [pid 5068] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5068] exit_group(0) = ? [pid 5068] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5068, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5062] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] unlink("./0/binderfs") = 0 [pid 5062] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... sendfile resumed>) = 1048576 [pid 5069] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5071] <... sendfile resumed>) = 1048576 [pid 5071] open(NULL, O_RDONLY [pid 5069] exit_group(0 [pid 5071] <... open resumed>) = -1 EFAULT (Bad address) [pid 5071] exit_group(0 [pid 5069] <... exit_group resumed>) = ? [pid 5071] <... exit_group resumed>) = ? [pid 5072] <... sendfile resumed>) = 1048576 [pid 5071] +++ exited with 0 +++ [pid 5069] +++ exited with 0 +++ [pid 5072] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5070] <... sendfile resumed>) = 1048576 [pid 5062] <... umount2 resumed>) = 0 [pid 5072] exit_group(0 [pid 5070] open(NULL, O_RDONLY [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5069, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5071, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5072] <... exit_group resumed>) = ? [pid 5070] <... open resumed>) = -1 EFAULT (Bad address) [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5062] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] +++ exited with 0 +++ [pid 5070] exit_group(0 [pid 5067] <... restart_syscall resumed>) = 0 [pid 5066] <... restart_syscall resumed>) = 0 [pid 5070] <... exit_group resumed>) = ? [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5070] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5072, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5067] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5070, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5062] lstat("./0/file0", [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 3 [pid 5066] <... openat resumed>) = 3 [pid 5065] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] fstat(3, [pid 5066] fstat(3, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... openat resumed>) = 4 [pid 5074] <... sendfile resumed>) = 1048576 [pid 5067] getdents64(3, [pid 5066] getdents64(3, [pid 5065] <... openat resumed>) = 3 [pid 5062] fstat(4, [pid 5074] open(NULL, O_RDONLY [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] fstat(3, [pid 5063] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5074] <... open resumed>) = -1 EFAULT (Bad address) [pid 5067] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] getdents64(4, [pid 5074] exit_group(0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] getdents64(3, [pid 5063] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5074] <... exit_group resumed>) = ? [pid 5067] lstat("./0/binderfs", [pid 5066] lstat("./0/binderfs", [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] <... openat resumed>) = 3 [pid 5062] getdents64(4, [pid 5074] +++ exited with 0 +++ [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] fstat(3, [pid 5062] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] unlink("./0/binderfs" [pid 5066] unlink("./0/binderfs" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] close(4 [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5065] lstat("./0/binderfs", [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5074, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5063] getdents64(3, [pid 5062] <... close resumed>) = 0 [pid 5067] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] rmdir("./0/file0" [pid 5065] unlink("./0/binderfs" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./0/binderfs", [pid 5065] <... unlink resumed>) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... rmdir resumed>) = 0 [pid 5063] unlink("./0/binderfs" [pid 5065] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... openat resumed>) = 3 [pid 5063] <... unlink resumed>) = 0 [pid 5062] getdents64(3, [pid 5064] fstat(3, [pid 5063] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 5064] getdents64(3, [pid 5062] <... close resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] rmdir("./0") = 0 [pid 5064] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./0/binderfs" [pid 5062] mkdir("./1", 0777 [pid 5064] <... unlink resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5064] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5084 ./strace-static-x86_64: Process 5084 attached [pid 5084] chdir("./1") = 0 [pid 5084] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5084] setpgid(0, 0) = 0 [pid 5084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5084] write(3, "1000", 4) = 4 [pid 5084] close(3) = 0 [pid 5084] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5084] memfd_create("syzkaller", 0) = 3 [pid 5084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./0/file0") = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./0") = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5066] mkdir("./1", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5085 ./strace-static-x86_64: Process 5085 attached [pid 5085] chdir("./1") = 0 [pid 5085] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5085] setpgid(0, 0) = 0 [pid 5085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5085] <... openat resumed>) = 3 [pid 5085] write(3, "1000", 4) = 4 [pid 5085] close(3) = 0 [pid 5085] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5065] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = 0 [pid 5065] lstat("./0/file0", [pid 5064] <... umount2 resumed>) = 0 [pid 5063] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./0/file0", [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./0/file0", [pid 5065] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5063] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] fstat(4, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] getdents64(4, [pid 5085] memfd_create("syzkaller", 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] <... openat resumed>) = 4 [pid 5063] <... openat resumed>) = 4 [pid 5067] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(4, [pid 5064] fstat(4, [pid 5063] fstat(4, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] lstat("./0/file0", [pid 5065] close(4 [pid 5064] getdents64(4, [pid 5063] getdents64(4, [pid 5085] <... memfd_create resumed>) = 3 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5085] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] rmdir("./0/file0" [pid 5064] getdents64(4, [pid 5063] getdents64(4, [pid 5085] <... mmap resumed>) = 0x7ff395729000 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... rmdir resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] getdents64(3, [pid 5064] close(4 [pid 5063] close(4 [pid 5067] <... openat resumed>) = 4 [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5067] fstat(4, [pid 5065] close(3 [pid 5064] rmdir("./0/file0" [pid 5063] rmdir("./0/file0" [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5067] getdents64(4, [pid 5065] rmdir("./0" [pid 5064] getdents64(3, [pid 5063] getdents64(3, [pid 5067] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] getdents64(4, [pid 5065] mkdir("./1", 0777 [pid 5064] close(3 [pid 5063] close(3 [pid 5067] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5067] close(4 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5064] rmdir("./0" [pid 5063] rmdir("./0" [pid 5067] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5067] rmdir("./0/file0" [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] mkdir("./1", 0777 [pid 5063] mkdir("./1", 0777 [pid 5067] <... rmdir resumed>) = 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] <... mkdir resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5067] getdents64(3, [pid 5065] close(3 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 3 [pid 5067] close(3 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5067] <... close resumed>) = 0 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] rmdir("./0" [pid 5065] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5086 [pid 5064] close(3 [pid 5063] close(3 [pid 5067] <... rmdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5067] mkdir("./1", 0777 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... mkdir resumed>) = 0 [pid 5085] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5064] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5087 [pid 5063] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5088 [pid 5067] <... openat resumed>) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5087 attached , child_tidptr=0x5555573f85d0) = 5089 [pid 5087] chdir("./1"./strace-static-x86_64: Process 5086 attached ./strace-static-x86_64: Process 5088 attached ) = 0 [pid 5086] chdir("./1"./strace-static-x86_64: Process 5089 attached [pid 5088] chdir("./1" [pid 5087] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5086] <... chdir resumed>) = 0 [pid 5089] chdir("./1" [pid 5088] <... chdir resumed>) = 0 [pid 5087] <... prctl resumed>) = 0 [pid 5086] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5089] <... chdir resumed>) = 0 [pid 5088] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5087] setpgid(0, 0 [pid 5086] <... prctl resumed>) = 0 [pid 5089] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5088] <... prctl resumed>) = 0 [pid 5087] <... setpgid resumed>) = 0 [pid 5086] setpgid(0, 0 [pid 5089] <... prctl resumed>) = 0 [pid 5088] setpgid(0, 0 [pid 5087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5086] <... setpgid resumed>) = 0 [pid 5089] setpgid(0, 0 [pid 5088] <... setpgid resumed>) = 0 [pid 5086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5089] <... setpgid resumed>) = 0 [pid 5088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5087] <... openat resumed>) = 3 [pid 5086] <... openat resumed>) = 3 [pid 5089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5088] <... openat resumed>) = 3 [pid 5087] write(3, "1000", 4 [pid 5086] write(3, "1000", 4 [pid 5089] <... openat resumed>) = 3 [pid 5088] write(3, "1000", 4 [pid 5087] <... write resumed>) = 4 [pid 5086] <... write resumed>) = 4 [pid 5089] write(3, "1000", 4 [pid 5088] <... write resumed>) = 4 [pid 5087] close(3 [pid 5086] close(3 [pid 5089] <... write resumed>) = 4 [pid 5088] close(3 [pid 5087] <... close resumed>) = 0 [pid 5086] <... close resumed>) = 0 [pid 5089] close(3 [pid 5088] <... close resumed>) = 0 [pid 5087] symlink("/dev/binderfs", "./binderfs" [pid 5086] symlink("/dev/binderfs", "./binderfs" [pid 5089] <... close resumed>) = 0 [pid 5088] symlink("/dev/binderfs", "./binderfs" [pid 5087] <... symlink resumed>) = 0 [pid 5086] <... symlink resumed>) = 0 [pid 5089] symlink("/dev/binderfs", "./binderfs" [pid 5088] <... symlink resumed>) = 0 [pid 5087] memfd_create("syzkaller", 0 [pid 5086] memfd_create("syzkaller", 0 [pid 5089] <... symlink resumed>) = 0 [pid 5088] memfd_create("syzkaller", 0 [pid 5087] <... memfd_create resumed>) = 3 [pid 5086] <... memfd_create resumed>) = 3 [pid 5089] memfd_create("syzkaller", 0 [pid 5088] <... memfd_create resumed>) = 3 [pid 5087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5089] <... memfd_create resumed>) = 3 [pid 5088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5087] <... mmap resumed>) = 0x7ff395729000 [pid 5086] <... mmap resumed>) = 0x7ff395729000 [pid 5089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5088] <... mmap resumed>) = 0x7ff395729000 [pid 5089] <... mmap resumed>) = 0x7ff395729000 [pid 5084] <... write resumed>) = 2097152 [pid 5087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5084] munmap(0x7ff395729000, 2097152) = 0 [pid 5084] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5084] ioctl(4, LOOP_SET_FD, 3 [pid 5089] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5084] <... ioctl resumed>) = 0 [pid 5086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5085] <... write resumed>) = 2097152 [pid 5084] close(3 [pid 5088] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5085] munmap(0x7ff395729000, 2097152 [pid 5084] <... close resumed>) = 0 [pid 5084] mkdir("./file0", 0777 [pid 5087] <... write resumed>) = 2097152 [pid 5085] <... munmap resumed>) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5084] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5087] munmap(0x7ff395729000, 2097152 [pid 5085] <... openat resumed>) = 4 [ 58.016926][ T5084] loop0: detected capacity change from 0 to 4096 [pid 5085] ioctl(4, LOOP_SET_FD, 3 [pid 5087] <... munmap resumed>) = 0 [pid 5087] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5087] ioctl(4, LOOP_SET_FD, 3 [pid 5085] <... ioctl resumed>) = 0 [pid 5085] close(3) = 0 [pid 5085] mkdir("./file0", 0777) = 0 [pid 5085] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5086] <... write resumed>) = 2097152 [pid 5086] munmap(0x7ff395729000, 2097152 [pid 5089] <... write resumed>) = 2097152 [pid 5087] <... ioctl resumed>) = 0 [pid 5086] <... munmap resumed>) = 0 [pid 5086] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5087] close(3 [ 58.059014][ T5084] NILFS (loop0): invalid segment: Checksum error in segment payload [ 58.067461][ T5085] loop4: detected capacity change from 0 to 4096 [ 58.077681][ T5087] loop2: detected capacity change from 0 to 4096 [pid 5086] ioctl(4, LOOP_SET_FD, 3 [pid 5087] <... close resumed>) = 0 [pid 5089] munmap(0x7ff395729000, 2097152 [pid 5086] <... ioctl resumed>) = 0 [pid 5089] <... munmap resumed>) = 0 [pid 5086] close(3 [pid 5089] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5086] <... close resumed>) = 0 [pid 5089] <... openat resumed>) = 4 [pid 5086] mkdir("./file0", 0777 [pid 5089] ioctl(4, LOOP_SET_FD, 3 [pid 5086] <... mkdir resumed>) = 0 [pid 5088] <... write resumed>) = 2097152 [pid 5087] mkdir("./file0", 0777 [pid 5086] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5088] munmap(0x7ff395729000, 2097152) = 0 [pid 5087] <... mkdir resumed>) = 0 [ 58.103394][ T5086] loop3: detected capacity change from 0 to 4096 [ 58.103983][ T5085] NILFS (loop4): invalid segment: Checksum error in segment payload [ 58.114899][ T5089] loop5: detected capacity change from 0 to 4096 [ 58.124480][ T5085] NILFS (loop4): trying rollback from an earlier position [ 58.134999][ T5084] NILFS (loop0): trying rollback from an earlier position [ 58.145438][ T5086] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5089] <... ioctl resumed>) = 0 [pid 5088] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5087] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5089] close(3 [pid 5088] <... openat resumed>) = 4 [pid 5089] <... close resumed>) = 0 [pid 5088] ioctl(4, LOOP_SET_FD, 3 [pid 5089] mkdir("./file0", 0777) = 0 [pid 5085] <... mount resumed>) = 0 [pid 5085] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5085] chdir("./file0") = 0 [pid 5085] ioctl(4, LOOP_CLR_FD) = 0 [pid 5085] close(4) = 0 [pid 5085] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5085] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5085] ftruncate(5, 33587195) = 0 [ 58.145948][ T5085] NILFS (loop4): recovery complete [ 58.153536][ T5086] NILFS (loop3): trying rollback from an earlier position [ 58.169211][ T5088] loop1: detected capacity change from 0 to 4096 [ 58.175258][ T5090] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.182913][ T5087] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5085] sendfile(4, 5, NULL, 281474978811909 [pid 5089] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5088] <... ioctl resumed>) = 0 [pid 5088] close(3) = 0 [pid 5088] mkdir("./file0", 0777) = 0 [ 58.199165][ T5084] NILFS (loop0): recovery complete [ 58.210135][ T5087] NILFS (loop2): trying rollback from an earlier position [ 58.219502][ T5089] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5088] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5084] <... mount resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5084] chdir("./file0") = 0 [pid 5084] ioctl(4, LOOP_CLR_FD) = 0 [ 58.257645][ T5091] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.269105][ T5086] NILFS (loop3): recovery complete [ 58.270896][ T5088] NILFS (loop1): invalid segment: Checksum error in segment payload [ 58.283349][ T5088] NILFS (loop1): trying rollback from an earlier position [ 58.288417][ T5087] NILFS (loop2): recovery complete [ 58.291032][ T5089] NILFS (loop5): trying rollback from an earlier position [pid 5084] close(4) = 0 [pid 5086] <... mount resumed>) = 0 [pid 5084] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5086] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5084] <... open resumed>) = 4 [pid 5086] <... openat resumed>) = 3 [pid 5084] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5086] chdir("./file0" [pid 5084] <... open resumed>) = 5 [pid 5086] <... chdir resumed>) = 0 [pid 5084] ftruncate(5, 33587195 [pid 5086] ioctl(4, LOOP_CLR_FD [pid 5084] <... ftruncate resumed>) = 0 [pid 5087] <... mount resumed>) = 0 [pid 5086] <... ioctl resumed>) = 0 [pid 5084] sendfile(4, 5, NULL, 281474978811909 [pid 5087] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5086] close(4 [pid 5087] <... openat resumed>) = 3 [pid 5086] <... close resumed>) = 0 [pid 5087] chdir("./file0" [pid 5086] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5087] <... chdir resumed>) = 0 [pid 5086] <... open resumed>) = 4 [pid 5087] ioctl(4, LOOP_CLR_FD [pid 5086] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5087] <... ioctl resumed>) = 0 [pid 5086] <... open resumed>) = 5 [pid 5087] close(4 [pid 5086] ftruncate(5, 33587195 [pid 5087] <... close resumed>) = 0 [pid 5086] <... ftruncate resumed>) = 0 [pid 5087] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [ 58.306244][ T5092] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.326154][ T5093] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5086] sendfile(4, 5, NULL, 281474978811909 [pid 5087] <... open resumed>) = 4 [pid 5087] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5087] ftruncate(5, 33587195) = 0 [pid 5087] sendfile(4, 5, NULL, 281474978811909 [pid 5088] <... mount resumed>) = 0 [pid 5088] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5088] chdir("./file0") = 0 [pid 5088] ioctl(4, LOOP_CLR_FD) = 0 [pid 5088] close(4) = 0 [ 58.370817][ T5088] NILFS (loop1): recovery complete [ 58.386739][ T5089] NILFS (loop5): recovery complete [ 58.397042][ T5094] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5088] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5089] <... mount resumed>) = 0 [pid 5088] <... open resumed>) = 4 [pid 5089] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5088] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5089] <... openat resumed>) = 3 [pid 5088] <... open resumed>) = 5 [pid 5089] chdir("./file0" [pid 5088] ftruncate(5, 33587195) = 0 [pid 5088] sendfile(4, 5, NULL, 281474978811909 [pid 5089] <... chdir resumed>) = 0 [pid 5089] ioctl(4, LOOP_CLR_FD) = 0 [pid 5089] close(4) = 0 [pid 5089] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5089] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [ 58.427579][ T5095] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5089] ftruncate(5, 33587195) = 0 [pid 5089] sendfile(4, 5, NULL, 281474978811909 [pid 5085] <... sendfile resumed>) = 1048576 [pid 5085] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5085] exit_group(0) = ? [pid 5085] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5085, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5066] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... sendfile resumed>) = 1048576 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5066] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5084] exit_group(0 [pid 5066] <... openat resumed>) = 3 [pid 5084] <... exit_group resumed>) = ? [pid 5066] fstat(3, [pid 5084] +++ exited with 0 +++ [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5084, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5062] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5087] <... sendfile resumed>) = 1048576 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5087] open(NULL, O_RDONLY [pid 5086] <... sendfile resumed>) = 1048576 [pid 5066] lstat("./1/binderfs", [pid 5062] lstat("./1/binderfs", [pid 5087] <... open resumed>) = -1 EFAULT (Bad address) [pid 5086] open(NULL, O_RDONLY [pid 5062] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] unlink("./1/binderfs") = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5087] exit_group(0 [pid 5086] <... open resumed>) = -1 EFAULT (Bad address) [pid 5062] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5087] <... exit_group resumed>) = ? [pid 5086] exit_group(0 [pid 5066] unlink("./1/binderfs") = 0 [pid 5087] +++ exited with 0 +++ [pid 5086] <... exit_group resumed>) = ? [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5087, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5064] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5086] +++ exited with 0 +++ [pid 5064] <... openat resumed>) = 3 [pid 5066] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5086, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5064] fstat(3, [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... restart_syscall resumed>) = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] lstat("./1/binderfs", [pid 5065] <... openat resumed>) = 3 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] fstat(3, [pid 5064] unlink("./1/binderfs" [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5065] getdents64(3, [pid 5064] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./1/binderfs") = 0 [pid 5065] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5088] <... sendfile resumed>) = 1048576 [pid 5088] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5088] exit_group(0) = ? [pid 5088] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5088, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./1/binderfs") = 0 [pid 5063] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5089] <... sendfile resumed>) = 1048576 [pid 5089] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5089] exit_group(0) = ? [pid 5089] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5089, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5067] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5067] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./1/binderfs") = 0 [pid 5067] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./1/file0", [pid 5062] lstat("./1/file0", [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... openat resumed>) = 4 [pid 5066] fstat(4, [pid 5062] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] getdents64(4, [pid 5062] <... openat resumed>) = 4 [pid 5066] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] fstat(4, [pid 5066] close(4 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... close resumed>) = 0 [pid 5062] getdents64(4, [pid 5066] rmdir("./1/file0" [pid 5062] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] <... rmdir resumed>) = 0 [pid 5066] getdents64(3, [pid 5062] getdents64(4, [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] close(3 [pid 5062] close(4 [pid 5066] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5066] rmdir("./1" [pid 5062] rmdir("./1/file0" [pid 5066] <... rmdir resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5066] mkdir("./2", 0777 [pid 5062] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5062] close(3) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5062] rmdir("./1") = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5062] mkdir("./2", 0777 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] close(3 [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5063] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... openat resumed>) = 3 [pid 5063] lstat("./1/file0", [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5097 [pid 5062] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] close(3) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, [pid 5062] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5098 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5097 attached [pid 5063] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./1/file0" [pid 5097] chdir("./2" [pid 5067] <... umount2 resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, ./strace-static-x86_64: Process 5098 attached [pid 5097] <... chdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5098] chdir("./2") = 0 [pid 5098] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5097] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(3 [pid 5097] <... prctl resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... close resumed>) = 0 [pid 5098] <... prctl resumed>) = 0 [pid 5098] setpgid(0, 0) = 0 [pid 5098] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5097] setpgid(0, 0 [pid 5067] lstat("./1/file0", [pid 5063] rmdir("./1" [pid 5098] write(3, "1000", 4) = 4 [pid 5098] close(3) = 0 [pid 5098] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5098] memfd_create("syzkaller", 0 [pid 5097] <... setpgid resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5098] <... memfd_create resumed>) = 3 [pid 5097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] mkdir("./2", 0777 [pid 5098] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5097] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... mkdir resumed>) = 0 [pid 5098] <... mmap resumed>) = 0x7ff395729000 [pid 5097] write(3, "1000", 4 [pid 5067] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] lstat("./1/file0", [pid 5064] lstat("./1/file0", [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5067] <... openat resumed>) = 4 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5097] <... write resumed>) = 4 [pid 5067] fstat(4, [pid 5065] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5097] close(3 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5097] <... close resumed>) = 0 [pid 5067] getdents64(4, [pid 5065] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5097] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] <... openat resumed>) = 4 [pid 5064] <... openat resumed>) = 4 [pid 5097] <... symlink resumed>) = 0 [pid 5067] getdents64(4, [pid 5065] fstat(4, [pid 5064] fstat(4, [pid 5063] close(3 [pid 5097] memfd_create("syzkaller", 0 [pid 5067] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... close resumed>) = 0 [pid 5097] <... memfd_create resumed>) = 3 [pid 5067] close(4 [pid 5065] getdents64(4, [pid 5064] getdents64(4, [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5097] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5097] <... mmap resumed>) = 0x7ff395729000 [pid 5067] rmdir("./1/file0" [pid 5065] getdents64(4, [pid 5064] getdents64(4, [pid 5063] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5099 ./strace-static-x86_64: Process 5099 attached [pid 5098] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] <... rmdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] getdents64(3, [pid 5065] close(4 [pid 5064] close(4 [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5067] close(3 [pid 5065] rmdir("./1/file0" [pid 5064] rmdir("./1/file0" [pid 5067] <... close resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5067] rmdir("./1" [pid 5065] getdents64(3, [pid 5064] getdents64(3, [pid 5067] <... rmdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] mkdir("./2", 0777 [pid 5065] close(3 [pid 5064] close(3 [pid 5099] chdir("./2" [pid 5067] <... mkdir resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5065] rmdir("./1" [pid 5064] rmdir("./1" [pid 5099] <... chdir resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5099] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5097] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5065] mkdir("./2", 0777 [pid 5064] mkdir("./2", 0777 [pid 5099] <... prctl resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] <... mkdir resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5067] close(3 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5099] setpgid(0, 0 [pid 5067] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5064] <... openat resumed>) = 3 [pid 5099] <... setpgid resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5099] <... openat resumed>) = 3 [pid 5067] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5100 [pid 5065] close(3 [pid 5064] close(3 [pid 5099] write(3, "1000", 4 [pid 5065] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5099] <... write resumed>) = 4 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5099] close(3) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5101 [pid 5064] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5102 [pid 5099] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5100 attached [pid 5100] chdir("./2" [pid 5099] <... symlink resumed>) = 0 [pid 5100] <... chdir resumed>) = 0 [pid 5099] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5101 attached [pid 5100] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5099] <... memfd_create resumed>) = 3 [pid 5100] <... prctl resumed>) = 0 [pid 5099] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5101] chdir("./2" [pid 5100] setpgid(0, 0 [pid 5099] <... mmap resumed>) = 0x7ff395729000 [pid 5101] <... chdir resumed>) = 0 [pid 5100] <... setpgid resumed>) = 0 [pid 5100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5100] write(3, "1000", 4) = 4 [pid 5100] close(3) = 0 [pid 5100] symlink("/dev/binderfs", "./binderfs" [pid 5101] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5100] <... symlink resumed>) = 0 [pid 5099] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5101] <... prctl resumed>) = 0 [pid 5100] memfd_create("syzkaller", 0) = 3 [pid 5100] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 ./strace-static-x86_64: Process 5102 attached [pid 5101] setpgid(0, 0) = 0 [pid 5102] chdir("./2") = 0 [pid 5101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5102] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5101] <... openat resumed>) = 3 [pid 5102] <... prctl resumed>) = 0 [pid 5101] write(3, "1000", 4 [pid 5097] <... write resumed>) = 2097152 [pid 5102] setpgid(0, 0 [pid 5101] <... write resumed>) = 4 [pid 5100] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5098] <... write resumed>) = 2097152 [pid 5097] munmap(0x7ff395729000, 2097152 [pid 5102] <... setpgid resumed>) = 0 [pid 5101] close(3 [pid 5098] munmap(0x7ff395729000, 2097152 [pid 5097] <... munmap resumed>) = 0 [pid 5097] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5101] <... close resumed>) = 0 [pid 5097] <... openat resumed>) = 4 [pid 5101] symlink("/dev/binderfs", "./binderfs" [pid 5098] <... munmap resumed>) = 0 [pid 5097] ioctl(4, LOOP_SET_FD, 3 [pid 5102] <... openat resumed>) = 3 [pid 5101] <... symlink resumed>) = 0 [pid 5098] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5102] write(3, "1000", 4) = 4 [pid 5101] memfd_create("syzkaller", 0 [pid 5098] <... openat resumed>) = 4 [pid 5102] close(3 [pid 5101] <... memfd_create resumed>) = 3 [pid 5102] <... close resumed>) = 0 [pid 5098] ioctl(4, LOOP_SET_FD, 3 [pid 5102] symlink("/dev/binderfs", "./binderfs" [pid 5101] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5098] <... ioctl resumed>) = 0 [pid 5102] <... symlink resumed>) = 0 [pid 5101] <... mmap resumed>) = 0x7ff395729000 [pid 5098] close(3 [pid 5097] <... ioctl resumed>) = 0 [pid 5102] memfd_create("syzkaller", 0 [pid 5097] close(3 [pid 5102] <... memfd_create resumed>) = 3 [pid 5098] <... close resumed>) = 0 [pid 5097] <... close resumed>) = 0 [pid 5097] mkdir("./file0", 0777 [pid 5102] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5101] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5098] mkdir("./file0", 0777 [pid 5097] <... mkdir resumed>) = 0 [pid 5102] <... mmap resumed>) = 0x7ff395729000 [pid 5097] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5098] <... mkdir resumed>) = 0 [ 59.788797][ T5097] loop4: detected capacity change from 0 to 4096 [ 59.802439][ T5098] loop0: detected capacity change from 0 to 4096 [pid 5098] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5099] <... write resumed>) = 2097152 [pid 5100] <... write resumed>) = 2097152 [pid 5100] munmap(0x7ff395729000, 2097152) = 0 [pid 5099] munmap(0x7ff395729000, 2097152 [pid 5100] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5099] <... munmap resumed>) = 0 [pid 5102] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5100] ioctl(4, LOOP_SET_FD, 3 [pid 5099] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5099] ioctl(4, LOOP_SET_FD, 3 [pid 5101] <... write resumed>) = 2097152 [pid 5100] <... ioctl resumed>) = 0 [pid 5100] close(3) = 0 [pid 5100] mkdir("./file0", 0777 [pid 5101] munmap(0x7ff395729000, 2097152 [pid 5099] <... ioctl resumed>) = 0 [pid 5099] close(3 [pid 5101] <... munmap resumed>) = 0 [pid 5099] <... close resumed>) = 0 [pid 5101] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5099] mkdir("./file0", 0777 [pid 5100] <... mkdir resumed>) = 0 [pid 5100] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5101] <... openat resumed>) = 4 [pid 5099] <... mkdir resumed>) = 0 [pid 5101] ioctl(4, LOOP_SET_FD, 3 [ 59.856031][ T5097] NILFS (loop4): invalid segment: Checksum error in segment payload [ 59.865378][ T5098] NILFS (loop0): invalid segment: Checksum error in segment payload [ 59.877662][ T5100] loop5: detected capacity change from 0 to 4096 [ 59.885504][ T5099] loop1: detected capacity change from 0 to 4096 [ 59.886243][ T5097] NILFS (loop4): trying rollback from an earlier position [ 59.894708][ T5098] NILFS (loop0): trying rollback from an earlier position [pid 5099] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5102] <... write resumed>) = 2097152 [pid 5101] <... ioctl resumed>) = 0 [pid 5102] munmap(0x7ff395729000, 2097152 [pid 5101] close(3 [pid 5102] <... munmap resumed>) = 0 [pid 5101] <... close resumed>) = 0 [pid 5102] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5101] mkdir("./file0", 0777 [pid 5102] <... openat resumed>) = 4 [pid 5101] <... mkdir resumed>) = 0 [ 59.916902][ T5101] loop3: detected capacity change from 0 to 4096 [ 59.930722][ T5099] NILFS (loop1): invalid segment: Checksum error in segment payload [ 59.932572][ T5100] NILFS (loop5): invalid segment: Checksum error in segment payload [ 59.938758][ T5099] NILFS (loop1): trying rollback from an earlier position [ 59.958145][ T5098] NILFS (loop0): recovery complete [pid 5102] ioctl(4, LOOP_SET_FD, 3 [pid 5101] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5097] <... mount resumed>) = 0 [pid 5102] <... ioctl resumed>) = 0 [pid 5102] close(3) = 0 [pid 5102] mkdir("./file0", 0777) = 0 [pid 5102] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5097] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5098] <... mount resumed>) = 0 [pid 5097] <... openat resumed>) = 3 [pid 5097] chdir("./file0") = 0 [pid 5097] ioctl(4, LOOP_CLR_FD) = 0 [pid 5098] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 59.964792][ T5099] NILFS (loop1): recovery complete [ 59.967676][ T5097] NILFS (loop4): recovery complete [ 59.971675][ T5102] loop2: detected capacity change from 0 to 4096 [ 59.976115][ T5100] NILFS (loop5): trying rollback from an earlier position [ 59.984380][ T5104] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 59.990657][ T5103] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5097] close(4 [pid 5098] <... openat resumed>) = 3 [pid 5098] chdir("./file0") = 0 [pid 5098] ioctl(4, LOOP_CLR_FD) = 0 [pid 5098] close(4) = 0 [pid 5097] <... close resumed>) = 0 [pid 5098] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5097] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5097] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5097] ftruncate(5, 33587195) = 0 [pid 5097] sendfile(4, 5, NULL, 281474978811909 [pid 5098] <... open resumed>) = 4 [pid 5098] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [ 60.021068][ T5101] NILFS (loop3): invalid segment: Checksum error in segment payload [ 60.030226][ T5105] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 60.032851][ T5102] NILFS (loop2): invalid segment: Checksum error in segment payload [ 60.048946][ T5101] NILFS (loop3): trying rollback from an earlier position [pid 5099] <... mount resumed>) = 0 [pid 5098] ftruncate(5, 33587195 [pid 5099] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5098] <... ftruncate resumed>) = 0 [pid 5099] chdir("./file0" [pid 5098] sendfile(4, 5, NULL, 281474978811909 [pid 5099] <... chdir resumed>) = 0 [pid 5099] ioctl(4, LOOP_CLR_FD) = 0 [pid 5099] close(4) = 0 [pid 5099] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5099] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5099] ftruncate(5, 33587195) = 0 [ 60.070717][ T5100] NILFS (loop5): recovery complete [ 60.089841][ T5102] NILFS (loop2): trying rollback from an earlier position [ 60.098077][ T5101] NILFS (loop3): recovery complete [pid 5099] sendfile(4, 5, NULL, 281474978811909 [pid 5100] <... mount resumed>) = 0 [pid 5100] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5100] chdir("./file0") = 0 [pid 5100] ioctl(4, LOOP_CLR_FD) = 0 [pid 5100] close(4) = 0 [pid 5100] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [ 60.121933][ T5107] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 60.134688][ T5106] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5100] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5100] ftruncate(5, 33587195 [pid 5101] <... mount resumed>) = 0 [pid 5100] <... ftruncate resumed>) = 0 [pid 5101] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5100] sendfile(4, 5, NULL, 281474978811909 [pid 5101] <... openat resumed>) = 3 [pid 5102] <... mount resumed>) = 0 [pid 5102] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5101] chdir("./file0") = 0 [pid 5101] ioctl(4, LOOP_CLR_FD [pid 5102] chdir("./file0" [pid 5101] <... ioctl resumed>) = 0 [pid 5101] close(4 [pid 5102] <... chdir resumed>) = 0 [pid 5101] <... close resumed>) = 0 [pid 5102] ioctl(4, LOOP_CLR_FD [pid 5101] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5102] <... ioctl resumed>) = 0 [pid 5102] close(4 [pid 5101] <... open resumed>) = 4 [pid 5102] <... close resumed>) = 0 [pid 5101] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5102] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5101] <... open resumed>) = 5 [pid 5102] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5101] ftruncate(5, 33587195 [pid 5102] <... open resumed>) = 5 [ 60.173885][ T5102] NILFS (loop2): recovery complete [ 60.185006][ T5108] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5102] ftruncate(5, 33587195 [pid 5101] <... ftruncate resumed>) = 0 [pid 5102] <... ftruncate resumed>) = 0 [pid 5101] sendfile(4, 5, NULL, 281474978811909 [pid 5102] sendfile(4, 5, NULL, 281474978811909 [pid 5098] <... sendfile resumed>) = 1048576 [pid 5098] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5098] exit_group(0) = ? [pid 5098] +++ exited with 0 +++ [pid 5102] <... sendfile resumed>) = 1048576 [pid 5097] <... sendfile resumed>) = 1048576 [pid 5102] open(NULL, O_RDONLY [pid 5097] open(NULL, O_RDONLY [pid 5102] <... open resumed>) = -1 EFAULT (Bad address) [pid 5097] <... open resumed>) = -1 EFAULT (Bad address) [pid 5102] exit_group(0 [pid 5097] exit_group(0 [pid 5102] <... exit_group resumed>) = ? [pid 5097] <... exit_group resumed>) = ? [pid 5099] <... sendfile resumed>) = 1048576 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5098, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5099] open(NULL, O_RDONLY [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 5099] <... open resumed>) = -1 EFAULT (Bad address) [pid 5062] <... restart_syscall resumed>) = 0 [pid 5099] exit_group(0 [pid 5097] +++ exited with 0 +++ [pid 5102] +++ exited with 0 +++ [pid 5099] <... exit_group resumed>) = ? [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5097, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5102, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5101] <... sendfile resumed>) = 1048576 [pid 5099] +++ exited with 0 +++ [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5062] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5101] open(NULL, O_RDONLY [pid 5066] <... restart_syscall resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5099, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5101] <... open resumed>) = -1 EFAULT (Bad address) [pid 5064] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5101] exit_group(0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... openat resumed>) = 3 [pid 5101] <... exit_group resumed>) = ? [pid 5066] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] fstat(3, [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... openat resumed>) = 3 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] fstat(3, [pid 5101] +++ exited with 0 +++ [pid 5062] getdents64(3, [pid 5066] <... openat resumed>) = 3 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] fstat(3, [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5101, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5064] getdents64(3, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(3, [pid 5065] <... restart_syscall resumed>) = 0 [pid 5064] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5062] lstat("./2/binderfs", [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] fstat(3, [pid 5062] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] lstat("./2/binderfs", [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] unlink("./2/binderfs" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] getdents64(3, [pid 5062] <... unlink resumed>) = 0 [pid 5066] lstat("./2/binderfs", [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] unlink("./2/binderfs" [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... unlink resumed>) = 0 [pid 5063] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] unlink("./2/binderfs" [pid 5065] <... openat resumed>) = 3 [pid 5064] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... unlink resumed>) = 0 [pid 5065] fstat(3, [pid 5063] lstat("./2/binderfs", [pid 5066] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] getdents64(3, [pid 5063] unlink("./2/binderfs" [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] <... unlink resumed>) = 0 [pid 5065] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./2/binderfs") = 0 [pid 5065] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5100] <... sendfile resumed>) = 1048576 [pid 5100] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5100] exit_group(0) = ? [pid 5100] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5100, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5067] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... umount2 resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5062] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] fstat(3, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] lstat("./2/file0", [pid 5067] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./2/binderfs") = 0 [pid 5067] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./2/file0") = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./2") = 0 [pid 5062] mkdir("./3", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5064] <... umount2 resumed>) = 0 [pid 5062] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5109 [pid 5064] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] <... umount2 resumed>) = 0 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./2/file0"./strace-static-x86_64: Process 5109 attached [pid 5109] chdir("./3" [pid 5064] <... rmdir resumed>) = 0 [pid 5109] <... chdir resumed>) = 0 [pid 5065] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] getdents64(3, [pid 5109] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5065] lstat("./2/file0", [pid 5064] close(3 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... close resumed>) = 0 [pid 5065] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] rmdir("./2" [pid 5109] <... prctl resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... rmdir resumed>) = 0 [pid 5109] setpgid(0, 0 [pid 5065] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] mkdir("./3", 0777 [pid 5109] <... setpgid resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5064] <... mkdir resumed>) = 0 [pid 5065] fstat(4, [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5065] getdents64(4, [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5109] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5109] <... openat resumed>) = 3 [pid 5065] close(4 [pid 5064] close(3 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./2/file0" [pid 5064] <... close resumed>) = 0 [pid 5109] write(3, "1000", 4 [pid 5065] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5109] <... write resumed>) = 4 [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5109] close(3 [pid 5065] close(3) = 0 [pid 5109] <... close resumed>) = 0 [pid 5065] rmdir("./2" [pid 5064] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5110 [pid 5109] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... rmdir resumed>) = 0 [pid 5065] mkdir("./3", 0777 [pid 5109] <... symlink resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5109] memfd_create("syzkaller", 0 [pid 5065] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = 0 [pid 5109] <... memfd_create resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5109] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5109] <... mmap resumed>) = 0x7ff395729000 [pid 5065] close(3) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] lstat("./2/file0", [pid 5065] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5111 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5110 attached [pid 5063] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5110] chdir("./3") = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5110] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5110] <... prctl resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5110] setpgid(0, 0 [pid 5063] fstat(4, [pid 5110] <... setpgid resumed>) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5110] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] getdents64(4, [pid 5110] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5111 attached [pid 5110] write(3, "1000", 4 [pid 5063] getdents64(4, [pid 5110] <... write resumed>) = 4 [pid 5066] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5111] chdir("./3" [pid 5110] close(3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] close(4 [pid 5111] <... chdir resumed>) = 0 [pid 5110] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5110] symlink("/dev/binderfs", "./binderfs" [pid 5063] rmdir("./2/file0" [pid 5111] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5110] <... symlink resumed>) = 0 [pid 5066] lstat("./2/file0", [pid 5063] <... rmdir resumed>) = 0 [pid 5111] <... prctl resumed>) = 0 [pid 5110] memfd_create("syzkaller", 0 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, [pid 5111] setpgid(0, 0 [pid 5110] <... memfd_create resumed>) = 3 [pid 5066] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5111] <... setpgid resumed>) = 0 [pid 5110] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] close(3 [pid 5111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5110] <... mmap resumed>) = 0x7ff395729000 [pid 5066] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... close resumed>) = 0 [pid 5111] <... openat resumed>) = 3 [pid 5063] rmdir("./2" [pid 5111] write(3, "1000", 4 [pid 5066] <... openat resumed>) = 4 [pid 5063] <... rmdir resumed>) = 0 [pid 5111] <... write resumed>) = 4 [pid 5066] fstat(4, [pid 5063] mkdir("./3", 0777 [pid 5111] close(3 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5111] <... close resumed>) = 0 [pid 5066] getdents64(4, [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5111] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] <... openat resumed>) = 3 [pid 5111] <... symlink resumed>) = 0 [pid 5110] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] getdents64(4, [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5111] memfd_create("syzkaller", 0 [pid 5066] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5111] <... memfd_create resumed>) = 3 [pid 5066] close(4 [pid 5063] close(3 [pid 5111] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5066] rmdir("./2/file0" [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5111] <... mmap resumed>) = 0x7ff395729000 [pid 5066] <... rmdir resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5112 [pid 5066] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./2"./strace-static-x86_64: Process 5112 attached [pid 5112] chdir("./3" [pid 5066] <... rmdir resumed>) = 0 [pid 5112] <... chdir resumed>) = 0 [pid 5109] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] <... umount2 resumed>) = 0 [pid 5066] mkdir("./3", 0777 [pid 5112] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5112] setpgid(0, 0) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5112] <... openat resumed>) = 3 [pid 5112] write(3, "1000", 4 [pid 5066] <... openat resumed>) = 3 [pid 5112] <... write resumed>) = 4 [pid 5112] close(3 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5112] <... close resumed>) = 0 [pid 5067] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] close(3 [pid 5112] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... close resumed>) = 0 [pid 5112] <... symlink resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5112] memfd_create("syzkaller", 0 [pid 5067] lstat("./2/file0", [pid 5112] <... memfd_create resumed>) = 3 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5113 [pid 5112] <... mmap resumed>) = 0x7ff395729000 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5113 attached [pid 5067] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5113] chdir("./3" [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5113] <... chdir resumed>) = 0 [pid 5067] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5113] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] getdents64(4, [pid 5113] <... prctl resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5113] setpgid(0, 0 [pid 5067] close(4 [pid 5113] <... setpgid resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./2/file0" [pid 5113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... rmdir resumed>) = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5113] <... openat resumed>) = 3 [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./2" [pid 5113] write(3, "1000", 4 [pid 5067] <... rmdir resumed>) = 0 [pid 5113] <... write resumed>) = 4 [pid 5067] mkdir("./3", 0777 [pid 5113] close(3 [pid 5111] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5109] <... write resumed>) = 2097152 [pid 5067] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5113] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5113] symlink("/dev/binderfs", "./binderfs" [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5113] <... symlink resumed>) = 0 [pid 5112] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] close(3) = 0 [pid 5113] memfd_create("syzkaller", 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5113] <... memfd_create resumed>) = 3 [pid 5113] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5114 [pid 5113] <... mmap resumed>) = 0x7ff395729000 ./strace-static-x86_64: Process 5114 attached [pid 5114] chdir("./3") = 0 [pid 5114] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5114] setpgid(0, 0) = 0 [pid 5114] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5114] write(3, "1000", 4) = 4 [pid 5114] close(3) = 0 [pid 5114] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5110] <... write resumed>) = 2097152 [pid 5114] memfd_create("syzkaller", 0) = 3 [pid 5114] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5113] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5109] munmap(0x7ff395729000, 2097152 [pid 5110] munmap(0x7ff395729000, 2097152) = 0 [pid 5109] <... munmap resumed>) = 0 [pid 5110] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5109] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5110] <... openat resumed>) = 4 [pid 5110] ioctl(4, LOOP_SET_FD, 3 [pid 5109] <... openat resumed>) = 4 [pid 5110] <... ioctl resumed>) = 0 [pid 5109] ioctl(4, LOOP_SET_FD, 3 [pid 5110] close(3) = 0 [pid 5110] mkdir("./file0", 0777) = 0 [pid 5110] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5111] <... write resumed>) = 2097152 [pid 5109] <... ioctl resumed>) = 0 [pid 5109] close(3 [pid 5111] munmap(0x7ff395729000, 2097152 [pid 5109] <... close resumed>) = 0 [pid 5114] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5112] <... write resumed>) = 2097152 [pid 5111] <... munmap resumed>) = 0 [pid 5109] mkdir("./file0", 0777 [pid 5111] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5109] <... mkdir resumed>) = 0 [ 61.700950][ T5110] loop2: detected capacity change from 0 to 4096 [ 61.722025][ T5109] loop0: detected capacity change from 0 to 4096 [pid 5113] <... write resumed>) = 2097152 [pid 5111] <... openat resumed>) = 4 [pid 5109] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5113] munmap(0x7ff395729000, 2097152 [pid 5111] ioctl(4, LOOP_SET_FD, 3 [pid 5112] munmap(0x7ff395729000, 2097152) = 0 [pid 5112] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5112] ioctl(4, LOOP_SET_FD, 3 [pid 5113] <... munmap resumed>) = 0 [pid 5113] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5113] ioctl(4, LOOP_SET_FD, 3 [pid 5112] <... ioctl resumed>) = 0 [pid 5112] close(3) = 0 [pid 5112] mkdir("./file0", 0777) = 0 [pid 5112] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5111] <... ioctl resumed>) = 0 [pid 5111] close(3) = 0 [pid 5111] mkdir("./file0", 0777) = 0 [pid 5113] <... ioctl resumed>) = 0 [pid 5113] close(3 [pid 5111] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5113] <... close resumed>) = 0 [pid 5113] mkdir("./file0", 0777) = 0 [ 61.758651][ T5110] NILFS (loop2): invalid segment: Checksum error in segment payload [ 61.769217][ T5111] loop3: detected capacity change from 0 to 4096 [ 61.773939][ T5112] loop1: detected capacity change from 0 to 4096 [ 61.784905][ T5113] loop4: detected capacity change from 0 to 4096 [ 61.784948][ T5110] NILFS (loop2): trying rollback from an earlier position [ 61.791970][ T5109] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5113] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5114] <... write resumed>) = 2097152 [ 61.828678][ T5112] NILFS (loop1): invalid segment: Checksum error in segment payload [ 61.838610][ T5112] NILFS (loop1): trying rollback from an earlier position [ 61.848890][ T5110] NILFS (loop2): recovery complete [ 61.858162][ T5111] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5110] <... mount resumed>) = 0 [pid 5110] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5110] chdir("./file0") = 0 [pid 5110] ioctl(4, LOOP_CLR_FD) = 0 [pid 5110] close(4) = 0 [pid 5110] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5110] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5114] munmap(0x7ff395729000, 2097152 [pid 5110] ftruncate(5, 33587195) = 0 [pid 5110] sendfile(4, 5, NULL, 281474978811909 [pid 5114] <... munmap resumed>) = 0 [pid 5114] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 61.871697][ T5113] NILFS (loop4): invalid segment: Checksum error in segment payload [ 61.883397][ T5115] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 61.901228][ T5109] NILFS (loop0): trying rollback from an earlier position [ 61.911205][ T5111] NILFS (loop3): trying rollback from an earlier position [ 61.913102][ T5113] NILFS (loop4): trying rollback from an earlier position [pid 5114] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5114] close(3) = 0 [pid 5114] mkdir("./file0", 0777) = 0 [ 61.930487][ T5112] NILFS (loop1): recovery complete [ 61.939935][ T5114] loop5: detected capacity change from 0 to 4096 [ 61.948202][ T5111] NILFS (loop3): recovery complete [ 61.965300][ T5116] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 61.965592][ T5109] NILFS (loop0): recovery complete [pid 5114] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5112] <... mount resumed>) = 0 [pid 5112] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5112] chdir("./file0") = 0 [pid 5112] ioctl(4, LOOP_CLR_FD) = 0 [pid 5112] close(4) = 0 [pid 5113] <... mount resumed>) = 0 [pid 5112] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5112] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5113] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5112] ftruncate(5, 33587195) = 0 [pid 5112] sendfile(4, 5, NULL, 281474978811909 [pid 5113] <... openat resumed>) = 3 [pid 5113] chdir("./file0" [pid 5109] <... mount resumed>) = 0 [pid 5113] <... chdir resumed>) = 0 [pid 5113] ioctl(4, LOOP_CLR_FD [ 61.982406][ T5113] NILFS (loop4): recovery complete [ 61.998618][ T5117] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 62.006604][ T5114] NILFS (loop5): invalid segment: Checksum error in segment payload [ 62.014494][ T5118] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5109] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5113] <... ioctl resumed>) = 0 [pid 5109] <... openat resumed>) = 3 [pid 5113] close(4 [pid 5111] <... mount resumed>) = 0 [pid 5114] <... mount resumed>) = 0 [pid 5109] chdir("./file0" [pid 5114] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5111] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5114] <... openat resumed>) = 3 [pid 5111] <... openat resumed>) = 3 [pid 5114] chdir("./file0" [pid 5111] chdir("./file0" [pid 5114] <... chdir resumed>) = 0 [pid 5111] <... chdir resumed>) = 0 [pid 5114] ioctl(4, LOOP_CLR_FD [pid 5111] ioctl(4, LOOP_CLR_FD [pid 5114] <... ioctl resumed>) = 0 [pid 5111] <... ioctl resumed>) = 0 [pid 5114] close(4 [pid 5111] close(4 [pid 5114] <... close resumed>) = 0 [pid 5113] <... close resumed>) = 0 [pid 5109] <... chdir resumed>) = 0 [pid 5113] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5109] ioctl(4, LOOP_CLR_FD [pid 5111] <... close resumed>) = 0 [pid 5114] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5113] <... open resumed>) = 4 [pid 5111] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5109] <... ioctl resumed>) = 0 [pid 5113] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5109] close(4 [pid 5111] <... open resumed>) = 4 [pid 5109] <... close resumed>) = 0 [pid 5114] <... open resumed>) = 4 [pid 5113] <... open resumed>) = 5 [pid 5109] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5111] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5109] <... open resumed>) = 4 [pid 5114] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5113] ftruncate(5, 33587195 [pid 5111] <... open resumed>) = 5 [pid 5109] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5114] <... open resumed>) = 5 [pid 5113] <... ftruncate resumed>) = 0 [pid 5111] ftruncate(5, 33587195 [pid 5109] <... open resumed>) = 5 [ 62.039364][ T5114] NILFS (loop5): trying rollback from an earlier position [ 62.053715][ T5114] NILFS (loop5): recovery complete [ 62.054007][ T5119] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 62.071420][ T5120] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5113] sendfile(4, 5, NULL, 281474978811909 [pid 5111] <... ftruncate resumed>) = 0 [pid 5109] ftruncate(5, 33587195) = 0 [pid 5111] sendfile(4, 5, NULL, 281474978811909 [pid 5109] sendfile(4, 5, NULL, 281474978811909 [pid 5114] ftruncate(5, 33587195) = 0 [pid 5114] sendfile(4, 5, NULL, 281474978811909 [pid 5110] <... sendfile resumed>) = 1048576 [pid 5110] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5110] exit_group(0) = ? [pid 5110] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5110, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5064] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5112] <... sendfile resumed>) = 1048576 [pid 5064] fstat(3, [pid 5112] open(NULL, O_RDONLY [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5112] <... open resumed>) = -1 EFAULT (Bad address) [pid 5064] getdents64(3, [pid 5112] exit_group(0 [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5112] <... exit_group resumed>) = ? [pid 5064] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5112] +++ exited with 0 +++ [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./3/binderfs", [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5112, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./3/binderfs") = 0 [pid 5063] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./3/binderfs") = 0 [pid 5114] <... sendfile resumed>) = 1048576 [pid 5063] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5114] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5113] <... sendfile resumed>) = 1048576 [pid 5114] exit_group(0 [pid 5113] open(NULL, O_RDONLY [pid 5114] <... exit_group resumed>) = ? [pid 5113] <... open resumed>) = -1 EFAULT (Bad address) [pid 5111] <... sendfile resumed>) = 1048576 [pid 5111] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5114] +++ exited with 0 +++ [pid 5113] exit_group(0 [pid 5111] exit_group(0 [pid 5113] <... exit_group resumed>) = ? [pid 5111] <... exit_group resumed>) = ? [pid 5109] <... sendfile resumed>) = 1048576 [pid 5113] +++ exited with 0 +++ [pid 5111] +++ exited with 0 +++ [pid 5109] open(NULL, O_RDONLY [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5114, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5109] <... open resumed>) = -1 EFAULT (Bad address) [pid 5067] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5109] exit_group(0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5113, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5111, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5109] <... exit_group resumed>) = ? [pid 5067] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5109] +++ exited with 0 +++ [pid 5067] <... openat resumed>) = 3 [pid 5066] <... restart_syscall resumed>) = 0 [pid 5065] <... restart_syscall resumed>) = 0 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5109, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5067] getdents64(3, [pid 5066] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... openat resumed>) = 3 [pid 5065] <... openat resumed>) = 3 [pid 5062] <... openat resumed>) = 3 [pid 5067] lstat("./3/binderfs", [pid 5066] fstat(3, [pid 5065] fstat(3, [pid 5062] fstat(3, [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] unlink("./3/binderfs" [pid 5066] getdents64(3, [pid 5065] getdents64(3, [pid 5062] getdents64(3, [pid 5067] <... unlink resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./3/binderfs", [pid 5065] lstat("./3/binderfs", [pid 5062] lstat("./3/binderfs", [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./3/binderfs" [pid 5065] unlink("./3/binderfs" [pid 5062] unlink("./3/binderfs" [pid 5066] <... unlink resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 5066] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./3/file0") = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./3") = 0 [pid 5064] mkdir("./4", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5121 [pid 5063] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, ./strace-static-x86_64: Process 5121 attached 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5121] chdir("./4" [pid 5063] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5121] <... chdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5121] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5121] setpgid(0, 0) = 0 [pid 5063] rmdir("./3/file0" [pid 5121] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5121] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./3" [pid 5121] write(3, "1000", 4) = 4 [pid 5121] close(3 [pid 5063] <... rmdir resumed>) = 0 [pid 5121] <... close resumed>) = 0 [pid 5121] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5063] mkdir("./4", 0777 [pid 5121] memfd_create("syzkaller", 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5121] <... memfd_create resumed>) = 3 [pid 5121] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5122 ./strace-static-x86_64: Process 5122 attached [pid 5122] chdir("./4") = 0 [pid 5122] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... umount2 resumed>) = 0 [pid 5122] <... prctl resumed>) = 0 [pid 5122] setpgid(0, 0) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5066] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5122] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5122] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./3/file0", [pid 5122] write(3, "1000", 4 [pid 5067] lstat("./3/file0", [pid 5122] <... write resumed>) = 4 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5122] close(3 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5122] <... close resumed>) = 0 [pid 5067] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5122] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5122] <... symlink resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5122] memfd_create("syzkaller", 0 [pid 5067] <... openat resumed>) = 4 [pid 5122] <... memfd_create resumed>) = 3 [pid 5122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] <... openat resumed>) = 4 [pid 5122] <... mmap resumed>) = 0x7ff395729000 [pid 5067] fstat(4, [pid 5066] fstat(4, [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, [pid 5067] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] close(4 [pid 5066] getdents64(4, [pid 5067] <... close resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] rmdir("./3/file0" [pid 5066] close(4 [pid 5121] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5067] getdents64(3, [pid 5066] rmdir("./3/file0" [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5066] <... rmdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5122] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] <... close resumed>) = 0 [pid 5066] getdents64(3, [pid 5062] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] rmdir("./3" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] close(3 [pid 5067] <... rmdir resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] mkdir("./4", 0777 [pid 5066] <... close resumed>) = 0 [pid 5062] lstat("./3/file0", [pid 5067] <... mkdir resumed>) = 0 [pid 5066] rmdir("./3" [pid 5062] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5066] <... rmdir resumed>) = 0 [pid 5062] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 3 [pid 5066] mkdir("./4", 0777 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5065] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] <... mkdir resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5062] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] close(3 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... openat resumed>) = 4 [pid 5067] <... close resumed>) = 0 [pid 5062] fstat(4, [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... openat resumed>) = 3 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5062] getdents64(4, [pid 5067] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5123 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5062] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] close(3 [pid 5062] getdents64(4, [pid 5066] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5065] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] close(4 [pid 5065] close(4 [pid 5062] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5124 [pid 5062] rmdir("./3/file0"./strace-static-x86_64: Process 5124 attached [pid 5065] rmdir("./3/file0" [pid 5062] <... rmdir resumed>) = 0 [pid 5124] chdir("./4" [pid 5065] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, ./strace-static-x86_64: Process 5123 attached [pid 5124] <... chdir resumed>) = 0 [pid 5065] getdents64(3, [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5124] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5123] chdir("./4" [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 5124] <... prctl resumed>) = 0 [pid 5123] <... chdir resumed>) = 0 [pid 5065] close(3 [pid 5062] <... close resumed>) = 0 [pid 5124] setpgid(0, 0 [pid 5123] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... close resumed>) = 0 [pid 5062] rmdir("./3" [pid 5124] <... setpgid resumed>) = 0 [pid 5123] <... prctl resumed>) = 0 [pid 5065] rmdir("./3" [pid 5124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5123] setpgid(0, 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5124] <... openat resumed>) = 3 [pid 5123] <... setpgid resumed>) = 0 [pid 5122] <... write resumed>) = 2097152 [pid 5065] mkdir("./4", 0777 [pid 5062] mkdir("./4", 0777 [pid 5124] write(3, "1000", 4 [pid 5123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5122] munmap(0x7ff395729000, 2097152 [pid 5065] <... mkdir resumed>) = 0 [pid 5124] <... write resumed>) = 4 [pid 5123] <... openat resumed>) = 3 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5062] <... mkdir resumed>) = 0 [pid 5124] close(3 [pid 5123] write(3, "1000", 4 [pid 5122] <... munmap resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5124] <... close resumed>) = 0 [pid 5123] <... write resumed>) = 4 [pid 5122] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5124] symlink("/dev/binderfs", "./binderfs" [pid 5123] close(3 [pid 5122] <... openat resumed>) = 4 [pid 5121] <... write resumed>) = 2097152 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5062] <... openat resumed>) = 3 [pid 5124] <... symlink resumed>) = 0 [pid 5065] close(3 [pid 5124] memfd_create("syzkaller", 0 [pid 5123] <... close resumed>) = 0 [pid 5122] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... close resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5124] <... memfd_create resumed>) = 3 [pid 5123] symlink("/dev/binderfs", "./binderfs" [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5065] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5125 [pid 5123] <... symlink resumed>) = 0 [pid 5122] <... ioctl resumed>) = 0 [pid 5121] munmap(0x7ff395729000, 2097152 [pid 5062] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5123] memfd_create("syzkaller", 0 [pid 5062] close(3 [pid 5123] <... memfd_create resumed>) = 3 [pid 5062] <... close resumed>) = 0 [pid 5123] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5122] close(3 [pid 5121] <... munmap resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5125 attached [pid 5123] <... mmap resumed>) = 0x7ff395729000 [pid 5125] chdir("./4") = 0 [pid 5125] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5125] setpgid(0, 0 [pid 5124] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5125] <... setpgid resumed>) = 0 [pid 5125] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5122] <... close resumed>) = 0 [pid 5121] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5126 [pid 5125] <... openat resumed>) = 3 [pid 5122] mkdir("./file0", 0777 [pid 5121] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5126 attached [pid 5125] write(3, "1000", 4 [pid 5121] ioctl(4, LOOP_SET_FD, 3 [pid 5122] <... mkdir resumed>) = 0 [pid 5126] chdir("./4" [pid 5125] <... write resumed>) = 4 [pid 5126] <... chdir resumed>) = 0 [pid 5125] close(3 [pid 5126] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5125] <... close resumed>) = 0 [pid 5126] <... prctl resumed>) = 0 [pid 5125] symlink("/dev/binderfs", "./binderfs" [pid 5126] setpgid(0, 0 [pid 5125] <... symlink resumed>) = 0 [pid 5126] <... setpgid resumed>) = 0 [pid 5125] memfd_create("syzkaller", 0 [pid 5126] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5125] <... memfd_create resumed>) = 3 [pid 5126] <... openat resumed>) = 3 [pid 5125] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5122] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5126] write(3, "1000", 4 [pid 5125] <... mmap resumed>) = 0x7ff395729000 [pid 5126] <... write resumed>) = 4 [pid 5126] close(3 [pid 5121] <... ioctl resumed>) = 0 [pid 5126] <... close resumed>) = 0 [pid 5121] close(3 [pid 5126] symlink("/dev/binderfs", "./binderfs" [pid 5121] <... close resumed>) = 0 [pid 5126] <... symlink resumed>) = 0 [pid 5121] mkdir("./file0", 0777 [pid 5126] memfd_create("syzkaller", 0) = 3 [pid 5121] <... mkdir resumed>) = 0 [ 63.442028][ T5122] loop1: detected capacity change from 0 to 4096 [ 63.475140][ T5121] loop2: detected capacity change from 0 to 4096 [pid 5126] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5121] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5126] <... mmap resumed>) = 0x7ff395729000 [pid 5123] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5125] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5126] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5124] <... write resumed>) = 2097152 [ 63.514237][ T5122] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5124] munmap(0x7ff395729000, 2097152) = 0 [pid 5124] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5124] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5124] close(3) = 0 [pid 5125] <... write resumed>) = 2097152 [ 63.571475][ T5122] NILFS (loop1): trying rollback from an earlier position [ 63.586196][ T5124] loop4: detected capacity change from 0 to 4096 [ 63.595484][ T5121] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5124] mkdir("./file0", 0777) = 0 [pid 5124] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5125] munmap(0x7ff395729000, 2097152 [pid 5123] <... write resumed>) = 2097152 [pid 5123] munmap(0x7ff395729000, 2097152 [pid 5125] <... munmap resumed>) = 0 [pid 5125] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5126] <... write resumed>) = 2097152 [pid 5125] <... openat resumed>) = 4 [pid 5125] ioctl(4, LOOP_SET_FD, 3 [pid 5123] <... munmap resumed>) = 0 [pid 5125] <... ioctl resumed>) = 0 [pid 5121] <... mount resumed>) = 0 [pid 5126] munmap(0x7ff395729000, 2097152) = 0 [ 63.620856][ T5121] NILFS (loop2): trying rollback from an earlier position [ 63.633824][ T5122] NILFS (loop1): recovery complete [ 63.642501][ T5121] NILFS (loop2): recovery complete [ 63.650736][ T5125] loop3: detected capacity change from 0 to 4096 [ 63.652412][ T5127] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5126] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5125] close(3 [pid 5123] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5121] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5126] <... openat resumed>) = 4 [pid 5125] <... close resumed>) = 0 [pid 5123] <... openat resumed>) = 4 [pid 5121] <... openat resumed>) = 3 [pid 5126] ioctl(4, LOOP_SET_FD, 3 [pid 5125] mkdir("./file0", 0777 [pid 5123] ioctl(4, LOOP_SET_FD, 3 [pid 5121] chdir("./file0" [pid 5126] <... ioctl resumed>) = 0 [pid 5125] <... mkdir resumed>) = 0 [pid 5123] <... ioctl resumed>) = 0 [pid 5122] <... mount resumed>) = 0 [pid 5121] <... chdir resumed>) = 0 [pid 5126] close(3 [pid 5125] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5123] close(3 [pid 5122] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5121] ioctl(4, LOOP_CLR_FD [pid 5126] <... close resumed>) = 0 [pid 5126] mkdir("./file0", 0777) = 0 [pid 5123] <... close resumed>) = 0 [pid 5122] <... openat resumed>) = 3 [pid 5121] <... ioctl resumed>) = 0 [ 63.661201][ T5124] NILFS (loop4): invalid segment: Checksum error in segment payload [ 63.672480][ T5123] loop5: detected capacity change from 0 to 4096 [ 63.676288][ T5124] NILFS (loop4): trying rollback from an earlier position [ 63.684873][ T5126] loop0: detected capacity change from 0 to 4096 [ 63.689241][ T5128] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 63.705046][ T5125] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5126] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5123] mkdir("./file0", 0777 [pid 5122] chdir("./file0" [pid 5121] close(4 [pid 5124] <... mount resumed>) = 0 [pid 5123] <... mkdir resumed>) = 0 [pid 5122] <... chdir resumed>) = 0 [pid 5121] <... close resumed>) = 0 [pid 5124] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5123] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5122] ioctl(4, LOOP_CLR_FD [pid 5121] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5124] <... openat resumed>) = 3 [pid 5124] chdir("./file0") = 0 [pid 5124] ioctl(4, LOOP_CLR_FD) = 0 [pid 5124] close(4) = 0 [ 63.716228][ T5125] NILFS (loop3): trying rollback from an earlier position [ 63.721211][ T5124] NILFS (loop4): recovery complete [ 63.733718][ T5129] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 63.733989][ T5125] NILFS (loop3): recovery complete [ 63.755103][ T5126] NILFS (loop0): invalid segment: Checksum error in segment payload [ 63.764714][ T5126] NILFS (loop0): trying rollback from an earlier position [pid 5125] <... mount resumed>) = 0 [pid 5124] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5122] <... ioctl resumed>) = 0 [pid 5125] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5124] <... open resumed>) = 4 [pid 5125] <... openat resumed>) = 3 [pid 5124] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5125] chdir("./file0" [pid 5124] <... open resumed>) = 5 [pid 5125] <... chdir resumed>) = 0 [pid 5124] ftruncate(5, 33587195 [pid 5122] close(4 [pid 5121] <... open resumed>) = 4 [pid 5125] ioctl(4, LOOP_CLR_FD [pid 5124] <... ftruncate resumed>) = 0 [pid 5122] <... close resumed>) = 0 [pid 5121] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5125] <... ioctl resumed>) = 0 [pid 5124] sendfile(4, 5, NULL, 281474978811909 [pid 5122] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5121] <... open resumed>) = 5 [pid 5125] close(4 [pid 5121] ftruncate(5, 33587195 [pid 5125] <... close resumed>) = 0 [pid 5122] <... open resumed>) = 4 [pid 5121] <... ftruncate resumed>) = 0 [pid 5125] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5122] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5121] sendfile(4, 5, NULL, 281474978811909 [pid 5125] <... open resumed>) = 4 [pid 5122] <... open resumed>) = 5 [pid 5125] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [ 63.769582][ T5123] NILFS (loop5): invalid segment: Checksum error in segment payload [ 63.772267][ T5130] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 63.789197][ T5123] NILFS (loop5): trying rollback from an earlier position [pid 5122] ftruncate(5, 33587195 [pid 5125] <... open resumed>) = 5 [pid 5122] <... ftruncate resumed>) = 0 [pid 5125] ftruncate(5, 33587195 [pid 5122] sendfile(4, 5, NULL, 281474978811909 [pid 5125] <... ftruncate resumed>) = 0 [pid 5125] sendfile(4, 5, NULL, 281474978811909 [pid 5126] <... mount resumed>) = 0 [pid 5126] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5126] chdir("./file0") = 0 [pid 5126] ioctl(4, LOOP_CLR_FD) = 0 [pid 5126] close(4) = 0 [ 63.860532][ T5126] NILFS (loop0): recovery complete [ 63.871586][ T5123] NILFS (loop5): recovery complete [ 63.879684][ T5131] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5126] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5126] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5126] ftruncate(5, 33587195 [pid 5123] <... mount resumed>) = 0 [pid 5123] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5123] chdir("./file0") = 0 [pid 5123] ioctl(4, LOOP_CLR_FD) = 0 [pid 5123] close(4) = 0 [pid 5123] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5126] <... ftruncate resumed>) = 0 [pid 5123] <... open resumed>) = 4 [pid 5126] sendfile(4, 5, NULL, 281474978811909 [pid 5123] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5123] ftruncate(5, 33587195) = 0 [ 63.949027][ T5132] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5123] sendfile(4, 5, NULL, 281474978811909 [pid 5124] <... sendfile resumed>) = 1048576 [pid 5124] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5124] exit_group(0) = ? [pid 5124] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5124, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5066] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./4/binderfs" [pid 5122] <... sendfile resumed>) = 1048576 [pid 5066] <... unlink resumed>) = 0 [pid 5122] open(NULL, O_RDONLY [pid 5066] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5122] <... open resumed>) = -1 EFAULT (Bad address) [pid 5122] exit_group(0) = ? [pid 5122] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5122, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5063] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5121] <... sendfile resumed>) = 1048576 [pid 5063] <... openat resumed>) = 3 [pid 5121] open(NULL, O_RDONLY [pid 5063] fstat(3, [pid 5121] <... open resumed>) = -1 EFAULT (Bad address) [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5121] exit_group(0 [pid 5063] getdents64(3, [pid 5121] <... exit_group resumed>) = ? [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5121] +++ exited with 0 +++ [pid 5063] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5121, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5063] lstat("./4/binderfs", [pid 5064] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] unlink("./4/binderfs" [pid 5064] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... unlink resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5063] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5125] <... sendfile resumed>) = 1048576 [pid 5064] fstat(3, [pid 5125] open(NULL, O_RDONLY [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5125] <... open resumed>) = -1 EFAULT (Bad address) [pid 5064] getdents64(3, [pid 5125] exit_group(0 [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5125] <... exit_group resumed>) = ? [pid 5064] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5125] +++ exited with 0 +++ [pid 5064] lstat("./4/binderfs", [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5125, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./4/binderfs") = 0 [pid 5064] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = 0 [pid 5065] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./4/binderfs") = 0 [pid 5065] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5123] <... sendfile resumed>) = 1048576 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5126] <... sendfile resumed>) = 1048576 [pid 5123] open(NULL, O_RDONLY [pid 5126] open(NULL, O_RDONLY [pid 5123] <... open resumed>) = -1 EFAULT (Bad address) [pid 5126] <... open resumed>) = -1 EFAULT (Bad address) [pid 5123] exit_group(0 [pid 5066] lstat("./4/file0", [pid 5126] exit_group(0 [pid 5123] <... exit_group resumed>) = ? [pid 5126] <... exit_group resumed>) = ? [pid 5126] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5126, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5123] +++ exited with 0 +++ [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5123, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5066] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... restart_syscall resumed>) = 0 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... restart_syscall resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] fstat(4, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] getdents64(4, [pid 5062] <... openat resumed>) = 3 [pid 5067] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] fstat(3, [pid 5067] <... openat resumed>) = 3 [pid 5066] getdents64(4, [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] fstat(3, [pid 5066] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] getdents64(3, [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] close(4 [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] getdents64(3, [pid 5066] <... close resumed>) = 0 [pid 5062] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] rmdir("./4/file0" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] lstat("./4/binderfs", [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... rmdir resumed>) = 0 [pid 5062] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] lstat("./4/binderfs", [pid 5066] getdents64(3, [pid 5062] unlink("./4/binderfs" [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 5067] unlink("./4/binderfs" [pid 5062] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... unlink resumed>) = 0 [pid 5067] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(3) = 0 [pid 5066] rmdir("./4") = 0 [pid 5066] mkdir("./5", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5133 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5133 attached [pid 5064] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5133] chdir("./5") = 0 [pid 5133] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5133] setpgid(0, 0) = 0 [pid 5064] fstat(4, [pid 5133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5133] write(3, "1000", 4) = 4 [pid 5133] close(3) = 0 [pid 5133] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5133] <... symlink resumed>) = 0 [pid 5133] memfd_create("syzkaller", 0 [pid 5064] getdents64(4, [pid 5133] <... memfd_create resumed>) = 3 [pid 5133] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5063] <... umount2 resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./4/file0") = 0 [pid 5063] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./4/file0", [pid 5064] getdents64(3, [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] close(3 [pid 5063] <... openat resumed>) = 4 [pid 5064] <... close resumed>) = 0 [pid 5063] fstat(4, [pid 5064] rmdir("./4" [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5064] mkdir("./5", 0777 [pid 5063] rmdir("./4/file0" [pid 5064] <... mkdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5065] <... umount2 resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] <... close resumed>) = 0 [pid 5065] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... openat resumed>) = 3 [pid 5063] rmdir("./4" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] <... rmdir resumed>) = 0 [pid 5065] lstat("./4/file0", [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] mkdir("./5", 0777 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] close(3 [pid 5065] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... close resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5133] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... openat resumed>) = 4 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... openat resumed>) = 3 [pid 5065] fstat(4, [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] getdents64(4, [pid 5063] close(3 [pid 5065] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5134 [pid 5063] <... close resumed>) = 0 [pid 5065] getdents64(4, [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5065] close(4./strace-static-x86_64: Process 5134 attached ) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5135 [pid 5065] rmdir("./4/file0" [pid 5134] chdir("./5" [pid 5065] <... rmdir resumed>) = 0 [pid 5134] <... chdir resumed>) = 0 [pid 5065] getdents64(3, [pid 5134] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5134] <... prctl resumed>) = 0 [pid 5065] close(3./strace-static-x86_64: Process 5135 attached [pid 5134] setpgid(0, 0 [pid 5065] <... close resumed>) = 0 [pid 5134] <... setpgid resumed>) = 0 [pid 5065] rmdir("./4" [pid 5135] chdir("./5") = 0 [pid 5134] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... rmdir resumed>) = 0 [pid 5135] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5134] <... openat resumed>) = 3 [pid 5065] mkdir("./5", 0777 [pid 5135] <... prctl resumed>) = 0 [pid 5134] write(3, "1000", 4 [pid 5135] setpgid(0, 0 [pid 5134] <... write resumed>) = 4 [pid 5065] <... mkdir resumed>) = 0 [pid 5135] <... setpgid resumed>) = 0 [pid 5134] close(3 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5135] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5134] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5135] <... openat resumed>) = 3 [pid 5134] symlink("/dev/binderfs", "./binderfs" [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5135] write(3, "1000", 4 [pid 5134] <... symlink resumed>) = 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5135] <... write resumed>) = 4 [pid 5134] memfd_create("syzkaller", 0 [pid 5065] close(3 [pid 5135] close(3 [pid 5134] <... memfd_create resumed>) = 3 [pid 5065] <... close resumed>) = 0 [pid 5135] <... close resumed>) = 0 [pid 5134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5135] symlink("/dev/binderfs", "./binderfs" [pid 5134] <... mmap resumed>) = 0x7ff395729000 [pid 5135] <... symlink resumed>) = 0 [pid 5133] <... write resumed>) = 2097152 [pid 5135] memfd_create("syzkaller", 0 [pid 5065] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5136 [pid 5135] <... memfd_create resumed>) = 3 [pid 5135] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5136 attached ) = 0x7ff395729000 [pid 5136] chdir("./5") = 0 [pid 5136] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5136] setpgid(0, 0) = 0 [pid 5136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5136] write(3, "1000", 4) = 4 [pid 5136] close(3) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5136] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5136] <... symlink resumed>) = 0 [pid 5136] memfd_create("syzkaller", 0 [pid 5134] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] lstat("./4/file0", [pid 5136] <... memfd_create resumed>) = 3 [pid 5133] munmap(0x7ff395729000, 2097152 [pid 5136] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5136] <... mmap resumed>) = 0x7ff395729000 [pid 5133] <... munmap resumed>) = 0 [pid 5062] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5135] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5133] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5133] <... openat resumed>) = 4 [pid 5133] ioctl(4, LOOP_SET_FD, 3 [pid 5062] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5133] <... ioctl resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5062] fstat(4, [pid 5067] <... umount2 resumed>) = 0 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(4, [pid 5133] close(3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5133] <... close resumed>) = 0 [pid 5067] lstat("./4/file0", [pid 5062] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5133] mkdir("./file0", 0777 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(4, [pid 5067] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] close(4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5136] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5133] <... mkdir resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5135] <... write resumed>) = 2097152 [pid 5133] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5067] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] rmdir("./4/file0" [pid 5135] munmap(0x7ff395729000, 2097152 [pid 5134] <... write resumed>) = 2097152 [pid 5067] <... openat resumed>) = 4 [pid 5062] <... rmdir resumed>) = 0 [pid 5135] <... munmap resumed>) = 0 [pid 5134] munmap(0x7ff395729000, 2097152 [pid 5067] fstat(4, [pid 5062] getdents64(3, [pid 5135] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5135] <... openat resumed>) = 4 [pid 5067] getdents64(4, [pid 5062] close(3 [pid 5135] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [ 65.231633][ T5133] loop4: detected capacity change from 0 to 4096 [ 65.267154][ T5133] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5062] <... close resumed>) = 0 [pid 5136] <... write resumed>) = 2097152 [pid 5135] <... ioctl resumed>) = 0 [pid 5134] <... munmap resumed>) = 0 [pid 5067] getdents64(4, [pid 5062] rmdir("./4" [pid 5067] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5067] close(4 [pid 5062] mkdir("./5", 0777 [pid 5067] <... close resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5067] rmdir("./4/file0" [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5067] <... rmdir resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5067] getdents64(3, [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] close(3 [pid 5062] close(3 [pid 5067] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5067] rmdir("./4" [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5134] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5067] <... rmdir resumed>) = 0 [pid 5067] mkdir("./5", 0777 [pid 5062] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5137 [pid 5067] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5134] <... openat resumed>) = 4 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5136] munmap(0x7ff395729000, 2097152 [pid 5134] ioctl(4, LOOP_SET_FD, 3 [pid 5135] close(3 [pid 5067] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5138 [pid 5135] <... close resumed>) = 0 [pid 5135] mkdir("./file0", 0777./strace-static-x86_64: Process 5137 attached ) = 0 [pid 5137] chdir("./5" [pid 5135] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5137] <... chdir resumed>) = 0 [pid 5137] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5138 attached ) = 0 [pid 5138] chdir("./5" [pid 5137] setpgid(0, 0 [pid 5138] <... chdir resumed>) = 0 [pid 5137] <... setpgid resumed>) = 0 [pid 5136] <... munmap resumed>) = 0 [pid 5138] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5137] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5136] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5138] <... prctl resumed>) = 0 [pid 5137] <... openat resumed>) = 3 [pid 5136] <... openat resumed>) = 4 [pid 5138] setpgid(0, 0 [pid 5137] write(3, "1000", 4 [pid 5136] ioctl(4, LOOP_SET_FD, 3 [pid 5138] <... setpgid resumed>) = 0 [pid 5137] <... write resumed>) = 4 [pid 5138] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5137] close(3 [pid 5138] <... openat resumed>) = 3 [pid 5137] <... close resumed>) = 0 [pid 5138] write(3, "1000", 4 [pid 5137] symlink("/dev/binderfs", "./binderfs" [pid 5138] <... write resumed>) = 4 [pid 5137] <... symlink resumed>) = 0 [pid 5138] close(3 [pid 5137] memfd_create("syzkaller", 0 [pid 5138] <... close resumed>) = 0 [pid 5137] <... memfd_create resumed>) = 3 [pid 5138] symlink("/dev/binderfs", "./binderfs" [ 65.281603][ T5135] loop1: detected capacity change from 0 to 4096 [ 65.288139][ T5133] NILFS (loop4): trying rollback from an earlier position [ 65.303659][ T5134] loop2: detected capacity change from 0 to 4096 [ 65.316837][ T5136] loop3: detected capacity change from 0 to 4096 [pid 5137] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5134] <... ioctl resumed>) = 0 [pid 5138] <... symlink resumed>) = 0 [pid 5137] <... mmap resumed>) = 0x7ff395729000 [pid 5136] <... ioctl resumed>) = 0 [pid 5134] close(3 [pid 5138] memfd_create("syzkaller", 0 [pid 5136] close(3 [pid 5134] <... close resumed>) = 0 [pid 5138] <... memfd_create resumed>) = 3 [pid 5138] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5134] mkdir("./file0", 0777 [pid 5138] <... mmap resumed>) = 0x7ff395729000 [pid 5136] <... close resumed>) = 0 [pid 5134] <... mkdir resumed>) = 0 [pid 5136] mkdir("./file0", 0777 [pid 5134] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5136] <... mkdir resumed>) = 0 [ 65.329384][ T5135] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5136] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5137] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 65.376298][ T5136] NILFS (loop3): invalid segment: Checksum error in segment payload [ 65.387646][ T5135] NILFS (loop1): trying rollback from an earlier position [ 65.389922][ T5134] NILFS (loop2): invalid segment: Checksum error in segment payload [ 65.404257][ T5133] NILFS (loop4): recovery complete [ 65.411326][ T5136] NILFS (loop3): trying rollback from an earlier position [pid 5138] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5133] <... mount resumed>) = 0 [pid 5133] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5133] chdir("./file0") = 0 [pid 5133] ioctl(4, LOOP_CLR_FD) = 0 [pid 5133] close(4) = 0 [pid 5133] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5133] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5133] ftruncate(5, 33587195) = 0 [ 65.422876][ T5139] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 65.426454][ T5134] NILFS (loop2): trying rollback from an earlier position [ 65.449048][ T5136] NILFS (loop3): recovery complete [ 65.461973][ T5135] NILFS (loop1): recovery complete [pid 5136] <... mount resumed>) = 0 [pid 5133] sendfile(4, 5, NULL, 281474978811909 [pid 5137] <... write resumed>) = 2097152 [pid 5138] <... write resumed>) = 2097152 [pid 5137] munmap(0x7ff395729000, 2097152) = 0 [pid 5136] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5138] munmap(0x7ff395729000, 2097152 [pid 5137] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5138] <... munmap resumed>) = 0 [pid 5137] <... openat resumed>) = 4 [pid 5136] <... openat resumed>) = 3 [pid 5138] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5137] ioctl(4, LOOP_SET_FD, 3 [pid 5138] <... openat resumed>) = 4 [pid 5136] chdir("./file0" [pid 5138] ioctl(4, LOOP_SET_FD, 3 [pid 5136] <... chdir resumed>) = 0 [pid 5135] <... mount resumed>) = 0 [pid 5135] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5136] ioctl(4, LOOP_CLR_FD [pid 5135] <... openat resumed>) = 3 [pid 5136] <... ioctl resumed>) = 0 [pid 5135] chdir("./file0" [pid 5136] close(4 [pid 5135] <... chdir resumed>) = 0 [pid 5135] ioctl(4, LOOP_CLR_FD) = 0 [ 65.478599][ T5140] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 65.498633][ T5137] loop0: detected capacity change from 0 to 4096 [ 65.510409][ T5141] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 65.515623][ T5138] loop5: detected capacity change from 0 to 4096 [pid 5135] close(4 [pid 5136] <... close resumed>) = 0 [pid 5135] <... close resumed>) = 0 [pid 5135] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5136] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5135] <... open resumed>) = 4 [pid 5135] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5135] ftruncate(5, 33587195) = 0 [pid 5135] sendfile(4, 5, NULL, 281474978811909 [pid 5138] <... ioctl resumed>) = 0 [pid 5137] <... ioctl resumed>) = 0 [pid 5136] <... open resumed>) = 4 [pid 5134] <... mount resumed>) = 0 [pid 5138] close(3 [pid 5137] close(3 [pid 5136] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5134] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5138] <... close resumed>) = 0 [pid 5137] <... close resumed>) = 0 [pid 5136] <... open resumed>) = 5 [pid 5134] <... openat resumed>) = 3 [pid 5138] mkdir("./file0", 0777 [pid 5137] mkdir("./file0", 0777 [pid 5136] ftruncate(5, 33587195 [pid 5134] chdir("./file0" [pid 5138] <... mkdir resumed>) = 0 [pid 5137] <... mkdir resumed>) = 0 [pid 5136] <... ftruncate resumed>) = 0 [pid 5134] <... chdir resumed>) = 0 [pid 5138] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5137] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5136] sendfile(4, 5, NULL, 281474978811909 [ 65.540448][ T5134] NILFS (loop2): recovery complete [ 65.560086][ T5142] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5134] ioctl(4, LOOP_CLR_FD) = 0 [pid 5134] close(4) = 0 [pid 5134] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5134] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5134] ftruncate(5, 33587195) = 0 [ 65.591961][ T5138] NILFS (loop5): invalid segment: Checksum error in segment payload [ 65.600257][ T5138] NILFS (loop5): trying rollback from an earlier position [ 65.622945][ T5137] NILFS (loop0): invalid segment: Checksum error in segment payload [ 65.663179][ T5137] NILFS (loop0): trying rollback from an earlier position [ 65.695455][ T5138] NILFS (loop5): recovery complete [ 65.703386][ T5137] NILFS (loop0): recovery complete [pid 5134] sendfile(4, 5, NULL, 281474978811909 [pid 5137] <... mount resumed>) = 0 [pid 5138] <... mount resumed>) = 0 [pid 5137] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5138] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5137] <... openat resumed>) = 3 [pid 5138] <... openat resumed>) = 3 [pid 5137] chdir("./file0" [pid 5138] chdir("./file0" [pid 5137] <... chdir resumed>) = 0 [pid 5138] <... chdir resumed>) = 0 [pid 5137] ioctl(4, LOOP_CLR_FD [pid 5138] ioctl(4, LOOP_CLR_FD [pid 5137] <... ioctl resumed>) = 0 [pid 5138] <... ioctl resumed>) = 0 [pid 5138] close(4 [pid 5137] close(4 [pid 5138] <... close resumed>) = 0 [pid 5138] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5137] <... close resumed>) = 0 [pid 5138] <... open resumed>) = 4 [pid 5137] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5138] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [ 65.731173][ T5143] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 65.753961][ T5144] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5137] <... open resumed>) = 4 [pid 5138] <... open resumed>) = 5 [pid 5137] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5138] ftruncate(5, 33587195 [pid 5137] <... open resumed>) = 5 [pid 5138] <... ftruncate resumed>) = 0 [pid 5137] ftruncate(5, 33587195 [pid 5138] sendfile(4, 5, NULL, 281474978811909 [pid 5137] <... ftruncate resumed>) = 0 [pid 5137] sendfile(4, 5, NULL, 281474978811909 [pid 5133] <... sendfile resumed>) = 1048576 [pid 5133] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5133] exit_group(0) = ? [pid 5133] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5133, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5066] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./5/binderfs") = 0 [pid 5066] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5136] <... sendfile resumed>) = 1048576 [pid 5136] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5136] exit_group(0 [pid 5135] <... sendfile resumed>) = 1048576 [pid 5135] open(NULL, O_RDONLY [pid 5136] <... exit_group resumed>) = ? [pid 5135] <... open resumed>) = -1 EFAULT (Bad address) [pid 5135] exit_group(0 [pid 5136] +++ exited with 0 +++ [pid 5135] <... exit_group resumed>) = ? [pid 5135] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5136, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5135, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5065] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, [pid 5063] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5134] <... sendfile resumed>) = 1048576 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5134] open(NULL, O_RDONLY [pid 5065] getdents64(3, [pid 5063] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5134] <... open resumed>) = -1 EFAULT (Bad address) [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] <... openat resumed>) = 3 [pid 5134] exit_group(0 [pid 5065] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] fstat(3, [pid 5134] <... exit_group resumed>) = ? [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5134] +++ exited with 0 +++ [pid 5065] lstat("./5/binderfs", [pid 5063] getdents64(3, [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5134, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] unlink("./5/binderfs" [pid 5063] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... unlink resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... umount2 resumed>) = 0 [pid 5065] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] lstat("./5/binderfs", [pid 5066] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] lstat("./5/file0", [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] unlink("./5/binderfs" [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] fstat(3, [pid 5063] <... unlink resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... openat resumed>) = 4 [pid 5064] getdents64(3, [pid 5066] fstat(4, [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(4, [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] lstat("./5/binderfs", [pid 5066] getdents64(4, [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] unlink("./5/binderfs" [pid 5066] close(4 [pid 5064] <... unlink resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5064] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] rmdir("./5/file0") = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./5") = 0 [pid 5066] mkdir("./6", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5145 ./strace-static-x86_64: Process 5145 attached [pid 5145] chdir("./6") = 0 [pid 5145] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5145] setpgid(0, 0) = 0 [pid 5145] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5145] write(3, "1000", 4) = 4 [pid 5145] close(3) = 0 [pid 5145] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5145] memfd_create("syzkaller", 0) = 3 [pid 5145] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5138] <... sendfile resumed>) = 1048576 [pid 5138] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5138] exit_group(0) = ? [pid 5138] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5138, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5067] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./5/binderfs") = 0 [pid 5067] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5145] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5137] <... sendfile resumed>) = 1048576 [pid 5137] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5137] exit_group(0) = ? [pid 5137] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5137, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5062] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./5/binderfs", [pid 5065] <... umount2 resumed>) = 0 [pid 5062] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = 0 [pid 5062] unlink("./5/binderfs" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... unlink resumed>) = 0 [pid 5064] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./5/file0", [pid 5064] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... openat resumed>) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./5/file0") = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./5" [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5065] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] mkdir("./6", 0777 [pid 5063] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... mkdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] lstat("./5/file0", [pid 5065] <... openat resumed>) = 4 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] fstat(4, [pid 5063] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5145] <... write resumed>) = 2097152 [pid 5064] <... openat resumed>) = 3 [pid 5145] munmap(0x7ff395729000, 2097152 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5145] <... munmap resumed>) = 0 [pid 5064] close(3 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5145] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] getdents64(4, [pid 5145] <... openat resumed>) = 4 [pid 5063] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5145] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5146 attached [pid 5145] <... ioctl resumed>) = 0 [pid 5065] getdents64(4, [pid 5064] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5146 [pid 5063] <... openat resumed>) = 4 [pid 5146] chdir("./6") = 0 [pid 5065] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] fstat(4, [pid 5146] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] close(4 [pid 5146] <... prctl resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5146] setpgid(0, 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5065] rmdir("./5/file0" [pid 5146] <... setpgid resumed>) = 0 [pid 5063] getdents64(4, [pid 5065] <... rmdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5146] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(3, [pid 5063] getdents64(4, [pid 5146] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5146] write(3, "1000", 4 [pid 5067] lstat("./5/file0", [pid 5065] close(3 [pid 5063] close(4 [pid 5146] <... write resumed>) = 4 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... close resumed>) = 0 [pid 5146] close(3 [pid 5067] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5146] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] rmdir("./5" [pid 5146] symlink("/dev/binderfs", "./binderfs" [pid 5067] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] rmdir("./5/file0" [pid 5146] <... symlink resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5145] close(3) = 0 [pid 5145] mkdir("./file0", 0777) = 0 [pid 5145] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5063] <... rmdir resumed>) = 0 [pid 5146] memfd_create("syzkaller", 0 [pid 5067] <... openat resumed>) = 4 [pid 5065] mkdir("./6", 0777 [pid 5063] getdents64(3, [pid 5146] <... memfd_create resumed>) = 3 [pid 5067] fstat(4, [pid 5146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5146] <... mmap resumed>) = 0x7ff395729000 [pid 5067] getdents64(4, [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] close(3 [pid 5067] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5065] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5067] getdents64(4, [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] rmdir("./5" [pid 5067] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [ 66.933258][ T5145] loop4: detected capacity change from 0 to 4096 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] <... rmdir resumed>) = 0 [pid 5062] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] close(4 [pid 5065] close(3 [pid 5063] mkdir("./6", 0777 [pid 5067] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] rmdir("./5/file0" [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5067] <... rmdir resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5067] getdents64(3, [pid 5065] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5147 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5062] lstat("./5/file0", ./strace-static-x86_64: Process 5147 attached [pid 5067] close(3 [pid 5063] close(3 [pid 5067] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] rmdir("./5" [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... rmdir resumed>) = 0 [pid 5062] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] mkdir("./6", 0777 [pid 5063] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5148 [pid 5067] <... mkdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5147] chdir("./6" [pid 5067] <... openat resumed>) = 3 [pid 5062] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5147] <... chdir resumed>) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5147] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5062] <... openat resumed>) = 4 [pid 5147] <... prctl resumed>) = 0 [pid 5146] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] close(3 [pid 5062] fstat(4, [pid 5147] setpgid(0, 0 [pid 5067] <... close resumed>) = 0 [pid 5147] <... setpgid resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5147] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5067] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5149 [pid 5147] write(3, "1000", 4) = 4 [pid 5147] close(3) = 0 [pid 5147] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5147] memfd_create("syzkaller", 0) = 3 [pid 5147] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 ./strace-static-x86_64: Process 5148 attached [pid 5062] getdents64(4, ./strace-static-x86_64: Process 5149 attached [pid 5149] chdir("./6" [pid 5148] chdir("./6" [pid 5062] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5149] <... chdir resumed>) = 0 [pid 5149] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5149] setpgid(0, 0) = 0 [pid 5149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5149] write(3, "1000", 4) = 4 [pid 5149] close(3) = 0 [pid 5149] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5149] memfd_create("syzkaller", 0) = 3 [pid 5149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5148] <... chdir resumed>) = 0 [pid 5062] getdents64(4, [pid 5148] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5148] <... prctl resumed>) = 0 [pid 5148] setpgid(0, 0 [pid 5062] close(4 [pid 5148] <... setpgid resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5148] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] rmdir("./5/file0" [pid 5148] <... openat resumed>) = 3 [pid 5062] <... rmdir resumed>) = 0 [pid 5148] write(3, "1000", 4 [pid 5062] getdents64(3, [pid 5148] <... write resumed>) = 4 [pid 5148] close(3 [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5148] <... close resumed>) = 0 [pid 5148] symlink("/dev/binderfs", "./binderfs" [pid 5062] close(3 [pid 5148] <... symlink resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5148] memfd_create("syzkaller", 0 [pid 5062] rmdir("./5" [pid 5148] <... memfd_create resumed>) = 3 [pid 5148] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5148] <... mmap resumed>) = 0x7ff395729000 [pid 5062] mkdir("./6", 0777 [pid 5146] <... write resumed>) = 2097152 [pid 5147] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5146] munmap(0x7ff395729000, 2097152 [ 67.022757][ T5145] NILFS (loop4): invalid segment: Checksum error in segment payload [ 67.041768][ T5145] NILFS (loop4): trying rollback from an earlier position [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5146] <... munmap resumed>) = 0 [pid 5149] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5146] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5146] ioctl(4, LOOP_SET_FD, 3 [pid 5148] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5150 ./strace-static-x86_64: Process 5150 attached [pid 5150] chdir("./6" [pid 5147] <... write resumed>) = 2097152 [pid 5150] <... chdir resumed>) = 0 [pid 5150] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5150] setpgid(0, 0 [pid 5145] <... mount resumed>) = 0 [pid 5150] <... setpgid resumed>) = 0 [pid 5150] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5145] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5150] <... openat resumed>) = 3 [pid 5145] <... openat resumed>) = 3 [pid 5150] write(3, "1000", 4 [pid 5146] <... ioctl resumed>) = 0 [pid 5145] chdir("./file0" [pid 5150] <... write resumed>) = 4 [pid 5146] close(3 [pid 5150] close(3 [pid 5146] <... close resumed>) = 0 [pid 5145] <... chdir resumed>) = 0 [pid 5150] <... close resumed>) = 0 [pid 5146] mkdir("./file0", 0777 [pid 5145] ioctl(4, LOOP_CLR_FD [pid 5150] symlink("/dev/binderfs", "./binderfs" [pid 5146] <... mkdir resumed>) = 0 [pid 5145] <... ioctl resumed>) = 0 [pid 5150] <... symlink resumed>) = 0 [pid 5146] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5150] memfd_create("syzkaller", 0 [pid 5145] close(4 [pid 5150] <... memfd_create resumed>) = 3 [pid 5145] <... close resumed>) = 0 [pid 5150] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5145] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5150] <... mmap resumed>) = 0x7ff395729000 [pid 5145] <... open resumed>) = 4 [pid 5145] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [ 67.093467][ T5145] NILFS (loop4): recovery complete [ 67.097266][ T5146] loop2: detected capacity change from 0 to 4096 [ 67.117946][ T5151] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5145] ftruncate(5, 33587195) = 0 [pid 5145] sendfile(4, 5, NULL, 281474978811909 [pid 5147] munmap(0x7ff395729000, 2097152) = 0 [pid 5147] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5147] ioctl(4, LOOP_SET_FD, 3 [pid 5150] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5148] <... write resumed>) = 2097152 [pid 5149] <... write resumed>) = 2097152 [pid 5149] munmap(0x7ff395729000, 2097152) = 0 [pid 5149] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5149] ioctl(4, LOOP_SET_FD, 3 [pid 5148] munmap(0x7ff395729000, 2097152 [pid 5147] <... ioctl resumed>) = 0 [pid 5147] close(3) = 0 [pid 5147] mkdir("./file0", 0777 [pid 5148] <... munmap resumed>) = 0 [pid 5147] <... mkdir resumed>) = 0 [ 67.183787][ T5147] loop3: detected capacity change from 0 to 4096 [ 67.190900][ T5146] NILFS (loop2): invalid segment: Checksum error in segment payload [ 67.214337][ T5149] loop5: detected capacity change from 0 to 4096 [pid 5148] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5147] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5148] <... openat resumed>) = 4 [pid 5148] ioctl(4, LOOP_SET_FD, 3 [pid 5149] <... ioctl resumed>) = 0 [pid 5149] close(3) = 0 [pid 5149] mkdir("./file0", 0777) = 0 [pid 5149] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5148] <... ioctl resumed>) = 0 [pid 5148] close(3) = 0 [pid 5148] mkdir("./file0", 0777) = 0 [ 67.230778][ T5146] NILFS (loop2): trying rollback from an earlier position [ 67.249533][ T5147] NILFS (loop3): invalid segment: Checksum error in segment payload [ 67.258584][ T5148] loop1: detected capacity change from 0 to 4096 [pid 5148] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5150] <... write resumed>) = 2097152 [pid 5150] munmap(0x7ff395729000, 2097152) = 0 [pid 5150] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 67.284070][ T5149] NILFS (loop5): invalid segment: Checksum error in segment payload [ 67.293938][ T5148] NILFS (loop1): invalid segment: Checksum error in segment payload [ 67.303524][ T5147] NILFS (loop3): trying rollback from an earlier position [ 67.311446][ T5146] NILFS (loop2): recovery complete [ 67.321578][ T5148] NILFS (loop1): trying rollback from an earlier position [pid 5150] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5150] close(3) = 0 [pid 5150] mkdir("./file0", 0777 [pid 5146] <... mount resumed>) = 0 [pid 5150] <... mkdir resumed>) = 0 [pid 5146] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5150] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5146] <... openat resumed>) = 3 [ 67.323892][ T5150] loop0: detected capacity change from 0 to 4096 [ 67.336553][ T5149] NILFS (loop5): trying rollback from an earlier position [ 67.358037][ T5152] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 67.372665][ T5147] NILFS (loop3): recovery complete [pid 5146] chdir("./file0") = 0 [pid 5146] ioctl(4, LOOP_CLR_FD) = 0 [pid 5146] close(4) = 0 [pid 5146] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5148] <... mount resumed>) = 0 [pid 5146] <... open resumed>) = 4 [pid 5146] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5148] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5147] <... mount resumed>) = 0 [pid 5146] <... open resumed>) = 5 [ 67.384766][ T5148] NILFS (loop1): recovery complete [ 67.388254][ T5149] NILFS (loop5): recovery complete [ 67.411790][ T5154] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 67.424010][ T5153] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5149] <... mount resumed>) = 0 [pid 5148] <... openat resumed>) = 3 [pid 5147] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5149] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5148] chdir("./file0" [pid 5147] <... openat resumed>) = 3 [pid 5146] ftruncate(5, 33587195 [pid 5149] <... openat resumed>) = 3 [pid 5148] <... chdir resumed>) = 0 [pid 5147] chdir("./file0" [pid 5149] chdir("./file0" [pid 5147] <... chdir resumed>) = 0 [pid 5149] <... chdir resumed>) = 0 [pid 5147] ioctl(4, LOOP_CLR_FD [pid 5149] ioctl(4, LOOP_CLR_FD [pid 5148] ioctl(4, LOOP_CLR_FD [pid 5147] <... ioctl resumed>) = 0 [pid 5146] <... ftruncate resumed>) = 0 [pid 5149] <... ioctl resumed>) = 0 [pid 5147] close(4 [pid 5149] close(4 [pid 5148] <... ioctl resumed>) = 0 [pid 5147] <... close resumed>) = 0 [ 67.441103][ T5155] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 67.442003][ T5150] NILFS (loop0): invalid segment: Checksum error in segment payload [ 67.473055][ T5150] NILFS (loop0): trying rollback from an earlier position [pid 5146] sendfile(4, 5, NULL, 281474978811909 [pid 5149] <... close resumed>) = 0 [pid 5148] close(4 [pid 5147] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5148] <... close resumed>) = 0 [pid 5148] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5149] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5148] <... open resumed>) = 4 [pid 5147] <... open resumed>) = 4 [pid 5148] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5149] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5147] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5148] <... open resumed>) = 5 [pid 5149] <... open resumed>) = 5 [pid 5148] ftruncate(5, 33587195 [pid 5147] <... open resumed>) = 5 [pid 5149] ftruncate(5, 33587195 [pid 5148] <... ftruncate resumed>) = 0 [ 67.490905][ T5150] NILFS (loop0): recovery complete [pid 5147] ftruncate(5, 33587195 [pid 5149] <... ftruncate resumed>) = 0 [pid 5148] sendfile(4, 5, NULL, 281474978811909 [pid 5147] <... ftruncate resumed>) = 0 [pid 5149] sendfile(4, 5, NULL, 281474978811909 [pid 5147] sendfile(4, 5, NULL, 281474978811909 [pid 5150] <... mount resumed>) = 0 [pid 5150] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5150] chdir("./file0") = 0 [pid 5150] ioctl(4, LOOP_CLR_FD) = 0 [pid 5150] close(4) = 0 [pid 5150] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5150] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [ 67.563232][ T5156] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5150] ftruncate(5, 33587195) = 0 [pid 5150] sendfile(4, 5, NULL, 281474978811909 [pid 5145] <... sendfile resumed>) = 1048576 [pid 5145] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5145] exit_group(0) = ? [pid 5145] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5145, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- [pid 5066] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./6/binderfs") = 0 [pid 5066] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5066] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./6/file0") = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./6") = 0 [pid 5066] mkdir("./7", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5157 ./strace-static-x86_64: Process 5157 attached [pid 5157] chdir("./7") = 0 [pid 5157] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5157] setpgid(0, 0) = 0 [pid 5157] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5157] write(3, "1000", 4) = 4 [pid 5157] close(3) = 0 [pid 5157] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5157] memfd_create("syzkaller", 0) = 3 [pid 5157] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5157] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5146] <... sendfile resumed>) = 1048576 [pid 5146] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5146] exit_group(0) = ? [pid 5146] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5146, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- [pid 5064] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./6/binderfs" [pid 5157] <... write resumed>) = 2097152 [pid 5157] munmap(0x7ff395729000, 2097152 [pid 5064] <... unlink resumed>) = 0 [pid 5064] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5157] <... munmap resumed>) = 0 [pid 5157] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5157] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5157] close(3) = 0 [pid 5157] mkdir("./file0", 0777 [pid 5149] <... sendfile resumed>) = 1048576 [pid 5147] <... sendfile resumed>) = 1048576 [pid 5147] open(NULL, O_RDONLY [pid 5149] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5147] <... open resumed>) = -1 EFAULT (Bad address) [pid 5149] exit_group(0) = ? [pid 5147] exit_group(0 [pid 5149] +++ exited with 0 +++ [pid 5147] <... exit_group resumed>) = ? [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5149, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5067] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5147] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5147, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=19 /* 0.19 s */} --- [pid 5067] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... restart_syscall resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(3, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... openat resumed>) = 3 [pid 5157] <... mkdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] fstat(3, [pid 5157] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5067] lstat("./6/binderfs", [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 68.522134][ T5157] loop4: detected capacity change from 0 to 4096 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] getdents64(3, [pid 5067] unlink("./6/binderfs" [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] <... unlink resumed>) = 0 [pid 5065] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./6/binderfs", [pid 5148] <... sendfile resumed>) = 1048576 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./6/binderfs" [pid 5148] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5148] exit_group(0) = ? [pid 5065] <... unlink resumed>) = 0 [pid 5065] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5148] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5148, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=25 /* 0.25 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, [pid 5150] <... sendfile resumed>) = 1048576 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, [pid 5150] open(NULL, O_RDONLY [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./6/binderfs") = 0 [pid 5063] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5150] <... open resumed>) = -1 EFAULT (Bad address) [pid 5064] <... umount2 resumed>) = 0 [pid 5150] exit_group(0) = ? [pid 5150] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5150, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5062] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [ 68.588580][ T5157] NILFS (loop4): invalid segment: Checksum error in segment payload [ 68.624370][ T5157] NILFS (loop4): trying rollback from an earlier position [pid 5062] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] unlink("./6/binderfs") = 0 [pid 5062] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./6/file0") = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [ 68.693981][ T5157] NILFS (loop4): recovery complete [pid 5064] rmdir("./6" [pid 5157] <... mount resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5157] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] mkdir("./7", 0777) = 0 [pid 5157] <... openat resumed>) = 3 [pid 5157] chdir("./file0" [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5157] <... chdir resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5157] ioctl(4, LOOP_CLR_FD) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5157] close(4 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5157] <... close resumed>) = 0 [pid 5157] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5157] <... open resumed>) = 4 [pid 5064] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5159 [pid 5157] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5157] ftruncate(5, 33587195) = 0 [pid 5157] sendfile(4, 5, NULL, 281474978811909./strace-static-x86_64: Process 5159 attached [pid 5159] chdir("./7") = 0 [pid 5159] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5159] setpgid(0, 0) = 0 [pid 5159] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5159] write(3, "1000", 4) = 4 [pid 5159] close(3 [pid 5067] <... umount2 resumed>) = 0 [pid 5159] <... close resumed>) = 0 [pid 5159] symlink("/dev/binderfs", "./binderfs") = 0 [ 68.723313][ T5158] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] <... umount2 resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5159] memfd_create("syzkaller", 0) = 3 [pid 5159] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5067] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./6/file0") = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./6") = 0 [pid 5067] mkdir("./7", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5160 ./strace-static-x86_64: Process 5160 attached [pid 5160] chdir("./7" [pid 5062] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5160] <... chdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5160] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5160] <... prctl resumed>) = 0 [pid 5160] setpgid(0, 0 [pid 5062] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5160] <... setpgid resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5160] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5159] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5160] <... openat resumed>) = 3 [pid 5160] write(3, "1000", 4 [pid 5062] <... openat resumed>) = 4 [pid 5065] lstat("./6/file0", [pid 5160] <... write resumed>) = 4 [pid 5160] close(3 [pid 5062] fstat(4, [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5160] <... close resumed>) = 0 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5160] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5062] getdents64(4, [pid 5160] memfd_create("syzkaller", 0 [pid 5062] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5160] <... memfd_create resumed>) = 3 [pid 5065] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(4, [pid 5160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5160] <... mmap resumed>) = 0x7ff395729000 [pid 5062] close(4 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./6/file0") = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./6") = 0 [pid 5062] mkdir("./7", 0777 [pid 5065] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] <... openat resumed>) = 4 [pid 5062] <... openat resumed>) = 3 [pid 5065] fstat(4, [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] getdents64(4, [pid 5063] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5161 [pid 5065] getdents64(4, [pid 5063] lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5065] close(4 [pid 5063] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./6/file0" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... rmdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] getdents64(3, [pid 5063] <... openat resumed>) = 4 [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] fstat(4, ./strace-static-x86_64: Process 5161 attached [pid 5065] close(3 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5161] chdir("./7" [pid 5065] <... close resumed>) = 0 [pid 5161] <... chdir resumed>) = 0 [pid 5160] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] rmdir("./6" [pid 5063] getdents64(4, [pid 5161] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5161] setpgid(0, 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5065] mkdir("./7", 0777 [pid 5063] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5161] <... setpgid resumed>) = 0 [pid 5161] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5065] <... mkdir resumed>) = 0 [pid 5063] close(4 [pid 5161] write(3, "1000", 4 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... close resumed>) = 0 [pid 5161] <... write resumed>) = 4 [pid 5065] <... openat resumed>) = 3 [pid 5063] rmdir("./6/file0" [pid 5161] close(3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5161] <... close resumed>) = 0 [pid 5161] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] <... rmdir resumed>) = 0 [pid 5161] memfd_create("syzkaller", 0) = 3 [pid 5161] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5063] getdents64(3, [pid 5065] close(3 [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5065] <... close resumed>) = 0 [pid 5063] close(3 [pid 5159] <... write resumed>) = 2097152 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./6" [pid 5065] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5162 ./strace-static-x86_64: Process 5162 attached [pid 5063] <... rmdir resumed>) = 0 [pid 5063] mkdir("./7", 0777 [pid 5162] chdir("./7" [pid 5063] <... mkdir resumed>) = 0 [pid 5162] <... chdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5162] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5162] setpgid(0, 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5162] <... setpgid resumed>) = 0 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5159] munmap(0x7ff395729000, 2097152) = 0 [pid 5159] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5159] ioctl(4, LOOP_SET_FD, 3 [pid 5162] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5161] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5160] <... write resumed>) = 2097152 [pid 5159] <... ioctl resumed>) = 0 [pid 5063] close(3 [pid 5162] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5162] write(3, "1000", 4 [pid 5160] munmap(0x7ff395729000, 2097152 [pid 5159] close(3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5162] <... write resumed>) = 4 [pid 5160] <... munmap resumed>) = 0 [pid 5162] close(3 [pid 5160] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5162] <... close resumed>) = 0 [pid 5160] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5163 attached [pid 5162] symlink("/dev/binderfs", "./binderfs" [pid 5161] <... write resumed>) = 2097152 [pid 5159] <... close resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5163 [pid 5163] chdir("./7" [pid 5162] <... symlink resumed>) = 0 [pid 5161] munmap(0x7ff395729000, 2097152 [pid 5160] ioctl(4, LOOP_SET_FD, 3 [ 68.948780][ T5159] loop2: detected capacity change from 0 to 4096 [pid 5159] mkdir("./file0", 0777 [pid 5163] <... chdir resumed>) = 0 [pid 5162] memfd_create("syzkaller", 0 [pid 5161] <... munmap resumed>) = 0 [pid 5159] <... mkdir resumed>) = 0 [pid 5163] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5162] <... memfd_create resumed>) = 3 [pid 5161] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5159] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5163] <... prctl resumed>) = 0 [pid 5162] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5161] <... openat resumed>) = 4 [pid 5163] setpgid(0, 0 [pid 5162] <... mmap resumed>) = 0x7ff395729000 [pid 5163] <... setpgid resumed>) = 0 [pid 5161] ioctl(4, LOOP_SET_FD, 3 [pid 5160] <... ioctl resumed>) = 0 [pid 5163] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5160] close(3 [pid 5163] <... openat resumed>) = 3 [pid 5160] <... close resumed>) = 0 [pid 5163] write(3, "1000", 4) = 4 [pid 5160] mkdir("./file0", 0777 [pid 5163] close(3) = 0 [pid 5163] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5163] memfd_create("syzkaller", 0 [pid 5160] <... mkdir resumed>) = 0 [pid 5163] <... memfd_create resumed>) = 3 [pid 5160] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5163] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [ 68.993084][ T5160] loop5: detected capacity change from 0 to 4096 [ 69.008199][ T5159] NILFS (loop2): invalid segment: Checksum error in segment payload [ 69.012297][ T5161] loop0: detected capacity change from 0 to 4096 [pid 5162] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5161] <... ioctl resumed>) = 0 [pid 5161] close(3) = 0 [pid 5161] mkdir("./file0", 0777 [pid 5163] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5161] <... mkdir resumed>) = 0 [ 69.043937][ T5160] NILFS (loop5): invalid segment: Checksum error in segment payload [ 69.062095][ T5159] NILFS (loop2): trying rollback from an earlier position [ 69.074904][ T5160] NILFS (loop5): trying rollback from an earlier position [pid 5161] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5162] <... write resumed>) = 2097152 [pid 5162] munmap(0x7ff395729000, 2097152) = 0 [pid 5162] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5162] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5162] close(3) = 0 [pid 5162] mkdir("./file0", 0777) = 0 [ 69.103336][ T5161] NILFS (loop0): invalid segment: Checksum error in segment payload [ 69.115275][ T5159] NILFS (loop2): recovery complete [ 69.120032][ T5162] loop3: detected capacity change from 0 to 4096 [ 69.128787][ T5161] NILFS (loop0): trying rollback from an earlier position [ 69.128814][ T5160] NILFS (loop5): recovery complete [pid 5162] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5163] <... write resumed>) = 2097152 [pid 5159] <... mount resumed>) = 0 [pid 5163] munmap(0x7ff395729000, 2097152 [pid 5159] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5163] <... munmap resumed>) = 0 [pid 5159] <... openat resumed>) = 3 [pid 5159] chdir("./file0" [pid 5163] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5159] <... chdir resumed>) = 0 [pid 5163] <... openat resumed>) = 4 [pid 5159] ioctl(4, LOOP_CLR_FD [pid 5163] ioctl(4, LOOP_SET_FD, 3 [pid 5159] <... ioctl resumed>) = 0 [pid 5160] <... mount resumed>) = 0 [pid 5159] close(4 [pid 5160] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5163] <... ioctl resumed>) = 0 [pid 5160] <... openat resumed>) = 3 [pid 5159] <... close resumed>) = 0 [pid 5163] close(3 [pid 5160] chdir("./file0" [pid 5159] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5163] <... close resumed>) = 0 [pid 5160] <... chdir resumed>) = 0 [pid 5163] mkdir("./file0", 0777 [pid 5160] ioctl(4, LOOP_CLR_FD [pid 5163] <... mkdir resumed>) = 0 [pid 5160] <... ioctl resumed>) = 0 [ 69.149346][ T5164] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.169174][ T5162] NILFS (loop3): invalid segment: Checksum error in segment payload [ 69.180035][ T5163] loop1: detected capacity change from 0 to 4096 [ 69.186770][ T5165] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5160] close(4 [pid 5163] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5160] <... close resumed>) = 0 [pid 5159] <... open resumed>) = 4 [pid 5160] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5159] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5160] <... open resumed>) = 4 [pid 5159] ftruncate(5, 33587195 [pid 5160] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5159] <... ftruncate resumed>) = 0 [pid 5160] <... open resumed>) = 5 [pid 5159] sendfile(4, 5, NULL, 281474978811909 [pid 5160] ftruncate(5, 33587195) = 0 [pid 5160] sendfile(4, 5, NULL, 281474978811909 [pid 5161] <... mount resumed>) = 0 [ 69.218060][ T5162] NILFS (loop3): trying rollback from an earlier position [ 69.231862][ T5161] NILFS (loop0): recovery complete [ 69.252200][ T5166] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5161] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5161] chdir("./file0") = 0 [pid 5161] ioctl(4, LOOP_CLR_FD) = 0 [pid 5161] close(4) = 0 [pid 5161] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5161] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5161] ftruncate(5, 33587195) = 0 [ 69.270591][ T5163] NILFS (loop1): invalid segment: Checksum error in segment payload [ 69.295313][ T5163] NILFS (loop1): trying rollback from an earlier position [ 69.321212][ T5162] NILFS (loop3): recovery complete [pid 5161] sendfile(4, 5, NULL, 281474978811909 [pid 5162] <... mount resumed>) = 0 [pid 5162] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5162] chdir("./file0") = 0 [pid 5162] ioctl(4, LOOP_CLR_FD) = 0 [pid 5162] close(4) = 0 [pid 5162] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5162] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5162] ftruncate(5, 33587195) = 0 [ 69.361865][ T5167] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.388975][ T5163] NILFS (loop1): recovery complete [pid 5162] sendfile(4, 5, NULL, 281474978811909 [pid 5163] <... mount resumed>) = 0 [pid 5163] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5163] chdir("./file0") = 0 [pid 5163] ioctl(4, LOOP_CLR_FD) = 0 [pid 5163] close(4) = 0 [pid 5163] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5163] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5163] ftruncate(5, 33587195) = 0 [ 69.445531][ T5168] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5163] sendfile(4, 5, NULL, 281474978811909 [pid 5157] <... sendfile resumed>) = 1048576 [pid 5157] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5157] exit_group(0) = ? [pid 5157] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5157, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- [pid 5066] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./7/binderfs") = 0 [pid 5066] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5066] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./7/file0") = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./7") = 0 [pid 5066] mkdir("./8", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5169 ./strace-static-x86_64: Process 5169 attached [pid 5169] chdir("./8") = 0 [pid 5169] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5169] setpgid(0, 0) = 0 [pid 5169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5169] write(3, "1000", 4) = 4 [pid 5169] close(3) = 0 [pid 5169] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5169] memfd_create("syzkaller", 0) = 3 [pid 5169] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5169] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5169] munmap(0x7ff395729000, 2097152) = 0 [pid 5169] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5169] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5169] close(3) = 0 [pid 5169] mkdir("./file0", 0777 [pid 5160] <... sendfile resumed>) = 1048576 [pid 5160] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5159] <... sendfile resumed>) = 1048576 [pid 5169] <... mkdir resumed>) = 0 [pid 5169] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [ 70.205607][ T5169] loop4: detected capacity change from 0 to 4096 [pid 5160] exit_group(0) = ? [pid 5159] open(NULL, O_RDONLY [pid 5160] +++ exited with 0 +++ [pid 5159] <... open resumed>) = -1 EFAULT (Bad address) [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5160, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5159] exit_group(0 [pid 5067] <... restart_syscall resumed>) = 0 [pid 5159] <... exit_group resumed>) = ? [pid 5067] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, [pid 5159] +++ exited with 0 +++ [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5159, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 5067] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... restart_syscall resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] unlink("./7/binderfs" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... unlink resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... openat resumed>) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./7/binderfs") = 0 [ 70.265914][ T5169] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5064] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5161] <... sendfile resumed>) = 1048576 [pid 5161] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5161] exit_group(0) = ? [pid 5161] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5161, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5062] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5163] <... sendfile resumed>) = 1048576 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5163] open(NULL, O_RDONLY [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, [pid 5163] <... open resumed>) = -1 EFAULT (Bad address) [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5163] exit_group(0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./7/binderfs", [pid 5163] <... exit_group resumed>) = ? [pid 5062] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] unlink("./7/binderfs") = 0 [pid 5062] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5163] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5163, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=19 /* 0.19 s */} --- [pid 5063] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 70.308197][ T5169] NILFS (loop4): trying rollback from an earlier position [ 70.333679][ T5169] NILFS (loop4): recovery complete [pid 5169] <... mount resumed>) = 0 [pid 5063] unlink("./7/binderfs") = 0 [pid 5063] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5169] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5169] chdir("./file0") = 0 [pid 5169] ioctl(4, LOOP_CLR_FD) = 0 [pid 5169] close(4) = 0 [pid 5169] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5162] <... sendfile resumed>) = 1048576 [pid 5067] <... umount2 resumed>) = 0 [pid 5162] open(NULL, O_RDONLY [pid 5067] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5169] <... open resumed>) = 4 [pid 5162] <... open resumed>) = -1 EFAULT (Bad address) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5169] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5162] exit_group(0 [pid 5067] lstat("./7/file0", [pid 5169] <... open resumed>) = 5 [pid 5162] <... exit_group resumed>) = ? [pid 5169] ftruncate(5, 33587195 [pid 5162] +++ exited with 0 +++ [pid 5169] <... ftruncate resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5162, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 5169] sendfile(4, 5, NULL, 281474978811909 [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5065] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 70.374209][ T5170] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./7/binderfs", [pid 5067] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./7/binderfs") = 0 [pid 5065] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./7/file0") = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./7") = 0 [pid 5067] mkdir("./8", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5171 ./strace-static-x86_64: Process 5171 attached [pid 5171] chdir("./8") = 0 [pid 5171] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5171] setpgid(0, 0) = 0 [pid 5171] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5171] write(3, "1000", 4) = 4 [pid 5171] close(3) = 0 [pid 5171] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5171] memfd_create("syzkaller", 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5171] <... memfd_create resumed>) = 3 [pid 5171] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5171] <... mmap resumed>) = 0x7ff395729000 [pid 5064] <... openat resumed>) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./7/file0") = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./7") = 0 [pid 5064] mkdir("./8", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5172 ./strace-static-x86_64: Process 5172 attached [pid 5172] chdir("./8") = 0 [pid 5172] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5172] setpgid(0, 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5172] <... setpgid resumed>) = 0 [pid 5172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5172] write(3, "1000", 4 [pid 5062] <... umount2 resumed>) = 0 [pid 5172] <... write resumed>) = 4 [pid 5172] close(3) = 0 [pid 5172] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5172] memfd_create("syzkaller", 0) = 3 [pid 5172] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5063] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] lstat("./7/file0", [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] lstat("./7/file0", [pid 5063] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5172] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5171] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] fstat(4, [pid 5062] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5063] getdents64(4, [pid 5062] fstat(4, [pid 5063] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, [pid 5062] getdents64(4, [pid 5063] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] close(4 [pid 5062] getdents64(4, [pid 5063] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] rmdir("./7/file0" [pid 5062] close(4 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5063] getdents64(3, [pid 5062] rmdir("./7/file0" [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5063] close(3 [pid 5062] getdents64(3, [pid 5063] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] rmdir("./7" [pid 5062] close(3 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5063] mkdir("./8", 0777 [pid 5062] rmdir("./7" [pid 5063] <... mkdir resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] mkdir("./8", 0777 [pid 5063] <... openat resumed>) = 3 [pid 5062] <... mkdir resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5062] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = 0 [pid 5063] close(3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5063] <... close resumed>) = 0 [pid 5062] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] close(3) = 0 [pid 5065] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5173 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./7/file0", [pid 5062] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5174 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5173 attached [pid 5065] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5173] chdir("./8" [pid 5065] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5174 attached [pid 5173] <... chdir resumed>) = 0 [pid 5065] fstat(4, [pid 5174] chdir("./8" [pid 5173] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5174] <... chdir resumed>) = 0 [pid 5173] <... prctl resumed>) = 0 [pid 5065] getdents64(4, [pid 5174] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5173] setpgid(0, 0 [pid 5065] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5174] <... prctl resumed>) = 0 [pid 5173] <... setpgid resumed>) = 0 [pid 5065] getdents64(4, [pid 5174] setpgid(0, 0 [pid 5173] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5174] <... setpgid resumed>) = 0 [pid 5173] <... openat resumed>) = 3 [pid 5172] <... write resumed>) = 2097152 [pid 5065] close(4 [pid 5174] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5173] write(3, "1000", 4 [pid 5065] <... close resumed>) = 0 [pid 5174] <... openat resumed>) = 3 [pid 5173] <... write resumed>) = 4 [pid 5065] rmdir("./7/file0" [pid 5174] write(3, "1000", 4 [pid 5173] close(3 [pid 5065] <... rmdir resumed>) = 0 [pid 5174] <... write resumed>) = 4 [pid 5173] <... close resumed>) = 0 [pid 5065] getdents64(3, [pid 5174] close(3 [pid 5173] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5174] <... close resumed>) = 0 [pid 5173] <... symlink resumed>) = 0 [pid 5065] close(3 [pid 5174] symlink("/dev/binderfs", "./binderfs" [pid 5173] memfd_create("syzkaller", 0 [pid 5065] <... close resumed>) = 0 [pid 5174] <... symlink resumed>) = 0 [pid 5173] <... memfd_create resumed>) = 3 [pid 5065] rmdir("./7" [pid 5174] memfd_create("syzkaller", 0 [pid 5173] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5174] <... memfd_create resumed>) = 3 [pid 5173] <... mmap resumed>) = 0x7ff395729000 [pid 5171] <... write resumed>) = 2097152 [pid 5065] mkdir("./8", 0777 [pid 5174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5171] munmap(0x7ff395729000, 2097152 [pid 5065] <... mkdir resumed>) = 0 [pid 5174] <... mmap resumed>) = 0x7ff395729000 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5171] <... munmap resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5171] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5065] close(3 [pid 5171] <... openat resumed>) = 4 [pid 5065] <... close resumed>) = 0 [pid 5171] ioctl(4, LOOP_SET_FD, 3 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5175 ./strace-static-x86_64: Process 5175 attached [pid 5175] chdir("./8") = 0 [pid 5175] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5174] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5175] <... prctl resumed>) = 0 [pid 5175] setpgid(0, 0 [pid 5173] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5172] munmap(0x7ff395729000, 2097152 [pid 5175] <... setpgid resumed>) = 0 [pid 5172] <... munmap resumed>) = 0 [pid 5175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5172] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5175] <... openat resumed>) = 3 [pid 5172] <... openat resumed>) = 4 [pid 5175] write(3, "1000", 4 [pid 5172] ioctl(4, LOOP_SET_FD, 3 [pid 5175] <... write resumed>) = 4 [pid 5171] <... ioctl resumed>) = 0 [pid 5175] close(3 [pid 5171] close(3 [pid 5175] <... close resumed>) = 0 [pid 5171] <... close resumed>) = 0 [pid 5175] symlink("/dev/binderfs", "./binderfs" [pid 5171] mkdir("./file0", 0777 [pid 5175] <... symlink resumed>) = 0 [pid 5175] memfd_create("syzkaller", 0 [pid 5171] <... mkdir resumed>) = 0 [pid 5175] <... memfd_create resumed>) = 3 [pid 5171] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [ 70.745641][ T5171] loop5: detected capacity change from 0 to 4096 [ 70.783765][ T5172] loop2: detected capacity change from 0 to 4096 [pid 5175] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5172] <... ioctl resumed>) = 0 [pid 5172] close(3) = 0 [pid 5172] mkdir("./file0", 0777) = 0 [pid 5172] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5175] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5173] <... write resumed>) = 2097152 [pid 5174] <... write resumed>) = 2097152 [ 70.806971][ T5171] NILFS (loop5): invalid segment: Checksum error in segment payload [ 70.839303][ T5171] NILFS (loop5): trying rollback from an earlier position [pid 5174] munmap(0x7ff395729000, 2097152) = 0 [pid 5174] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5173] munmap(0x7ff395729000, 2097152 [pid 5174] <... openat resumed>) = 4 [pid 5173] <... munmap resumed>) = 0 [pid 5174] ioctl(4, LOOP_SET_FD, 3 [pid 5173] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5173] ioctl(4, LOOP_SET_FD, 3 [pid 5174] <... ioctl resumed>) = 0 [pid 5174] close(3) = 0 [pid 5174] mkdir("./file0", 0777) = 0 [pid 5174] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5175] <... write resumed>) = 2097152 [pid 5173] <... ioctl resumed>) = 0 [pid 5173] close(3) = 0 [pid 5173] mkdir("./file0", 0777) = 0 [ 70.863950][ T5172] NILFS (loop2): invalid segment: Checksum error in segment payload [ 70.878490][ T5174] loop0: detected capacity change from 0 to 4096 [ 70.880812][ T5173] loop1: detected capacity change from 0 to 4096 [ 70.899693][ T5171] NILFS (loop5): recovery complete [ 70.906448][ T5172] NILFS (loop2): trying rollback from an earlier position [pid 5173] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5175] munmap(0x7ff395729000, 2097152) = 0 [pid 5175] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5175] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5171] <... mount resumed>) = 0 [pid 5171] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5171] chdir("./file0") = 0 [pid 5171] ioctl(4, LOOP_CLR_FD) = 0 [pid 5175] close(3) = 0 [pid 5175] mkdir("./file0", 0777 [pid 5171] close(4 [pid 5175] <... mkdir resumed>) = 0 [ 70.933582][ T5174] NILFS (loop0): invalid segment: Checksum error in segment payload [ 70.941279][ T5175] loop3: detected capacity change from 0 to 4096 [ 70.949438][ T5176] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.970009][ T5173] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5175] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5171] <... close resumed>) = 0 [pid 5171] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5171] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5171] ftruncate(5, 33587195) = 0 [ 70.987686][ T5174] NILFS (loop0): trying rollback from an earlier position [ 71.000212][ T5172] NILFS (loop2): recovery complete [ 71.008909][ T5175] NILFS (loop3): invalid segment: Checksum error in segment payload [ 71.022444][ T5177] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5171] sendfile(4, 5, NULL, 281474978811909 [pid 5172] <... mount resumed>) = 0 [pid 5172] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5172] chdir("./file0") = 0 [pid 5172] ioctl(4, LOOP_CLR_FD) = 0 [pid 5172] close(4) = 0 [ 71.033232][ T5173] NILFS (loop1): trying rollback from an earlier position [pid 5172] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5172] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5172] ftruncate(5, 33587195) = 0 [ 71.066885][ T5175] NILFS (loop3): trying rollback from an earlier position [ 71.082765][ T5174] NILFS (loop0): recovery complete [ 71.101364][ T5173] NILFS (loop1): recovery complete [pid 5172] sendfile(4, 5, NULL, 281474978811909 [pid 5174] <... mount resumed>) = 0 [pid 5173] <... mount resumed>) = 0 [pid 5173] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5173] chdir("./file0") = 0 [pid 5173] ioctl(4, LOOP_CLR_FD) = 0 [pid 5173] close(4 [pid 5174] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5173] <... close resumed>) = 0 [pid 5174] <... openat resumed>) = 3 [pid 5173] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5174] chdir("./file0" [pid 5173] <... open resumed>) = 4 [pid 5174] <... chdir resumed>) = 0 [pid 5174] ioctl(4, LOOP_CLR_FD [pid 5173] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5174] <... ioctl resumed>) = 0 [pid 5174] close(4) = 0 [pid 5173] <... open resumed>) = 5 [pid 5174] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5173] ftruncate(5, 33587195 [pid 5174] <... open resumed>) = 4 [pid 5173] <... ftruncate resumed>) = 0 [pid 5174] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5173] sendfile(4, 5, NULL, 281474978811909 [pid 5174] ftruncate(5, 33587195) = 0 [ 71.129561][ T5178] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.137603][ T5179] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.160855][ T5175] NILFS (loop3): recovery complete [pid 5174] sendfile(4, 5, NULL, 281474978811909 [pid 5175] <... mount resumed>) = 0 [pid 5175] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5175] chdir("./file0") = 0 [pid 5175] ioctl(4, LOOP_CLR_FD) = 0 [pid 5175] close(4) = 0 [pid 5175] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5175] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5175] ftruncate(5, 33587195) = 0 [pid 5175] sendfile(4, 5, NULL, 281474978811909 [pid 5169] <... sendfile resumed>) = 1048576 [pid 5169] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5169] exit_group(0) = ? [ 71.227147][ T5180] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5169] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5169, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5066] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./8/binderfs") = 0 [pid 5066] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5066] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./8/file0") = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./8") = 0 [pid 5066] mkdir("./9", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5181 ./strace-static-x86_64: Process 5181 attached [pid 5181] chdir("./9") = 0 [pid 5181] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5181] setpgid(0, 0) = 0 [pid 5181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5181] write(3, "1000", 4) = 4 [pid 5181] close(3) = 0 [pid 5181] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5181] memfd_create("syzkaller", 0) = 3 [pid 5181] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5181] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5181] munmap(0x7ff395729000, 2097152) = 0 [pid 5181] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5181] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5181] close(3) = 0 [pid 5181] mkdir("./file0", 0777) = 0 [ 71.860019][ T5181] loop4: detected capacity change from 0 to 4096 [ 71.968580][ T5181] NILFS (loop4): invalid segment: Checksum error in segment payload [ 72.006311][ T5181] NILFS (loop4): trying rollback from an earlier position [pid 5181] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5172] <... sendfile resumed>) = 1048576 [pid 5172] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5172] exit_group(0) = ? [pid 5171] <... sendfile resumed>) = 1048576 [pid 5171] open(NULL, O_RDONLY [pid 5172] +++ exited with 0 +++ [pid 5171] <... open resumed>) = -1 EFAULT (Bad address) [pid 5171] exit_group(0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5172, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5171] <... exit_group resumed>) = ? [pid 5171] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5171, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5064] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] getdents64(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] fstat(3, [pid 5064] lstat("./8/binderfs", [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] getdents64(3, [pid 5064] unlink("./8/binderfs" [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] <... unlink resumed>) = 0 [pid 5067] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./8/binderfs") = 0 [ 72.094703][ T5181] NILFS (loop4): recovery complete [pid 5067] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5181] <... mount resumed>) = 0 [pid 5181] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5181] chdir("./file0") = 0 [pid 5181] ioctl(4, LOOP_CLR_FD) = 0 [pid 5181] close(4) = 0 [pid 5181] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5181] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5181] ftruncate(5, 33587195) = 0 [pid 5173] <... sendfile resumed>) = 1048576 [pid 5181] sendfile(4, 5, NULL, 281474978811909 [pid 5173] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5173] exit_group(0) = ? [pid 5174] <... sendfile resumed>) = 1048576 [pid 5173] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5173, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5174] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5174] exit_group(0) = ? [pid 5063] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, [pid 5174] +++ exited with 0 +++ [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5174, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [ 72.150343][ T5182] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] lstat("./8/binderfs", [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] unlink("./8/binderfs" [pid 5062] <... openat resumed>) = 3 [pid 5063] <... unlink resumed>) = 0 [pid 5062] fstat(3, [pid 5063] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] unlink("./8/binderfs") = 0 [pid 5062] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = 0 [pid 5175] <... sendfile resumed>) = 1048576 [pid 5175] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5175] exit_group(0) = ? [pid 5175] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5175, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5065] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./8/binderfs") = 0 [pid 5065] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./8/file0" [pid 5067] <... umount2 resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./8") = 0 [pid 5064] mkdir("./9", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5183 [pid 5067] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5183 attached [pid 5183] chdir("./9" [pid 5067] getdents64(4, [pid 5183] <... chdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5183] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] close(4 [pid 5183] <... prctl resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5183] setpgid(0, 0 [pid 5067] rmdir("./8/file0" [pid 5183] <... setpgid resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5183] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] getdents64(3, [pid 5183] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5183] write(3, "1000", 4 [pid 5067] close(3 [pid 5183] <... write resumed>) = 4 [pid 5067] <... close resumed>) = 0 [pid 5183] close(3 [pid 5067] rmdir("./8" [pid 5183] <... close resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5183] symlink("/dev/binderfs", "./binderfs" [pid 5067] mkdir("./9", 0777 [pid 5183] <... symlink resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5183] memfd_create("syzkaller", 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5183] <... memfd_create resumed>) = 3 [pid 5067] <... openat resumed>) = 3 [pid 5183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5183] <... mmap resumed>) = 0x7ff395729000 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5184 ./strace-static-x86_64: Process 5184 attached [pid 5184] chdir("./9") = 0 [pid 5184] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5184] setpgid(0, 0) = 0 [pid 5184] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5184] write(3, "1000", 4) = 4 [pid 5184] close(3) = 0 [pid 5184] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5184] memfd_create("syzkaller", 0) = 3 [pid 5184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5184] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5183] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5063] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] lstat("./8/file0", [pid 5063] <... openat resumed>) = 4 [pid 5062] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] fstat(4, [pid 5062] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(4, [pid 5062] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] <... openat resumed>) = 4 [pid 5063] getdents64(4, [pid 5062] fstat(4, [pid 5063] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] close(4 [pid 5062] getdents64(4, [pid 5063] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] rmdir("./8/file0" [pid 5062] getdents64(4, [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(3, [pid 5062] close(4 [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] <... close resumed>) = 0 [pid 5063] close(3 [pid 5062] rmdir("./8/file0" [pid 5063] <... close resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5063] rmdir("./8" [pid 5062] getdents64(3, [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] mkdir("./9", 0777 [pid 5062] close(3 [pid 5063] <... mkdir resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] rmdir("./8" [pid 5063] <... openat resumed>) = 3 [pid 5062] <... rmdir resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] mkdir("./9", 0777 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5062] <... mkdir resumed>) = 0 [pid 5063] close(3 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] <... umount2 resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5185 [pid 5062] close(3 [pid 5183] <... write resumed>) = 2097152 [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5186 ./strace-static-x86_64: Process 5185 attached [pid 5185] chdir("./9" [pid 5183] munmap(0x7ff395729000, 2097152 [pid 5185] <... chdir resumed>) = 0 [pid 5183] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 5186 attached [pid 5185] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5183] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5185] setpgid(0, 0 [pid 5183] <... openat resumed>) = 4 [pid 5185] <... setpgid resumed>) = 0 [pid 5183] ioctl(4, LOOP_SET_FD, 3 [pid 5185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5185] write(3, "1000", 4) = 4 [pid 5185] close(3) = 0 [pid 5185] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5185] memfd_create("syzkaller", 0 [pid 5184] <... write resumed>) = 2097152 [pid 5185] <... memfd_create resumed>) = 3 [pid 5186] chdir("./9" [pid 5185] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5186] <... chdir resumed>) = 0 [pid 5185] <... mmap resumed>) = 0x7ff395729000 [pid 5186] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5186] <... prctl resumed>) = 0 [pid 5065] lstat("./8/file0", [pid 5186] setpgid(0, 0 [pid 5184] munmap(0x7ff395729000, 2097152 [pid 5186] <... setpgid resumed>) = 0 [pid 5184] <... munmap resumed>) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5186] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5184] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5065] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5186] <... openat resumed>) = 3 [pid 5184] <... openat resumed>) = 4 [pid 5183] <... ioctl resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5186] write(3, "1000", 4 [pid 5184] ioctl(4, LOOP_SET_FD, 3 [ 72.522354][ T5183] loop2: detected capacity change from 0 to 4096 [pid 5183] close(3 [pid 5065] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5186] <... write resumed>) = 4 [pid 5183] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5186] close(3 [pid 5183] mkdir("./file0", 0777 [pid 5065] fstat(4, [pid 5186] <... close resumed>) = 0 [pid 5183] <... mkdir resumed>) = 0 [pid 5186] symlink("/dev/binderfs", "./binderfs" [pid 5183] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5186] <... symlink resumed>) = 0 [pid 5065] getdents64(4, [pid 5186] memfd_create("syzkaller", 0) = 3 [pid 5065] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5186] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] getdents64(4, [pid 5186] <... mmap resumed>) = 0x7ff395729000 [pid 5065] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5185] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5184] <... ioctl resumed>) = 0 [pid 5184] close(3) = 0 [ 72.563891][ T5184] loop5: detected capacity change from 0 to 4096 [ 72.601261][ T5183] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5065] close(4 [pid 5184] mkdir("./file0", 0777) = 0 [pid 5065] <... close resumed>) = 0 [pid 5184] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [ 72.609294][ T5183] NILFS (loop2): trying rollback from an earlier position [pid 5065] rmdir("./8/file0" [pid 5186] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./8") = 0 [pid 5065] mkdir("./9", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3 [pid 5186] <... write resumed>) = 2097152 [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5187 ./strace-static-x86_64: Process 5187 attached [pid 5187] chdir("./9" [pid 5185] <... write resumed>) = 2097152 [pid 5187] <... chdir resumed>) = 0 [ 72.636657][ T5184] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5187] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5187] setpgid(0, 0) = 0 [pid 5187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5185] munmap(0x7ff395729000, 2097152 [pid 5187] <... openat resumed>) = 3 [pid 5185] <... munmap resumed>) = 0 [pid 5187] write(3, "1000", 4 [pid 5185] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5187] <... write resumed>) = 4 [pid 5185] <... openat resumed>) = 4 [pid 5187] close(3 [pid 5185] ioctl(4, LOOP_SET_FD, 3 [pid 5187] <... close resumed>) = 0 [pid 5186] munmap(0x7ff395729000, 2097152 [pid 5187] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5187] memfd_create("syzkaller", 0) = 3 [pid 5187] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5186] <... munmap resumed>) = 0 [pid 5187] <... mmap resumed>) = 0x7ff395729000 [pid 5186] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5186] ioctl(4, LOOP_SET_FD, 3 [pid 5185] <... ioctl resumed>) = 0 [pid 5185] close(3) = 0 [pid 5185] mkdir("./file0", 0777) = 0 [ 72.683429][ T5184] NILFS (loop5): trying rollback from an earlier position [ 72.705255][ T5185] loop1: detected capacity change from 0 to 4096 [ 72.719530][ T5183] NILFS (loop2): recovery complete [ 72.727101][ T5186] loop0: detected capacity change from 0 to 4096 [pid 5185] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5187] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5186] <... ioctl resumed>) = 0 [pid 5183] <... mount resumed>) = 0 [pid 5183] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5186] close(3 [pid 5183] <... openat resumed>) = 3 [pid 5183] chdir("./file0") = 0 [pid 5183] ioctl(4, LOOP_CLR_FD) = 0 [pid 5186] <... close resumed>) = 0 [pid 5183] close(4 [pid 5186] mkdir("./file0", 0777 [pid 5183] <... close resumed>) = 0 [pid 5183] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5186] <... mkdir resumed>) = 0 [pid 5183] <... open resumed>) = 4 [pid 5186] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5183] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5183] ftruncate(5, 33587195) = 0 [ 72.742518][ T5184] NILFS (loop5): recovery complete [ 72.756373][ T5188] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.758199][ T5185] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5183] sendfile(4, 5, NULL, 281474978811909 [pid 5184] <... mount resumed>) = 0 [pid 5184] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5184] chdir("./file0") = 0 [pid 5184] ioctl(4, LOOP_CLR_FD) = 0 [pid 5184] close(4) = 0 [pid 5184] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5184] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5184] ftruncate(5, 33587195) = 0 [pid 5184] sendfile(4, 5, NULL, 281474978811909 [pid 5187] <... write resumed>) = 2097152 [ 72.816666][ T5189] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.839555][ T5186] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5187] munmap(0x7ff395729000, 2097152) = 0 [pid 5187] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5187] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5187] close(3) = 0 [pid 5187] mkdir("./file0", 0777) = 0 [ 72.879279][ T5186] NILFS (loop0): trying rollback from an earlier position [ 72.896436][ T5185] NILFS (loop1): trying rollback from an earlier position [ 72.914913][ T5187] loop3: detected capacity change from 0 to 4096 [pid 5187] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5186] <... mount resumed>) = 0 [ 72.973801][ T5186] NILFS (loop0): recovery complete [ 72.979321][ T5187] NILFS (loop3): invalid segment: Checksum error in segment payload [ 72.983932][ T5185] NILFS (loop1): recovery complete [ 72.998730][ T5190] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5186] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5186] chdir("./file0") = 0 [pid 5186] ioctl(4, LOOP_CLR_FD) = 0 [pid 5186] close(4) = 0 [pid 5185] <... mount resumed>) = 0 [pid 5185] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5185] chdir("./file0") = 0 [pid 5185] ioctl(4, LOOP_CLR_FD) = 0 [pid 5185] close(4 [pid 5186] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5185] <... close resumed>) = 0 [pid 5185] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5186] <... open resumed>) = 4 [pid 5185] <... open resumed>) = 4 [pid 5186] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5185] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5186] <... open resumed>) = 5 [pid 5185] <... open resumed>) = 5 [pid 5186] ftruncate(5, 33587195 [pid 5185] ftruncate(5, 33587195 [pid 5186] <... ftruncate resumed>) = 0 [pid 5185] <... ftruncate resumed>) = 0 [pid 5186] sendfile(4, 5, NULL, 281474978811909 [ 73.033891][ T5187] NILFS (loop3): trying rollback from an earlier position [ 73.054140][ T5191] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5185] sendfile(4, 5, NULL, 281474978811909 [pid 5181] <... sendfile resumed>) = 1048576 [pid 5181] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5181] exit_group(0) = ? [pid 5181] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5181, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5066] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 73.127092][ T5187] NILFS (loop3): recovery complete [pid 5066] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5187] <... mount resumed>) = 0 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5187] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] getdents64(3, [pid 5187] <... openat resumed>) = 3 [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5187] chdir("./file0" [pid 5066] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5187] <... chdir resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5187] ioctl(4, LOOP_CLR_FD [pid 5066] lstat("./9/binderfs", [pid 5187] <... ioctl resumed>) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 73.171790][ T5192] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5187] close(4 [pid 5066] unlink("./9/binderfs" [pid 5187] <... close resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5187] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5066] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5187] <... open resumed>) = 4 [pid 5187] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5187] ftruncate(5, 33587195) = 0 [pid 5187] sendfile(4, 5, NULL, 281474978811909 [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./9/file0") = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./9") = 0 [pid 5066] mkdir("./10", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5193 ./strace-static-x86_64: Process 5193 attached [pid 5193] chdir("./10") = 0 [pid 5193] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5193] setpgid(0, 0) = 0 [pid 5193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5193] write(3, "1000", 4) = 4 [pid 5193] close(3) = 0 [pid 5193] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5193] memfd_create("syzkaller", 0) = 3 [pid 5193] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5193] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5193] munmap(0x7ff395729000, 2097152) = 0 [pid 5193] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5193] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5193] close(3) = 0 [pid 5193] mkdir("./file0", 0777) = 0 [ 73.765419][ T5193] loop4: detected capacity change from 0 to 4096 [pid 5193] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5184] <... sendfile resumed>) = 1048576 [pid 5184] open(NULL, O_RDONLY [pid 5183] <... sendfile resumed>) = 1048576 [pid 5184] <... open resumed>) = -1 EFAULT (Bad address) [pid 5183] open(NULL, O_RDONLY [pid 5184] exit_group(0 [pid 5183] <... open resumed>) = -1 EFAULT (Bad address) [pid 5184] <... exit_group resumed>) = ? [pid 5183] exit_group(0 [pid 5184] +++ exited with 0 +++ [pid 5183] <... exit_group resumed>) = ? [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5184, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5067] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5183] +++ exited with 0 +++ [pid 5067] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5183, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] getdents64(3, [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] fstat(3, [pid 5067] lstat("./9/binderfs", [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] getdents64(3, [pid 5067] unlink("./9/binderfs" [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] <... unlink resumed>) = 0 [pid 5064] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 73.835358][ T5193] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5064] unlink("./9/binderfs") = 0 [ 73.879458][ T5193] NILFS (loop4): trying rollback from an earlier position [pid 5064] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5186] <... sendfile resumed>) = 1048576 [pid 5186] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5186] exit_group(0) = ? [pid 5186] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5186, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [ 73.982888][ T5193] NILFS (loop4): recovery complete [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5062] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] unlink("./9/binderfs") = 0 [pid 5062] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5193] <... mount resumed>) = 0 [pid 5193] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5193] chdir("./file0") = 0 [pid 5193] ioctl(4, LOOP_CLR_FD) = 0 [pid 5193] close(4) = 0 [pid 5193] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5193] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5067] <... umount2 resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5193] ftruncate(5, 33587195 [pid 5067] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5193] <... ftruncate resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5193] sendfile(4, 5, NULL, 281474978811909 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] lstat("./9/file0", [pid 5067] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5185] <... sendfile resumed>) = 1048576 [pid 5067] <... openat resumed>) = 4 [pid 5064] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5185] open(NULL, O_RDONLY [pid 5067] fstat(4, [pid 5064] <... openat resumed>) = 4 [pid 5185] <... open resumed>) = -1 EFAULT (Bad address) [pid 5185] exit_group(0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 74.060237][ T5194] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] fstat(4, [pid 5185] <... exit_group resumed>) = ? [pid 5067] getdents64(4, [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5185] +++ exited with 0 +++ [pid 5067] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5185, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5067] getdents64(4, [pid 5064] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] close(4 [pid 5064] getdents64(4, [pid 5063] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5067] rmdir("./9/file0" [pid 5064] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] fstat(3, [pid 5067] <... rmdir resumed>) = 0 [pid 5064] close(4 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] unlink("./9/binderfs" [pid 5067] getdents64(3, [pid 5064] rmdir("./9/file0" [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5067] close(3 [pid 5064] rmdir("./9" [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./9" [pid 5064] <... rmdir resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5064] mkdir("./10", 0777 [pid 5067] mkdir("./10", 0777 [pid 5064] <... mkdir resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5064] <... openat resumed>) = 3 [pid 5067] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] close(3 [pid 5064] close(3 [pid 5067] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5195 [pid 5064] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5196 ./strace-static-x86_64: Process 5195 attached [pid 5195] chdir("./10") = 0 [pid 5187] <... sendfile resumed>) = 1048576 [pid 5195] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5187] open(NULL, O_RDONLY [pid 5195] <... prctl resumed>) = 0 [pid 5187] <... open resumed>) = -1 EFAULT (Bad address) [pid 5187] exit_group(0) = ? [pid 5195] setpgid(0, 0) = 0 [pid 5187] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5187, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5195] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5062] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5196 attached [pid 5196] chdir("./10") = 0 [pid 5196] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5195] write(3, "1000", 4 [pid 5065] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5195] <... write resumed>) = 4 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5196] <... prctl resumed>) = 0 [pid 5196] setpgid(0, 0) = 0 [pid 5196] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5196] write(3, "1000", 4) = 4 [pid 5196] close(3) = 0 [pid 5196] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5196] memfd_create("syzkaller", 0 [pid 5195] close(3 [pid 5065] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5196] <... memfd_create resumed>) = 3 [pid 5195] <... close resumed>) = 0 [pid 5196] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5195] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... openat resumed>) = 3 [pid 5195] <... symlink resumed>) = 0 [pid 5062] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] fstat(3, [pid 5195] memfd_create("syzkaller", 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] lstat("./9/file0", [pid 5195] <... memfd_create resumed>) = 3 [pid 5065] getdents64(3, [pid 5062] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5195] <... mmap resumed>) = 0x7ff395729000 [pid 5065] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./9/binderfs", [pid 5062] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] fstat(4, [pid 5065] unlink("./9/binderfs" [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 5065] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5196] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5195] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./9/file0") = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./9") = 0 [pid 5062] mkdir("./10", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5197 ./strace-static-x86_64: Process 5197 attached [pid 5197] chdir("./10") = 0 [pid 5196] <... write resumed>) = 2097152 [pid 5197] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5196] munmap(0x7ff395729000, 2097152 [pid 5195] <... write resumed>) = 2097152 [pid 5063] <... umount2 resumed>) = 0 [pid 5197] setpgid(0, 0 [pid 5195] munmap(0x7ff395729000, 2097152 [pid 5196] <... munmap resumed>) = 0 [pid 5197] <... setpgid resumed>) = 0 [pid 5195] <... munmap resumed>) = 0 [pid 5196] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5063] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5197] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5196] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./9/file0") = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./9" [pid 5197] <... openat resumed>) = 3 [pid 5197] write(3, "1000", 4 [pid 5195] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5197] <... write resumed>) = 4 [pid 5197] close(3 [pid 5195] <... openat resumed>) = 4 [pid 5197] <... close resumed>) = 0 [pid 5195] ioctl(4, LOOP_SET_FD, 3 [pid 5197] symlink("/dev/binderfs", "./binderfs" [pid 5196] <... ioctl resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] mkdir("./10", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5197] <... symlink resumed>) = 0 [pid 5197] memfd_create("syzkaller", 0 [pid 5196] close(3 [pid 5195] <... ioctl resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5197] <... memfd_create resumed>) = 3 [pid 5196] <... close resumed>) = 0 [pid 5195] close(3 [pid 5065] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5197] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5196] mkdir("./file0", 0777 [pid 5195] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5197] <... mmap resumed>) = 0x7ff395729000 [pid 5196] <... mkdir resumed>) = 0 [pid 5195] mkdir("./file0", 0777 [pid 5065] lstat("./9/file0", [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3 [pid 5196] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5195] <... mkdir resumed>) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... close resumed>) = 0 [pid 5195] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5198 [ 74.372230][ T5196] loop2: detected capacity change from 0 to 4096 [ 74.383819][ T5195] loop5: detected capacity change from 0 to 4096 ./strace-static-x86_64: Process 5198 attached [pid 5198] chdir("./10") = 0 [pid 5198] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5198] setpgid(0, 0) = 0 [pid 5198] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5198] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5198] write(3, "1000", 4) = 4 [pid 5198] close(3) = 0 [pid 5198] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5065] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5198] memfd_create("syzkaller", 0) = 3 [pid 5198] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5065] <... openat resumed>) = 4 [pid 5065] fstat(4, [pid 5197] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [ 74.435706][ T5195] NILFS (loop5): invalid segment: Checksum error in segment payload [ 74.455410][ T5196] NILFS (loop2): invalid segment: Checksum error in segment payload [ 74.466499][ T5195] NILFS (loop5): trying rollback from an earlier position [ 74.476016][ T5196] NILFS (loop2): trying rollback from an earlier position [pid 5065] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./9/file0") = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5196] <... mount resumed>) = 0 [pid 5198] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5196] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] rmdir("./9" [pid 5196] <... openat resumed>) = 3 [pid 5196] chdir("./file0" [pid 5065] <... rmdir resumed>) = 0 [pid 5196] <... chdir resumed>) = 0 [pid 5195] <... mount resumed>) = 0 [pid 5065] mkdir("./10", 0777 [pid 5195] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5195] chdir("./file0") = 0 [pid 5195] ioctl(4, LOOP_CLR_FD) = 0 [ 74.500491][ T5196] NILFS (loop2): recovery complete [ 74.514463][ T5195] NILFS (loop5): recovery complete [ 74.523445][ T5200] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5195] close(4 [pid 5196] ioctl(4, LOOP_CLR_FD [pid 5195] <... close resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5196] <... ioctl resumed>) = 0 [pid 5195] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5198] <... write resumed>) = 2097152 [pid 5196] close(4 [pid 5195] <... open resumed>) = 4 [pid 5198] munmap(0x7ff395729000, 2097152 [pid 5197] <... write resumed>) = 2097152 [pid 5196] <... close resumed>) = 0 [pid 5195] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5065] <... openat resumed>) = 3 [pid 5198] <... munmap resumed>) = 0 [pid 5196] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5195] <... open resumed>) = 5 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5198] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5196] <... open resumed>) = 4 [pid 5195] ftruncate(5, 33587195 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5198] <... openat resumed>) = 4 [pid 5196] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5195] <... ftruncate resumed>) = 0 [ 74.541837][ T5199] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] close(3 [pid 5198] ioctl(4, LOOP_SET_FD, 3 [pid 5196] <... open resumed>) = 5 [pid 5195] sendfile(4, 5, NULL, 281474978811909 [pid 5065] <... close resumed>) = 0 [pid 5197] munmap(0x7ff395729000, 2097152) = 0 [pid 5197] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5197] ioctl(4, LOOP_SET_FD, 3 [pid 5198] <... ioctl resumed>) = 0 [pid 5196] ftruncate(5, 33587195 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5196] <... ftruncate resumed>) = 0 [pid 5196] sendfile(4, 5, NULL, 281474978811909 [pid 5198] close(3 [pid 5065] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5201 ./strace-static-x86_64: Process 5201 attached [pid 5198] <... close resumed>) = 0 [pid 5201] chdir("./10" [pid 5198] mkdir("./file0", 0777 [pid 5201] <... chdir resumed>) = 0 [pid 5198] <... mkdir resumed>) = 0 [pid 5201] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5198] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5201] <... prctl resumed>) = 0 [pid 5201] setpgid(0, 0) = 0 [pid 5197] <... ioctl resumed>) = 0 [pid 5201] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 74.592434][ T5198] loop1: detected capacity change from 0 to 4096 [ 74.598841][ T5197] loop0: detected capacity change from 0 to 4096 [pid 5197] close(3 [pid 5201] write(3, "1000", 4 [pid 5197] <... close resumed>) = 0 [pid 5201] <... write resumed>) = 4 [pid 5197] mkdir("./file0", 0777 [pid 5201] close(3 [pid 5197] <... mkdir resumed>) = 0 [pid 5201] <... close resumed>) = 0 [pid 5197] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5201] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5201] memfd_create("syzkaller", 0) = 3 [pid 5201] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [ 74.669485][ T5198] NILFS (loop1): invalid segment: Checksum error in segment payload [ 74.705608][ T5197] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5201] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5201] munmap(0x7ff395729000, 2097152) = 0 [ 74.722386][ T5198] NILFS (loop1): trying rollback from an earlier position [ 74.756600][ T5197] NILFS (loop0): trying rollback from an earlier position [pid 5201] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5201] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5201] close(3) = 0 [pid 5201] mkdir("./file0", 0777) = 0 [pid 5201] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5197] <... mount resumed>) = 0 [ 74.791276][ T5198] NILFS (loop1): recovery complete [ 74.791550][ T5201] loop3: detected capacity change from 0 to 4096 [ 74.803132][ T5197] NILFS (loop0): recovery complete [ 74.830602][ T5203] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5197] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5198] <... mount resumed>) = 0 [pid 5198] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5198] chdir("./file0") = 0 [pid 5198] ioctl(4, LOOP_CLR_FD) = 0 [pid 5198] close(4) = 0 [pid 5198] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5197] <... openat resumed>) = 3 [pid 5198] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5198] ftruncate(5, 33587195 [ 74.846317][ T5202] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.857476][ T5201] NILFS (loop3): invalid segment: Checksum error in segment payload [ 74.878843][ T5201] NILFS (loop3): trying rollback from an earlier position [pid 5197] chdir("./file0" [pid 5198] <... ftruncate resumed>) = 0 [pid 5197] <... chdir resumed>) = 0 [pid 5198] sendfile(4, 5, NULL, 281474978811909 [pid 5197] ioctl(4, LOOP_CLR_FD) = 0 [pid 5197] close(4) = 0 [pid 5201] <... mount resumed>) = 0 [pid 5201] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5201] chdir("./file0") = 0 [pid 5201] ioctl(4, LOOP_CLR_FD) = 0 [pid 5201] close(4) = 0 [ 74.893757][ T5201] NILFS (loop3): recovery complete [pid 5201] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5197] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5201] <... open resumed>) = 4 [pid 5201] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5197] <... open resumed>) = 4 [pid 5201] <... open resumed>) = 5 [pid 5197] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5201] ftruncate(5, 33587195) = 0 [pid 5201] sendfile(4, 5, NULL, 281474978811909 [pid 5197] <... open resumed>) = 5 [pid 5197] ftruncate(5, 33587195) = 0 [ 74.932351][ T5204] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5197] sendfile(4, 5, NULL, 281474978811909 [pid 5193] <... sendfile resumed>) = 1048576 [pid 5193] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5193] exit_group(0) = ? [pid 5193] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5193, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- [pid 5066] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./10/binderfs") = 0 [pid 5066] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5066] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./10/file0") = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./10") = 0 [pid 5066] mkdir("./11", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5205 ./strace-static-x86_64: Process 5205 attached [pid 5205] chdir("./11") = 0 [pid 5205] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5205] setpgid(0, 0) = 0 [pid 5205] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5205] write(3, "1000", 4) = 4 [pid 5205] close(3) = 0 [pid 5205] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5205] memfd_create("syzkaller", 0) = 3 [pid 5205] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5205] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5195] <... sendfile resumed>) = 1048576 [pid 5205] munmap(0x7ff395729000, 2097152) = 0 [pid 5195] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5195] exit_group(0) = ? [pid 5205] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5205] ioctl(4, LOOP_SET_FD, 3 [pid 5195] +++ exited with 0 +++ [pid 5205] <... ioctl resumed>) = 0 [pid 5196] <... sendfile resumed>) = 1048576 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5195, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- [pid 5205] close(3) = 0 [pid 5205] mkdir("./file0", 0777) = 0 [pid 5205] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5067] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./10/binderfs") = 0 [pid 5067] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5196] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5196] exit_group(0) = ? [pid 5196] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5196, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5064] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./10/binderfs") = 0 [ 75.548741][ T5205] loop4: detected capacity change from 0 to 4096 [ 75.573160][ T5205] NILFS (loop4): invalid segment: Checksum error in segment payload [ 75.636680][ T5205] NILFS (loop4): trying rollback from an earlier position [ 75.721811][ T5205] NILFS (loop4): recovery complete [pid 5064] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5205] <... mount resumed>) = 0 [pid 5205] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... umount2 resumed>) = 0 [pid 5205] <... openat resumed>) = 3 [pid 5064] <... umount2 resumed>) = 0 [pid 5205] chdir("./file0") = 0 [pid 5205] ioctl(4, LOOP_CLR_FD) = 0 [pid 5205] close(4) = 0 [pid 5205] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5064] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./10/file0", [pid 5205] <... open resumed>) = 4 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5205] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5064] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5205] <... open resumed>) = 5 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5205] ftruncate(5, 33587195 [pid 5064] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5205] <... ftruncate resumed>) = 0 [pid 5064] <... openat resumed>) = 4 [pid 5205] sendfile(4, 5, NULL, 281474978811909 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./10/file0") = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./10") = 0 [pid 5064] mkdir("./11", 0777 [pid 5067] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... mkdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5067] lstat("./10/file0", [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5198] <... sendfile resumed>) = 1048576 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] close(3 [pid 5198] open(NULL, O_RDONLY [pid 5067] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5198] <... open resumed>) = -1 EFAULT (Bad address) [pid 5067] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5198] exit_group(0 [pid 5067] <... openat resumed>) = 4 [ 75.765561][ T5206] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5207 [pid 5198] <... exit_group resumed>) = ? [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5198] +++ exited with 0 +++ [pid 5067] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5207 attached [pid 5067] close(4 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5198, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5207] chdir("./11" [pid 5067] <... close resumed>) = 0 [pid 5063] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5207] <... chdir resumed>) = 0 [pid 5067] rmdir("./10/file0" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5207] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... rmdir resumed>) = 0 [pid 5207] <... prctl resumed>) = 0 [pid 5067] getdents64(3, [pid 5063] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5207] setpgid(0, 0 [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5207] <... setpgid resumed>) = 0 [pid 5067] close(3 [pid 5063] <... openat resumed>) = 3 [pid 5207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... close resumed>) = 0 [pid 5063] fstat(3, [pid 5207] <... openat resumed>) = 3 [pid 5067] rmdir("./10" [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5207] write(3, "1000", 4) = 4 [pid 5067] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, [pid 5207] close(3 [pid 5067] mkdir("./11", 0777 [pid 5207] <... close resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5207] symlink("/dev/binderfs", "./binderfs" [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5063] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5207] <... symlink resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5207] memfd_create("syzkaller", 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5063] lstat("./10/binderfs", [pid 5207] <... memfd_create resumed>) = 3 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5207] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] close(3 [pid 5063] unlink("./10/binderfs" [pid 5207] <... mmap resumed>) = 0x7ff395729000 [pid 5067] <... close resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5207] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5208 ./strace-static-x86_64: Process 5208 attached [pid 5201] <... sendfile resumed>) = 1048576 [pid 5208] chdir("./11" [pid 5201] open(NULL, O_RDONLY [pid 5208] <... chdir resumed>) = 0 [pid 5201] <... open resumed>) = -1 EFAULT (Bad address) [pid 5197] <... sendfile resumed>) = 1048576 [pid 5201] exit_group(0 [pid 5197] open(NULL, O_RDONLY [pid 5208] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5201] <... exit_group resumed>) = ? [pid 5208] <... prctl resumed>) = 0 [pid 5201] +++ exited with 0 +++ [pid 5197] <... open resumed>) = -1 EFAULT (Bad address) [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5201, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5197] exit_group(0 [pid 5208] setpgid(0, 0 [pid 5197] <... exit_group resumed>) = ? [pid 5065] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5208] <... setpgid resumed>) = 0 [pid 5197] +++ exited with 0 +++ [pid 5065] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5208] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] fstat(3, [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5197, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(3, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] fstat(3, [pid 5065] lstat("./10/binderfs", [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] getdents64(3, [pid 5065] unlink("./10/binderfs" [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] <... unlink resumed>) = 0 [pid 5062] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5208] <... openat resumed>) = 3 [pid 5062] lstat("./10/binderfs", [pid 5208] write(3, "1000", 4 [pid 5062] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5208] <... write resumed>) = 4 [pid 5062] unlink("./10/binderfs" [pid 5208] close(3 [pid 5062] <... unlink resumed>) = 0 [pid 5208] <... close resumed>) = 0 [pid 5062] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5208] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5208] memfd_create("syzkaller", 0 [pid 5207] <... write resumed>) = 2097152 [pid 5208] <... memfd_create resumed>) = 3 [pid 5207] munmap(0x7ff395729000, 2097152 [pid 5208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5207] <... munmap resumed>) = 0 [pid 5208] <... mmap resumed>) = 0x7ff395729000 [pid 5207] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5207] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5207] close(3) = 0 [pid 5207] mkdir("./file0", 0777) = 0 [pid 5207] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [ 75.970995][ T5207] loop2: detected capacity change from 0 to 4096 [pid 5208] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5065] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(4, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./10/file0", [pid 5063] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(4 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... close resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] rmdir("./10/file0" [pid 5065] <... openat resumed>) = 4 [pid 5063] <... rmdir resumed>) = 0 [pid 5065] fstat(4, [pid 5063] getdents64(3, [pid 5062] <... umount2 resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5065] getdents64(4, [pid 5063] close(3 [pid 5065] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] <... close resumed>) = 0 [pid 5065] getdents64(4, [pid 5063] rmdir("./10" [pid 5065] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5065] close(4 [pid 5063] mkdir("./11", 0777 [pid 5065] <... close resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5065] rmdir("./10/file0" [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] <... rmdir resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5065] getdents64(3, [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] close(3 [ 76.051452][ T5207] NILFS (loop2): invalid segment: Checksum error in segment payload [ 76.088149][ T5207] NILFS (loop2): trying rollback from an earlier position [pid 5063] close(3 [pid 5208] <... write resumed>) = 2097152 [pid 5065] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5208] munmap(0x7ff395729000, 2097152 [pid 5065] rmdir("./10" [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... rmdir resumed>) = 0 [pid 5065] mkdir("./11", 0777 [pid 5063] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5209 [pid 5065] <... mkdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5208] <... munmap resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5062] lstat("./10/file0", [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3 [pid 5208] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5065] <... close resumed>) = 0 [pid 5062] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5208] <... openat resumed>) = 4 [pid 5062] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5208] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5210 ./strace-static-x86_64: Process 5209 attached [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5209] chdir("./11") = 0 [pid 5209] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5209] setpgid(0, 0) = 0 [pid 5209] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5209] write(3, "1000", 4) = 4 [pid 5209] close(3) = 0 [pid 5209] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5209] memfd_create("syzkaller", 0 [pid 5062] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5209] <... memfd_create resumed>) = 3 [pid 5062] <... openat resumed>) = 4 [pid 5062] fstat(4, [pid 5209] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5208] <... ioctl resumed>) = 0 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5208] close(3 [pid 5062] getdents64(4, ./strace-static-x86_64: Process 5210 attached [pid 5208] <... close resumed>) = 0 [pid 5207] <... mount resumed>) = 0 [pid 5207] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5210] chdir("./11" [pid 5208] mkdir("./file0", 0777 [pid 5207] <... openat resumed>) = 3 [pid 5210] <... chdir resumed>) = 0 [pid 5208] <... mkdir resumed>) = 0 [pid 5207] chdir("./file0" [pid 5062] getdents64(4, [pid 5210] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5208] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5207] <... chdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5210] <... prctl resumed>) = 0 [pid 5062] close(4 [pid 5210] setpgid(0, 0 [pid 5207] ioctl(4, LOOP_CLR_FD [pid 5062] <... close resumed>) = 0 [pid 5210] <... setpgid resumed>) = 0 [pid 5207] <... ioctl resumed>) = 0 [pid 5062] rmdir("./10/file0" [ 76.134718][ T5207] NILFS (loop2): recovery complete [ 76.153367][ T5208] loop5: detected capacity change from 0 to 4096 [ 76.166856][ T5211] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5210] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5207] close(4 [pid 5062] <... rmdir resumed>) = 0 [pid 5210] <... openat resumed>) = 3 [pid 5062] getdents64(3, [pid 5210] write(3, "1000", 4 [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5210] <... write resumed>) = 4 [pid 5062] close(3 [pid 5210] close(3 [pid 5062] <... close resumed>) = 0 [pid 5210] <... close resumed>) = 0 [pid 5062] rmdir("./10" [pid 5210] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... rmdir resumed>) = 0 [pid 5210] <... symlink resumed>) = 0 [pid 5207] <... close resumed>) = 0 [pid 5062] mkdir("./11", 0777 [pid 5210] memfd_create("syzkaller", 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5210] <... memfd_create resumed>) = 3 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5210] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5207] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] <... openat resumed>) = 3 [pid 5210] <... mmap resumed>) = 0x7ff395729000 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5210] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5209] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5207] <... open resumed>) = 4 [pid 5062] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5212 [ 76.206265][ T5208] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5207] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5207] ftruncate(5, 33587195./strace-static-x86_64: Process 5212 attached ) = 0 [pid 5207] sendfile(4, 5, NULL, 281474978811909 [pid 5212] chdir("./11") = 0 [pid 5212] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5212] setpgid(0, 0) = 0 [pid 5212] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5212] write(3, "1000", 4) = 4 [pid 5212] close(3) = 0 [pid 5212] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5212] memfd_create("syzkaller", 0) = 3 [pid 5212] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [ 76.254860][ T5208] NILFS (loop5): trying rollback from an earlier position [pid 5209] <... write resumed>) = 2097152 [pid 5209] munmap(0x7ff395729000, 2097152) = 0 [pid 5212] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5209] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5209] ioctl(4, LOOP_SET_FD, 3 [pid 5210] <... write resumed>) = 2097152 [pid 5210] munmap(0x7ff395729000, 2097152) = 0 [pid 5210] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5209] <... ioctl resumed>) = 0 [pid 5210] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5209] close(3) = 0 [pid 5209] mkdir("./file0", 0777 [pid 5210] close(3 [pid 5209] <... mkdir resumed>) = 0 [ 76.335982][ T5209] loop1: detected capacity change from 0 to 4096 [ 76.343255][ T5208] NILFS (loop5): recovery complete [ 76.372990][ T5210] loop3: detected capacity change from 0 to 4096 [pid 5209] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5208] <... mount resumed>) = 0 [pid 5210] <... close resumed>) = 0 [pid 5210] mkdir("./file0", 0777) = 0 [pid 5208] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5208] chdir("./file0") = 0 [pid 5208] ioctl(4, LOOP_CLR_FD) = 0 [pid 5208] close(4) = 0 [pid 5210] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5208] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5212] <... write resumed>) = 2097152 [pid 5212] munmap(0x7ff395729000, 2097152 [pid 5208] <... open resumed>) = 4 [pid 5212] <... munmap resumed>) = 0 [pid 5208] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5212] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5208] <... open resumed>) = 5 [pid 5212] <... openat resumed>) = 4 [pid 5208] ftruncate(5, 33587195 [pid 5212] ioctl(4, LOOP_SET_FD, 3 [pid 5208] <... ftruncate resumed>) = 0 [ 76.387888][ T5213] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.399416][ T5209] NILFS (loop1): invalid segment: Checksum error in segment payload [ 76.428112][ T5209] NILFS (loop1): trying rollback from an earlier position [pid 5212] <... ioctl resumed>) = 0 [pid 5208] sendfile(4, 5, NULL, 281474978811909 [pid 5212] close(3) = 0 [pid 5212] mkdir("./file0", 0777) = 0 [ 76.450899][ T5212] loop0: detected capacity change from 0 to 4096 [ 76.465730][ T5210] NILFS (loop3): invalid segment: Checksum error in segment payload [ 76.492284][ T1025] cfg80211: failed to load regulatory.db [ 76.513081][ T5209] NILFS (loop1): recovery complete [ 76.521336][ T5210] NILFS (loop3): trying rollback from an earlier position [ 76.534468][ T5212] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5212] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5209] <... mount resumed>) = 0 [pid 5209] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5209] chdir("./file0") = 0 [pid 5209] ioctl(4, LOOP_CLR_FD [pid 5212] <... mount resumed>) = 0 [pid 5209] <... ioctl resumed>) = 0 [ 76.552596][ T5214] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.569042][ T5212] NILFS (loop0): trying rollback from an earlier position [ 76.588822][ T5212] NILFS (loop0): recovery complete [pid 5212] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5209] close(4 [pid 5212] <... openat resumed>) = 3 [pid 5209] <... close resumed>) = 0 [pid 5212] chdir("./file0" [pid 5209] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5212] <... chdir resumed>) = 0 [pid 5209] <... open resumed>) = 4 [pid 5212] ioctl(4, LOOP_CLR_FD [pid 5209] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5212] <... ioctl resumed>) = 0 [pid 5209] <... open resumed>) = 5 [pid 5212] close(4 [pid 5209] ftruncate(5, 33587195 [pid 5212] <... close resumed>) = 0 [pid 5209] <... ftruncate resumed>) = 0 [pid 5212] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5209] sendfile(4, 5, NULL, 281474978811909 [pid 5212] <... open resumed>) = 4 [pid 5212] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5212] ftruncate(5, 33587195) = 0 [ 76.596755][ T5215] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.604677][ T5210] NILFS (loop3): recovery complete [pid 5212] sendfile(4, 5, NULL, 281474978811909 [pid 5210] <... mount resumed>) = 0 [pid 5205] <... sendfile resumed>) = 1048576 [pid 5205] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5205] exit_group(0 [pid 5210] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5205] <... exit_group resumed>) = ? [pid 5210] <... openat resumed>) = 3 [pid 5205] +++ exited with 0 +++ [pid 5210] chdir("./file0" [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5205, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5210] <... chdir resumed>) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5210] ioctl(4, LOOP_CLR_FD [pid 5066] <... restart_syscall resumed>) = 0 [pid 5066] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./11/binderfs" [pid 5210] <... ioctl resumed>) = 0 [pid 5210] close(4 [pid 5066] <... unlink resumed>) = 0 [pid 5210] <... close resumed>) = 0 [ 76.651308][ T5216] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5066] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5210] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5210] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5210] ftruncate(5, 33587195) = 0 [pid 5210] sendfile(4, 5, NULL, 281474978811909 [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./11/file0") = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./11") = 0 [pid 5066] mkdir("./12", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5217 ./strace-static-x86_64: Process 5217 attached [pid 5217] chdir("./12") = 0 [pid 5217] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5217] setpgid(0, 0) = 0 [pid 5217] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5217] write(3, "1000", 4) = 4 [pid 5217] close(3) = 0 [pid 5217] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5217] memfd_create("syzkaller", 0) = 3 [pid 5217] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5217] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5207] <... sendfile resumed>) = 1048576 [pid 5207] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5207] exit_group(0) = ? [pid 5207] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5207, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5064] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./11/binderfs") = 0 [pid 5064] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5217] <... write resumed>) = 2097152 [pid 5217] munmap(0x7ff395729000, 2097152) = 0 [pid 5217] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5217] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5217] close(3) = 0 [pid 5217] mkdir("./file0", 0777) = 0 [ 77.263124][ T5217] loop4: detected capacity change from 0 to 4096 [pid 5217] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5208] <... sendfile resumed>) = 1048576 [pid 5208] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [ 77.318774][ T5217] NILFS (loop4): invalid segment: Checksum error in segment payload [ 77.352651][ T5217] NILFS (loop4): trying rollback from an earlier position [pid 5208] exit_group(0 [pid 5064] <... umount2 resumed>) = 0 [pid 5212] <... sendfile resumed>) = 1048576 [pid 5208] <... exit_group resumed>) = ? [pid 5208] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5208, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5212] open(NULL, O_RDONLY [ 77.402472][ T5217] NILFS (loop4): recovery complete [pid 5064] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5212] <... open resumed>) = -1 EFAULT (Bad address) [pid 5217] <... mount resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5217] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5217] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5217] chdir("./file0" [pid 5212] exit_group(0 [pid 5067] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] lstat("./11/file0", [pid 5217] <... chdir resumed>) = 0 [pid 5212] <... exit_group resumed>) = ? [pid 5067] <... openat resumed>) = 3 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5217] ioctl(4, LOOP_CLR_FD [pid 5067] fstat(3, [pid 5212] +++ exited with 0 +++ [pid 5217] <... ioctl resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5217] close(4 [pid 5067] getdents64(3, [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5212, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5217] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./11/file0") = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./11" [pid 5217] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5067] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... rmdir resumed>) = 0 [pid 5062] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] mkdir("./12", 0777 [pid 5217] <... open resumed>) = 4 [pid 5067] lstat("./11/binderfs", [pid 5064] <... mkdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5217] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5062] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5217] <... open resumed>) = 5 [pid 5067] unlink("./11/binderfs" [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5217] ftruncate(5, 33587195 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5062] <... openat resumed>) = 3 [pid 5064] close(3 [pid 5067] <... unlink resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5062] fstat(3, [pid 5217] <... ftruncate resumed>) = 0 [pid 5067] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5217] sendfile(4, 5, NULL, 281474978811909 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, [pid 5064] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5219 [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5219 attached ) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] unlink("./11/binderfs") = 0 [pid 5062] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5219] chdir("./12") = 0 [pid 5219] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5219] setpgid(0, 0) = 0 [pid 5219] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5219] write(3, "1000", 4) = 4 [ 77.424235][ T5218] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5219] close(3) = 0 [pid 5219] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5219] memfd_create("syzkaller", 0) = 3 [pid 5219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5219] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5219] munmap(0x7ff395729000, 2097152) = 0 [pid 5219] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5219] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5219] close(3) = 0 [pid 5219] mkdir("./file0", 0777) = 0 [ 77.571435][ T5219] loop2: detected capacity change from 0 to 4096 [pid 5219] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5209] <... sendfile resumed>) = 1048576 [pid 5209] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5209] exit_group(0) = ? [pid 5209] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5209, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5063] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 77.615760][ T5219] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5063] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./11/binderfs", [pid 5062] <... umount2 resumed>) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./11/binderfs") = 0 [pid 5063] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./11/file0") = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./11") = 0 [pid 5062] mkdir("./12", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5210] <... sendfile resumed>) = 1048576 [pid 5067] <... umount2 resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5210] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5062] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5210] exit_group(0) = ? [pid 5062] close(3 [pid 5210] +++ exited with 0 +++ [pid 5067] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] lstat("./11/file0", [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5210, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5219] <... mount resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 77.689543][ T5219] NILFS (loop2): trying rollback from an earlier position [ 77.716035][ T5219] NILFS (loop2): recovery complete [pid 5065] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5219] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5221 ./strace-static-x86_64: Process 5221 attached [pid 5221] chdir("./12") = 0 [pid 5221] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5221] setpgid(0, 0 [pid 5065] <... openat resumed>) = 3 [pid 5067] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5221] <... setpgid resumed>) = 0 [pid 5219] <... openat resumed>) = 3 [pid 5065] fstat(3, [pid 5221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5219] chdir("./file0" [pid 5067] <... openat resumed>) = 4 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5219] <... chdir resumed>) = 0 [pid 5067] fstat(4, [pid 5065] getdents64(3, [pid 5219] ioctl(4, LOOP_CLR_FD [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5219] <... ioctl resumed>) = 0 [pid 5067] getdents64(4, [pid 5065] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5219] close(4 [pid 5067] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5219] <... close resumed>) = 0 [pid 5067] getdents64(4, [pid 5065] lstat("./11/binderfs", [pid 5219] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5067] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5219] <... open resumed>) = 4 [pid 5067] close(4 [pid 5065] unlink("./11/binderfs" [pid 5221] <... openat resumed>) = 3 [pid 5219] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5067] <... close resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 5219] <... open resumed>) = 5 [pid 5067] rmdir("./11/file0" [pid 5065] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5221] write(3, "1000", 4 [pid 5219] ftruncate(5, 33587195 [pid 5067] <... rmdir resumed>) = 0 [pid 5221] <... write resumed>) = 4 [pid 5219] <... ftruncate resumed>) = 0 [pid 5067] getdents64(3, [pid 5221] close(3 [pid 5219] sendfile(4, 5, NULL, 281474978811909 [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5221] <... close resumed>) = 0 [pid 5067] close(3 [ 77.739585][ T5220] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5221] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./11" [pid 5063] <... umount2 resumed>) = 0 [pid 5221] <... symlink resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5221] memfd_create("syzkaller", 0 [pid 5067] mkdir("./12", 0777 [pid 5221] <... memfd_create resumed>) = 3 [pid 5067] <... mkdir resumed>) = 0 [pid 5221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5221] <... mmap resumed>) = 0x7ff395729000 [pid 5067] <... openat resumed>) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5222 ./strace-static-x86_64: Process 5222 attached [pid 5222] chdir("./12") = 0 [pid 5222] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5222] setpgid(0, 0) = 0 [pid 5222] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5222] write(3, "1000", 4) = 4 [pid 5063] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5222] close(3) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5222] symlink("/dev/binderfs", "./binderfs" [pid 5063] lstat("./11/file0", [pid 5222] <... symlink resumed>) = 0 [pid 5222] memfd_create("syzkaller", 0 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5222] <... memfd_create resumed>) = 3 [pid 5063] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5222] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5221] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./11/file0") = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./11") = 0 [pid 5063] mkdir("./12", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3 [pid 5222] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5223 ./strace-static-x86_64: Process 5223 attached [pid 5221] <... write resumed>) = 2097152 [pid 5065] <... umount2 resumed>) = 0 [pid 5223] chdir("./12" [pid 5221] munmap(0x7ff395729000, 2097152 [pid 5223] <... chdir resumed>) = 0 [pid 5223] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5221] <... munmap resumed>) = 0 [pid 5223] <... prctl resumed>) = 0 [pid 5221] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5223] setpgid(0, 0 [pid 5221] <... openat resumed>) = 4 [pid 5223] <... setpgid resumed>) = 0 [pid 5221] ioctl(4, LOOP_SET_FD, 3 [pid 5223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5223] <... openat resumed>) = 3 [pid 5223] write(3, "1000", 4) = 4 [pid 5223] close(3 [pid 5065] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5223] <... close resumed>) = 0 [pid 5222] <... write resumed>) = 2097152 [pid 5221] <... ioctl resumed>) = 0 [pid 5065] fstat(4, [pid 5223] symlink("/dev/binderfs", "./binderfs" [pid 5221] close(3 [pid 5223] <... symlink resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5221] <... close resumed>) = 0 [pid 5223] memfd_create("syzkaller", 0 [pid 5221] mkdir("./file0", 0777 [pid 5065] getdents64(4, [pid 5223] <... memfd_create resumed>) = 3 [pid 5065] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5223] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5221] <... mkdir resumed>) = 0 [ 77.968602][ T5221] loop0: detected capacity change from 0 to 4096 [pid 5065] getdents64(4, [pid 5223] <... mmap resumed>) = 0x7ff395729000 [pid 5221] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5065] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./11/file0") = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./11") = 0 [pid 5065] mkdir("./12", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5222] munmap(0x7ff395729000, 2097152 [pid 5065] close(3 [pid 5222] <... munmap resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5222] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5065] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5224 [pid 5222] <... openat resumed>) = 4 [pid 5222] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5224 attached [pid 5224] chdir("./12") = 0 [pid 5224] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5224] setpgid(0, 0) = 0 [pid 5224] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5224] write(3, "1000", 4) = 4 [pid 5224] close(3) = 0 [pid 5224] symlink("/dev/binderfs", "./binderfs") = 0 [ 78.049344][ T5222] loop5: detected capacity change from 0 to 4096 [ 78.053869][ T5221] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5224] memfd_create("syzkaller", 0 [pid 5223] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5224] <... memfd_create resumed>) = 3 [pid 5224] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5222] <... ioctl resumed>) = 0 [pid 5222] close(3) = 0 [pid 5222] mkdir("./file0", 0777) = 0 [ 78.090483][ T5221] NILFS (loop0): trying rollback from an earlier position [pid 5222] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5224] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5223] <... write resumed>) = 2097152 [pid 5223] munmap(0x7ff395729000, 2097152) = 0 [pid 5223] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5223] ioctl(4, LOOP_SET_FD, 3) = 0 [ 78.140244][ T5222] NILFS (loop5): invalid segment: Checksum error in segment payload [ 78.148475][ T5222] NILFS (loop5): trying rollback from an earlier position [ 78.150907][ T5221] NILFS (loop0): recovery complete [ 78.174739][ T5223] loop1: detected capacity change from 0 to 4096 [pid 5223] close(3 [pid 5221] <... mount resumed>) = 0 [pid 5221] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5223] <... close resumed>) = 0 [pid 5223] mkdir("./file0", 0777 [pid 5221] <... openat resumed>) = 3 [pid 5223] <... mkdir resumed>) = 0 [pid 5221] chdir("./file0") = 0 [pid 5221] ioctl(4, LOOP_CLR_FD [pid 5223] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5221] <... ioctl resumed>) = 0 [pid 5221] close(4) = 0 [pid 5221] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5224] <... write resumed>) = 2097152 [pid 5221] <... open resumed>) = 4 [pid 5221] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5224] munmap(0x7ff395729000, 2097152) = 0 [pid 5221] <... open resumed>) = 5 [pid 5221] ftruncate(5, 33587195) = 0 [ 78.191613][ T5225] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5221] sendfile(4, 5, NULL, 281474978811909 [pid 5217] <... sendfile resumed>) = 1048576 [pid 5217] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5217] exit_group(0) = ? [pid 5217] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5217, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5224] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5224] ioctl(4, LOOP_SET_FD, 3 [pid 5066] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./12/binderfs") = 0 [pid 5066] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5224] <... ioctl resumed>) = 0 [pid 5224] close(3) = 0 [pid 5224] mkdir("./file0", 0777) = 0 [ 78.240395][ T5223] NILFS (loop1): invalid segment: Checksum error in segment payload [ 78.248449][ T5223] NILFS (loop1): trying rollback from an earlier position [ 78.263449][ T5224] loop3: detected capacity change from 0 to 4096 [ 78.277922][ T5222] NILFS (loop5): recovery complete [pid 5224] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5222] <... mount resumed>) = 0 [pid 5222] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5222] chdir("./file0") = 0 [pid 5222] ioctl(4, LOOP_CLR_FD) = 0 [pid 5222] close(4) = 0 [pid 5222] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [ 78.314312][ T5226] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.324371][ T5224] NILFS (loop3): invalid segment: Checksum error in segment payload [ 78.331198][ T5223] NILFS (loop1): recovery complete [pid 5222] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5223] <... mount resumed>) = 0 [pid 5222] ftruncate(5, 33587195 [pid 5223] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5222] <... ftruncate resumed>) = 0 [pid 5223] <... openat resumed>) = 3 [pid 5222] sendfile(4, 5, NULL, 281474978811909 [pid 5223] chdir("./file0") = 0 [pid 5223] ioctl(4, LOOP_CLR_FD) = 0 [pid 5223] close(4) = 0 [pid 5223] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5223] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5223] ftruncate(5, 33587195) = 0 [ 78.355204][ T5224] NILFS (loop3): trying rollback from an earlier position [ 78.379766][ T5227] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5223] sendfile(4, 5, NULL, 281474978811909 [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./12/file0") = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./12") = 0 [pid 5066] mkdir("./13", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5229 [ 78.490403][ T5224] NILFS (loop3): recovery complete [pid 5224] <... mount resumed>) = 0 [pid 5224] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 5229 attached ) = 3 [pid 5229] chdir("./13" [pid 5224] chdir("./file0" [pid 5229] <... chdir resumed>) = 0 [pid 5224] <... chdir resumed>) = 0 [pid 5229] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5224] ioctl(4, LOOP_CLR_FD [pid 5229] <... prctl resumed>) = 0 [pid 5224] <... ioctl resumed>) = 0 [pid 5224] close(4 [pid 5229] setpgid(0, 0) = 0 [pid 5224] <... close resumed>) = 0 [ 78.530068][ T5228] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5229] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5224] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5229] <... openat resumed>) = 3 [pid 5224] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5229] write(3, "1000", 4 [pid 5224] ftruncate(5, 33587195 [pid 5229] <... write resumed>) = 4 [pid 5229] close(3 [pid 5224] <... ftruncate resumed>) = 0 [pid 5229] <... close resumed>) = 0 [pid 5224] sendfile(4, 5, NULL, 281474978811909 [pid 5229] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5229] memfd_create("syzkaller", 0) = 3 [pid 5229] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5229] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5219] <... sendfile resumed>) = 1048576 [pid 5229] <... write resumed>) = 2097152 [pid 5219] open(NULL, O_RDONLY [pid 5229] munmap(0x7ff395729000, 2097152 [pid 5219] <... open resumed>) = -1 EFAULT (Bad address) [pid 5229] <... munmap resumed>) = 0 [pid 5219] exit_group(0 [pid 5229] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5219] <... exit_group resumed>) = ? [pid 5229] <... openat resumed>) = 4 [pid 5219] +++ exited with 0 +++ [pid 5229] ioctl(4, LOOP_SET_FD, 3 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5219, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5229] <... ioctl resumed>) = 0 [pid 5064] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5229] close(3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5229] <... close resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5229] mkdir("./file0", 0777 [pid 5064] <... openat resumed>) = 3 [pid 5229] <... mkdir resumed>) = 0 [pid 5064] fstat(3, [pid 5229] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./12/binderfs") = 0 [ 78.748027][ T5229] loop4: detected capacity change from 0 to 4096 [ 78.811996][ T5229] NILFS (loop4): invalid segment: Checksum error in segment payload [ 78.826992][ T5229] NILFS (loop4): trying rollback from an earlier position [ 78.903044][ T5229] NILFS (loop4): recovery complete [pid 5064] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5229] <... mount resumed>) = 0 [pid 5229] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5229] chdir("./file0") = 0 [pid 5229] ioctl(4, LOOP_CLR_FD) = 0 [pid 5229] close(4) = 0 [pid 5229] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5229] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5229] ftruncate(5, 33587195) = 0 [ 78.943001][ T5230] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5229] sendfile(4, 5, NULL, 281474978811909 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./12/file0") = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./12") = 0 [pid 5064] mkdir("./13", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5231 ./strace-static-x86_64: Process 5231 attached [pid 5231] chdir("./13") = 0 [pid 5231] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5231] setpgid(0, 0) = 0 [pid 5231] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5231] write(3, "1000", 4) = 4 [pid 5231] close(3) = 0 [pid 5231] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5231] memfd_create("syzkaller", 0) = 3 [pid 5231] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5231] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5222] <... sendfile resumed>) = 1048576 [pid 5221] <... sendfile resumed>) = 1048576 [pid 5222] open(NULL, O_RDONLY [pid 5221] open(NULL, O_RDONLY [pid 5222] <... open resumed>) = -1 EFAULT (Bad address) [pid 5221] <... open resumed>) = -1 EFAULT (Bad address) [pid 5222] exit_group(0 [pid 5221] exit_group(0 [pid 5222] <... exit_group resumed>) = ? [pid 5221] <... exit_group resumed>) = ? [pid 5222] +++ exited with 0 +++ [pid 5221] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5222, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5221, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=19 /* 0.19 s */} --- [pid 5062] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5231] <... write resumed>) = 2097152 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... openat resumed>) = 3 [pid 5231] munmap(0x7ff395729000, 2097152 [pid 5067] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] fstat(3, [pid 5067] <... openat resumed>) = 3 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] fstat(3, [pid 5062] getdents64(3, [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./12/binderfs", [pid 5067] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./12/binderfs" [pid 5062] unlink("./12/binderfs" [pid 5067] <... unlink resumed>) = 0 [pid 5067] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... unlink resumed>) = 0 [pid 5062] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5231] <... munmap resumed>) = 0 [pid 5231] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5231] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5231] close(3) = 0 [pid 5231] mkdir("./file0", 0777) = 0 [pid 5231] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5223] <... sendfile resumed>) = 1048576 [pid 5223] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5223] exit_group(0) = ? [pid 5223] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5223, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5063] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 79.333301][ T5231] loop2: detected capacity change from 0 to 4096 [pid 5063] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./12/binderfs") = 0 [pid 5063] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5224] <... sendfile resumed>) = 1048576 [ 79.376287][ T5231] NILFS (loop2): invalid segment: Checksum error in segment payload [ 79.414598][ T5231] NILFS (loop2): trying rollback from an earlier position [pid 5224] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5224] exit_group(0) = ? [pid 5224] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5224, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5065] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... openat resumed>) = 3 [pid 5065] fstat(3, [pid 5062] lstat("./12/file0", [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, [pid 5062] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./12/binderfs", [pid 5062] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5067] <... umount2 resumed>) = 0 [pid 5065] unlink("./12/binderfs" [pid 5062] fstat(4, [pid 5067] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... unlink resumed>) = 0 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(4, [pid 5067] lstat("./12/file0", [pid 5062] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(4, [pid 5067] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] close(4 [pid 5067] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 4 [pid 5062] rmdir("./12/file0" [pid 5067] fstat(4, [pid 5062] <... rmdir resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, [pid 5067] getdents64(4, [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] close(3 [pid 5067] getdents64(4, [pid 5062] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] rmdir("./12" [pid 5067] close(4 [pid 5062] <... rmdir resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5062] mkdir("./13", 0777 [pid 5067] rmdir("./12/file0" [pid 5062] <... mkdir resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5067] getdents64(3, [pid 5062] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5067] close(3 [pid 5062] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] <... close resumed>) = 0 [ 79.531208][ T5231] NILFS (loop2): recovery complete [pid 5062] close(3 [pid 5067] rmdir("./12" [pid 5062] <... close resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] mkdir("./13", 0777) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5233 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5234 ./strace-static-x86_64: Process 5233 attached [pid 5233] chdir("./13") = 0 [pid 5233] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5233] setpgid(0, 0) = 0 [pid 5233] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5233] write(3, "1000", 4) = 4 [pid 5233] close(3) = 0 [pid 5233] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5233] memfd_create("syzkaller", 0) = 3 [pid 5231] <... mount resumed>) = 0 [pid 5233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5231] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5233] <... mmap resumed>) = 0x7ff395729000 [pid 5231] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5234 attached [pid 5231] chdir("./file0") = 0 [pid 5231] ioctl(4, LOOP_CLR_FD) = 0 [pid 5234] chdir("./13" [pid 5231] close(4 [pid 5234] <... chdir resumed>) = 0 [pid 5231] <... close resumed>) = 0 [pid 5231] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5063] <... umount2 resumed>) = 0 [pid 5234] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5231] <... open resumed>) = 4 [pid 5234] <... prctl resumed>) = 0 [pid 5231] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5234] setpgid(0, 0 [pid 5231] <... open resumed>) = 5 [pid 5231] ftruncate(5, 33587195 [pid 5234] <... setpgid resumed>) = 0 [pid 5231] <... ftruncate resumed>) = 0 [ 79.576531][ T5232] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5231] sendfile(4, 5, NULL, 281474978811909 [pid 5234] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5234] write(3, "1000", 4 [pid 5063] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./12/file0", [pid 5234] <... write resumed>) = 4 [pid 5234] close(3) = 0 [pid 5234] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5234] <... symlink resumed>) = 0 [pid 5063] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5234] memfd_create("syzkaller", 0 [pid 5063] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5234] <... memfd_create resumed>) = 3 [pid 5063] <... openat resumed>) = 4 [pid 5234] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] fstat(4, [pid 5234] <... mmap resumed>) = 0x7ff395729000 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./12/file0" [pid 5233] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./12") = 0 [pid 5063] mkdir("./13", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5235 ./strace-static-x86_64: Process 5235 attached [pid 5235] chdir("./13") = 0 [pid 5235] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5235] setpgid(0, 0) = 0 [pid 5235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5235] write(3, "1000", 4 [pid 5234] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5235] <... write resumed>) = 4 [pid 5235] close(3) = 0 [pid 5235] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5235] memfd_create("syzkaller", 0) = 3 [pid 5235] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, [pid 5233] <... write resumed>) = 2097152 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5233] munmap(0x7ff395729000, 2097152 [pid 5235] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5233] <... munmap resumed>) = 0 [pid 5065] getdents64(4, [pid 5233] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5233] <... openat resumed>) = 4 [pid 5065] getdents64(4, [pid 5233] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./12/file0") = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./12") = 0 [pid 5065] mkdir("./13", 0777 [pid 5234] <... write resumed>) = 2097152 [pid 5234] munmap(0x7ff395729000, 2097152 [pid 5065] <... mkdir resumed>) = 0 [pid 5233] <... ioctl resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5233] close(3) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5234] <... munmap resumed>) = 0 [pid 5233] mkdir("./file0", 0777 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5234] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5233] <... mkdir resumed>) = 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5229] <... sendfile resumed>) = 1048576 [pid 5234] <... openat resumed>) = 4 [pid 5233] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [ 79.779261][ T5233] loop0: detected capacity change from 0 to 4096 [pid 5065] close(3 [pid 5234] ioctl(4, LOOP_SET_FD, 3 [pid 5229] open(NULL, O_RDONLY [pid 5235] <... write resumed>) = 2097152 [pid 5234] <... ioctl resumed>) = 0 [pid 5229] <... open resumed>) = -1 EFAULT (Bad address) [pid 5065] <... close resumed>) = 0 [pid 5235] munmap(0x7ff395729000, 2097152 [pid 5234] close(3 [pid 5229] exit_group(0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5235] <... munmap resumed>) = 0 [pid 5234] <... close resumed>) = 0 [pid 5229] <... exit_group resumed>) = ? [pid 5234] mkdir("./file0", 0777) = 0 [pid 5229] +++ exited with 0 +++ [pid 5235] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5236 [pid 5235] <... openat resumed>) = 4 [ 79.834739][ T5234] loop5: detected capacity change from 0 to 4096 [ 79.861868][ T5233] NILFS (loop0): invalid segment: Checksum error in segment payload [ 79.866290][ T5234] NILFS (loop5): invalid segment: Checksum error in segment payload [ 79.870004][ T5233] NILFS (loop0): trying rollback from an earlier position [pid 5234] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5235] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5236 attached [pid 5236] chdir("./13") = 0 [pid 5236] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5236] setpgid(0, 0) = 0 [pid 5236] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5236] write(3, "1000", 4) = 4 [pid 5236] close(3) = 0 [pid 5236] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5236] memfd_create("syzkaller", 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5229, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5236] <... memfd_create resumed>) = 3 [pid 5236] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5235] <... ioctl resumed>) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5235] close(3 [pid 5066] <... restart_syscall resumed>) = 0 [pid 5235] <... close resumed>) = 0 [pid 5235] mkdir("./file0", 0777) = 0 [pid 5066] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5235] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./13/binderfs") = 0 [pid 5066] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 79.879908][ T5234] NILFS (loop5): trying rollback from an earlier position [ 79.893689][ T5235] loop1: detected capacity change from 0 to 4096 [ 79.947263][ T5235] NILFS (loop1): invalid segment: Checksum error in segment payload [ 79.962985][ T5234] NILFS (loop5): recovery complete [ 79.980063][ T5235] NILFS (loop1): trying rollback from an earlier position [pid 5236] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5234] <... mount resumed>) = 0 [pid 5234] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5236] <... write resumed>) = 2097152 [pid 5236] munmap(0x7ff395729000, 2097152) = 0 [pid 5236] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5236] ioctl(4, LOOP_SET_FD, 3 [pid 5234] <... openat resumed>) = 3 [pid 5234] chdir("./file0") = 0 [pid 5234] ioctl(4, LOOP_CLR_FD) = 0 [pid 5233] <... mount resumed>) = 0 [pid 5233] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5234] close(4 [pid 5233] <... openat resumed>) = 3 [pid 5233] chdir("./file0" [pid 5234] <... close resumed>) = 0 [pid 5235] <... mount resumed>) = 0 [ 79.988039][ T5237] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.001273][ T5233] NILFS (loop0): recovery complete [ 80.009264][ T5235] NILFS (loop1): recovery complete [ 80.016497][ T5236] loop3: detected capacity change from 0 to 4096 [ 80.032529][ T5239] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5235] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5234] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5233] <... chdir resumed>) = 0 [pid 5235] <... openat resumed>) = 3 [pid 5233] ioctl(4, LOOP_CLR_FD [pid 5235] chdir("./file0" [pid 5234] <... open resumed>) = 4 [pid 5233] <... ioctl resumed>) = 0 [pid 5233] close(4) = 0 [pid 5233] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5236] <... ioctl resumed>) = 0 [pid 5236] close(3) = 0 [pid 5236] mkdir("./file0", 0777) = 0 [pid 5235] <... chdir resumed>) = 0 [pid 5234] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5066] <... umount2 resumed>) = 0 [pid 5236] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5235] ioctl(4, LOOP_CLR_FD [pid 5234] <... open resumed>) = 5 [pid 5233] <... open resumed>) = 4 [pid 5066] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5235] <... ioctl resumed>) = 0 [pid 5234] ftruncate(5, 33587195 [pid 5233] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5235] close(4 [pid 5234] <... ftruncate resumed>) = 0 [pid 5233] <... open resumed>) = 5 [pid 5066] lstat("./13/file0", [pid 5235] <... close resumed>) = 0 [pid 5234] sendfile(4, 5, NULL, 281474978811909 [pid 5233] ftruncate(5, 33587195 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5235] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5066] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5233] <... ftruncate resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5235] <... open resumed>) = 4 [pid 5233] sendfile(4, 5, NULL, 281474978811909 [pid 5066] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5235] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5066] <... openat resumed>) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5235] <... open resumed>) = 5 [pid 5066] getdents64(4, [pid 5235] ftruncate(5, 33587195 [pid 5066] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5235] <... ftruncate resumed>) = 0 [pid 5066] getdents64(4, [pid 5235] sendfile(4, 5, NULL, 281474978811909 [pid 5066] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./13/file0") = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./13") = 0 [pid 5066] mkdir("./14", 0777) = 0 [ 80.047744][ T5238] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5240 ./strace-static-x86_64: Process 5240 attached [pid 5240] chdir("./14") = 0 [pid 5240] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5240] setpgid(0, 0) = 0 [pid 5240] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5240] write(3, "1000", 4) = 4 [pid 5240] close(3) = 0 [pid 5240] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5240] memfd_create("syzkaller", 0) = 3 [pid 5240] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [ 80.153367][ T5236] NILFS (loop3): invalid segment: Checksum error in segment payload [ 80.206689][ T5236] NILFS (loop3): trying rollback from an earlier position [pid 5240] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5236] <... mount resumed>) = 0 [pid 5240] munmap(0x7ff395729000, 2097152 [pid 5236] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5240] <... munmap resumed>) = 0 [pid 5240] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5236] <... openat resumed>) = 3 [ 80.279754][ T5236] NILFS (loop3): recovery complete [ 80.294414][ T5241] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5240] <... openat resumed>) = 4 [pid 5236] chdir("./file0" [pid 5240] ioctl(4, LOOP_SET_FD, 3 [pid 5236] <... chdir resumed>) = 0 [pid 5236] ioctl(4, LOOP_CLR_FD) = 0 [pid 5236] close(4) = 0 [pid 5236] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5236] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5236] ftruncate(5, 33587195) = 0 [pid 5236] sendfile(4, 5, NULL, 281474978811909 [pid 5240] <... ioctl resumed>) = 0 [pid 5240] close(3) = 0 [pid 5240] mkdir("./file0", 0777) = 0 [ 80.356572][ T5240] loop4: detected capacity change from 0 to 4096 [ 80.440347][ T5240] NILFS (loop4): invalid segment: Checksum error in segment payload [ 80.448395][ T5240] NILFS (loop4): trying rollback from an earlier position [pid 5240] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5231] <... sendfile resumed>) = 1048576 [ 80.523233][ T5240] NILFS (loop4): recovery complete [pid 5240] <... mount resumed>) = 0 [pid 5231] open(NULL, O_RDONLY [pid 5240] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5231] <... open resumed>) = -1 EFAULT (Bad address) [pid 5240] <... openat resumed>) = 3 [pid 5231] exit_group(0 [pid 5240] chdir("./file0" [pid 5231] <... exit_group resumed>) = ? [pid 5240] <... chdir resumed>) = 0 [pid 5231] +++ exited with 0 +++ [pid 5240] ioctl(4, LOOP_CLR_FD [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5231, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5240] <... ioctl resumed>) = 0 [pid 5240] close(4) = 0 [pid 5240] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5064] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, [pid 5240] <... open resumed>) = 4 [pid 5240] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, [pid 5240] <... open resumed>) = 5 [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5240] ftruncate(5, 33587195 [pid 5064] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5240] <... ftruncate resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 80.563111][ T5242] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5240] sendfile(4, 5, NULL, 281474978811909 [pid 5064] lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./13/binderfs") = 0 [pid 5064] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5064] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./13/file0") = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./13") = 0 [pid 5064] mkdir("./14", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5243 ./strace-static-x86_64: Process 5243 attached [pid 5243] chdir("./14") = 0 [pid 5243] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5243] setpgid(0, 0) = 0 [pid 5243] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5243] write(3, "1000", 4) = 4 [pid 5243] close(3) = 0 [pid 5243] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5243] memfd_create("syzkaller", 0) = 3 [pid 5243] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5243] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5243] munmap(0x7ff395729000, 2097152) = 0 [pid 5243] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5243] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5243] close(3) = 0 [ 80.986643][ T5243] loop2: detected capacity change from 0 to 4096 [pid 5243] mkdir("./file0", 0777) = 0 [pid 5243] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5235] <... sendfile resumed>) = 1048576 [pid 5235] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5235] exit_group(0) = ? [pid 5235] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5235, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 81.065437][ T5243] NILFS (loop2): invalid segment: Checksum error in segment payload [ 81.089442][ T5243] NILFS (loop2): trying rollback from an earlier position [pid 5063] lstat("./13/binderfs", [pid 5234] <... sendfile resumed>) = 1048576 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./13/binderfs") = 0 [pid 5063] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5234] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5234] exit_group(0) = ? [pid 5234] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5234, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5067] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5067] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./13/binderfs") = 0 [pid 5067] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5233] <... sendfile resumed>) = 1048576 [pid 5233] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5233] exit_group(0) = ? [pid 5233] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5233, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5062] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] unlink("./13/binderfs") = 0 [ 81.190552][ T5243] NILFS (loop2): recovery complete [pid 5062] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5243] <... mount resumed>) = 0 [pid 5243] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5243] chdir("./file0") = 0 [pid 5243] ioctl(4, LOOP_CLR_FD) = 0 [pid 5243] close(4) = 0 [pid 5243] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5243] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5243] ftruncate(5, 33587195) = 0 [pid 5243] sendfile(4, 5, NULL, 281474978811909 [pid 5236] <... sendfile resumed>) = 1048576 [pid 5236] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5236] exit_group(0) = ? [pid 5236] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5236, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=23 /* 0.23 s */} --- [pid 5065] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./13/binderfs") = 0 [ 81.233289][ T5244] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5067] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] lstat("./13/file0", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] lstat("./13/file0", [pid 5067] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] fstat(4, [pid 5063] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 4 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] lstat("./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, [pid 5063] fstat(4, [pid 5067] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(4, [pid 5067] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] close(4 [pid 5062] <... openat resumed>) = 4 [pid 5063] getdents64(4, [pid 5067] <... close resumed>) = 0 [pid 5062] fstat(4, [pid 5067] rmdir("./13/file0" [pid 5063] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5063] close(4 [pid 5062] getdents64(4, [pid 5067] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] close(3) = 0 [pid 5063] rmdir("./13/file0" [pid 5062] getdents64(4, [pid 5067] rmdir("./13" [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5062] close(4 [pid 5067] mkdir("./14", 0777 [pid 5063] getdents64(3, [pid 5067] <... mkdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] <... close resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5063] close(3 [pid 5062] rmdir("./13/file0" [pid 5067] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5065] <... umount2 resumed>) = 0 [pid 5063] rmdir("./13" [pid 5062] <... rmdir resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, [pid 5067] close(3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] mkdir("./14", 0777 [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5240] <... sendfile resumed>) = 1048576 [pid 5067] <... close resumed>) = 0 [pid 5240] open(NULL, O_RDONLY [pid 5063] <... mkdir resumed>) = 0 [pid 5062] close(3 [pid 5240] <... open resumed>) = -1 EFAULT (Bad address) [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] <... close resumed>) = 0 [pid 5240] exit_group(0 [pid 5065] lstat("./13/file0", [pid 5062] rmdir("./13" [pid 5240] <... exit_group resumed>) = ? [pid 5067] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5245 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5062] <... rmdir resumed>) = 0 [pid 5240] +++ exited with 0 +++ [pid 5065] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] mkdir("./14", 0777./strace-static-x86_64: Process 5245 attached [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5062] <... mkdir resumed>) = 0 [pid 5245] chdir("./14" [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5240, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5065] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] close(3 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5245] <... chdir resumed>) = 0 [pid 5066] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... openat resumed>) = 4 [pid 5063] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5245] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] fstat(4, [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5245] <... prctl resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5245] setpgid(0, 0 [pid 5066] <... openat resumed>) = 3 [pid 5065] getdents64(4, [pid 5063] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5246 [pid 5062] close(3 [pid 5245] <... setpgid resumed>) = 0 [pid 5066] fstat(3, [pid 5065] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5246 attached [pid 5245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] getdents64(4, [pid 5062] <... close resumed>) = 0 [pid 5246] chdir("./14" [pid 5245] <... openat resumed>) = 3 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5245] write(3, "1000", 4 [pid 5065] close(4 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5245] <... write resumed>) = 4 [pid 5065] <... close resumed>) = 0 [pid 5245] close(3 [pid 5066] getdents64(3, [pid 5065] rmdir("./13/file0" [pid 5246] <... chdir resumed>) = 0 [pid 5245] <... close resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] <... rmdir resumed>) = 0 [pid 5246] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5245] symlink("/dev/binderfs", "./binderfs" [pid 5066] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(3, [pid 5062] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5247 [pid 5246] <... prctl resumed>) = 0 [pid 5245] <... symlink resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5246] setpgid(0, 0 [pid 5245] memfd_create("syzkaller", 0 [pid 5066] lstat("./14/binderfs", [pid 5065] close(3./strace-static-x86_64: Process 5247 attached [pid 5246] <... setpgid resumed>) = 0 [pid 5245] <... memfd_create resumed>) = 3 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] <... close resumed>) = 0 [pid 5246] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] unlink("./14/binderfs" [pid 5065] rmdir("./13" [pid 5246] <... openat resumed>) = 3 [pid 5245] <... mmap resumed>) = 0x7ff395729000 [pid 5066] <... unlink resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5247] chdir("./14" [pid 5246] write(3, "1000", 4 [pid 5066] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] mkdir("./14", 0777 [pid 5247] <... chdir resumed>) = 0 [pid 5246] <... write resumed>) = 4 [pid 5245] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5247] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5246] close(3 [pid 5065] <... mkdir resumed>) = 0 [pid 5247] <... prctl resumed>) = 0 [pid 5246] <... close resumed>) = 0 [pid 5247] setpgid(0, 0 [pid 5246] symlink("/dev/binderfs", "./binderfs" [pid 5247] <... setpgid resumed>) = 0 [pid 5246] <... symlink resumed>) = 0 [pid 5247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5246] memfd_create("syzkaller", 0 [pid 5247] <... openat resumed>) = 3 [pid 5246] <... memfd_create resumed>) = 3 [pid 5247] write(3, "1000", 4 [pid 5246] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5247] <... write resumed>) = 4 [pid 5246] <... mmap resumed>) = 0x7ff395729000 [pid 5247] close(3 [pid 5246] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5247] <... close resumed>) = 0 [pid 5247] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... openat resumed>) = 3 [pid 5247] <... symlink resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5247] memfd_create("syzkaller", 0) = 3 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5247] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] close(3 [pid 5247] <... mmap resumed>) = 0x7ff395729000 [pid 5245] <... write resumed>) = 2097152 [pid 5065] <... close resumed>) = 0 [pid 5245] munmap(0x7ff395729000, 2097152 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5245] <... munmap resumed>) = 0 [pid 5245] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5065] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5248 [pid 5245] <... openat resumed>) = 4 [pid 5245] ioctl(4, LOOP_SET_FD, 3) = 0 ./strace-static-x86_64: Process 5248 attached [pid 5248] chdir("./14") = 0 [pid 5248] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5248] setpgid(0, 0) = 0 [pid 5248] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5247] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5248] write(3, "1000", 4) = 4 [pid 5248] close(3) = 0 [pid 5248] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5248] memfd_create("syzkaller", 0) = 3 [pid 5248] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5245] close(3 [pid 5066] <... umount2 resumed>) = 0 [pid 5245] <... close resumed>) = 0 [pid 5245] mkdir("./file0", 0777) = 0 [ 81.631370][ T5245] loop5: detected capacity change from 0 to 4096 [pid 5245] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5066] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5248] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5247] <... write resumed>) = 2097152 [pid 5246] <... write resumed>) = 2097152 [pid 5066] fstat(4, [pid 5246] munmap(0x7ff395729000, 2097152 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5246] <... munmap resumed>) = 0 [pid 5246] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5066] getdents64(4, [pid 5246] <... openat resumed>) = 4 [pid 5246] ioctl(4, LOOP_SET_FD, 3 [pid 5066] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, [pid 5247] munmap(0x7ff395729000, 2097152) = 0 [pid 5247] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5247] ioctl(4, LOOP_SET_FD, 3 [pid 5066] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [ 81.703860][ T5245] NILFS (loop5): invalid segment: Checksum error in segment payload [ 81.721763][ T5245] NILFS (loop5): trying rollback from an earlier position [ 81.736808][ T5246] loop1: detected capacity change from 0 to 4096 [pid 5066] rmdir("./14/file0" [pid 5246] <... ioctl resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5246] close(3 [pid 5066] getdents64(3, [pid 5246] <... close resumed>) = 0 [pid 5246] mkdir("./file0", 0777 [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5246] <... mkdir resumed>) = 0 [pid 5066] close(3 [pid 5246] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5066] <... close resumed>) = 0 [pid 5245] <... mount resumed>) = 0 [pid 5245] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5245] chdir("./file0") = 0 [pid 5245] ioctl(4, LOOP_CLR_FD) = 0 [ 81.752558][ T5247] loop0: detected capacity change from 0 to 4096 [ 81.755796][ T5245] NILFS (loop5): recovery complete [ 81.770738][ T5249] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5245] close(4 [pid 5248] <... write resumed>) = 2097152 [pid 5247] <... ioctl resumed>) = 0 [pid 5245] <... close resumed>) = 0 [pid 5066] rmdir("./14" [pid 5248] munmap(0x7ff395729000, 2097152 [pid 5247] close(3 [pid 5245] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5066] <... rmdir resumed>) = 0 [pid 5245] <... open resumed>) = 4 [pid 5245] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5245] ftruncate(5, 33587195) = 0 [pid 5245] sendfile(4, 5, NULL, 281474978811909 [pid 5248] <... munmap resumed>) = 0 [pid 5247] <... close resumed>) = 0 [pid 5066] mkdir("./15", 0777 [pid 5248] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5247] mkdir("./file0", 0777 [pid 5066] <... mkdir resumed>) = 0 [pid 5248] <... openat resumed>) = 4 [pid 5247] <... mkdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5248] ioctl(4, LOOP_SET_FD, 3 [pid 5247] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5066] <... openat resumed>) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [ 81.801797][ T5246] NILFS (loop1): invalid segment: Checksum error in segment payload [ 81.809831][ T5246] NILFS (loop1): trying rollback from an earlier position [ 81.828585][ T5248] loop3: detected capacity change from 0 to 4096 [ 81.842154][ T5247] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5248] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5250 attached [pid 5248] close(3 [pid 5250] chdir("./15" [pid 5248] <... close resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5250 [pid 5248] mkdir("./file0", 0777 [pid 5250] <... chdir resumed>) = 0 [pid 5248] <... mkdir resumed>) = 0 [pid 5246] <... mount resumed>) = 0 [pid 5250] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5248] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5246] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5250] <... prctl resumed>) = 0 [pid 5246] <... openat resumed>) = 3 [pid 5250] setpgid(0, 0 [pid 5246] chdir("./file0" [pid 5250] <... setpgid resumed>) = 0 [pid 5246] <... chdir resumed>) = 0 [pid 5250] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5246] ioctl(4, LOOP_CLR_FD [pid 5250] <... openat resumed>) = 3 [pid 5246] <... ioctl resumed>) = 0 [ 81.855609][ T5246] NILFS (loop1): recovery complete [ 81.863534][ T5247] NILFS (loop0): trying rollback from an earlier position [ 81.873869][ T5251] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.893869][ T5247] NILFS (loop0): recovery complete [pid 5250] write(3, "1000", 4 [pid 5246] close(4) = 0 [pid 5250] <... write resumed>) = 4 [pid 5250] close(3 [pid 5246] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5250] <... close resumed>) = 0 [pid 5250] symlink("/dev/binderfs", "./binderfs" [pid 5246] <... open resumed>) = 4 [pid 5250] <... symlink resumed>) = 0 [pid 5246] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5250] memfd_create("syzkaller", 0 [pid 5246] <... open resumed>) = 5 [pid 5250] <... memfd_create resumed>) = 3 [pid 5250] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5246] ftruncate(5, 33587195 [pid 5247] <... mount resumed>) = 0 [pid 5247] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5247] chdir("./file0") = 0 [pid 5247] ioctl(4, LOOP_CLR_FD) = 0 [pid 5247] close(4) = 0 [pid 5247] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5247] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5247] ftruncate(5, 33587195) = 0 [pid 5250] <... mmap resumed>) = 0x7ff395729000 [pid 5247] sendfile(4, 5, NULL, 281474978811909 [pid 5246] <... ftruncate resumed>) = 0 [ 81.921438][ T5248] NILFS (loop3): invalid segment: Checksum error in segment payload [ 81.940541][ T5252] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5246] sendfile(4, 5, NULL, 281474978811909 [ 81.979749][ T5248] NILFS (loop3): trying rollback from an earlier position [pid 5250] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5250] munmap(0x7ff395729000, 2097152 [pid 5248] <... mount resumed>) = 0 [pid 5250] <... munmap resumed>) = 0 [pid 5248] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5250] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5248] <... openat resumed>) = 3 [pid 5250] <... openat resumed>) = 4 [pid 5248] chdir("./file0" [pid 5250] ioctl(4, LOOP_SET_FD, 3 [pid 5248] <... chdir resumed>) = 0 [ 82.041518][ T5248] NILFS (loop3): recovery complete [ 82.059628][ T5253] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5250] <... ioctl resumed>) = 0 [pid 5248] ioctl(4, LOOP_CLR_FD) = 0 [pid 5248] close(4) = 0 [pid 5248] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5250] close(3 [pid 5248] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5250] <... close resumed>) = 0 [pid 5248] <... open resumed>) = 5 [pid 5250] mkdir("./file0", 0777 [pid 5248] ftruncate(5, 33587195 [pid 5250] <... mkdir resumed>) = 0 [pid 5248] <... ftruncate resumed>) = 0 [ 82.102416][ T5250] loop4: detected capacity change from 0 to 4096 [pid 5250] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5248] sendfile(4, 5, NULL, 281474978811909 [pid 5243] <... sendfile resumed>) = 1048576 [pid 5243] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5243] exit_group(0) = ? [pid 5243] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5243, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 82.199319][ T5250] NILFS (loop4): invalid segment: Checksum error in segment payload [ 82.209172][ T5250] NILFS (loop4): trying rollback from an earlier position [pid 5064] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./14/binderfs") = 0 [ 82.287931][ T5250] NILFS (loop4): recovery complete [pid 5064] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5250] <... mount resumed>) = 0 [pid 5250] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5250] chdir("./file0") = 0 [pid 5250] ioctl(4, LOOP_CLR_FD) = 0 [pid 5250] close(4) = 0 [pid 5250] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [ 82.341546][ T5254] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5250] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5250] ftruncate(5, 33587195) = 0 [pid 5250] sendfile(4, 5, NULL, 281474978811909 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./14/file0") = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./14") = 0 [pid 5064] mkdir("./15", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5255 ./strace-static-x86_64: Process 5255 attached [pid 5255] chdir("./15") = 0 [pid 5255] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5255] setpgid(0, 0) = 0 [pid 5255] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5255] write(3, "1000", 4) = 4 [pid 5255] close(3) = 0 [pid 5255] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5255] memfd_create("syzkaller", 0) = 3 [pid 5255] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5255] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5255] munmap(0x7ff395729000, 2097152) = 0 [pid 5255] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5255] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5255] close(3) = 0 [pid 5255] mkdir("./file0", 0777) = 0 [ 82.796090][ T5255] loop2: detected capacity change from 0 to 4096 [ 82.829824][ T5255] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5255] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5245] <... sendfile resumed>) = 1048576 [pid 5245] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5245] exit_group(0) = ? [pid 5245] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5245, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5067] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./14/binderfs") = 0 [pid 5067] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5246] <... sendfile resumed>) = 1048576 [pid 5246] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [ 82.874189][ T5255] NILFS (loop2): trying rollback from an earlier position [pid 5246] exit_group(0) = ? [pid 5246] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5246, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./14/binderfs") = 0 [ 82.935263][ T5255] NILFS (loop2): recovery complete [pid 5063] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5255] <... mount resumed>) = 0 [pid 5255] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5255] chdir("./file0") = 0 [pid 5255] ioctl(4, LOOP_CLR_FD [pid 5247] <... sendfile resumed>) = 1048576 [pid 5255] <... ioctl resumed>) = 0 [pid 5255] close(4) = 0 [pid 5255] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5247] open(NULL, O_RDONLY [pid 5255] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5247] <... open resumed>) = -1 EFAULT (Bad address) [pid 5255] ftruncate(5, 33587195) = 0 [pid 5247] exit_group(0 [pid 5255] sendfile(4, 5, NULL, 281474978811909 [pid 5247] <... exit_group resumed>) = ? [pid 5247] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5247, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5062] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 82.973301][ T5256] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5062] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] unlink("./14/binderfs") = 0 [pid 5062] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./14/file0") = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./14") = 0 [pid 5067] mkdir("./15", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5257 ./strace-static-x86_64: Process 5257 attached [pid 5257] chdir("./15") = 0 [pid 5257] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5257] setpgid(0, 0) = 0 [pid 5257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5257] write(3, "1000", 4) = 4 [pid 5257] close(3) = 0 [pid 5257] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5257] memfd_create("syzkaller", 0) = 3 [pid 5257] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./14/file0") = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./14") = 0 [pid 5063] mkdir("./15", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5258 ./strace-static-x86_64: Process 5258 attached [pid 5258] chdir("./15" [pid 5257] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5258] <... chdir resumed>) = 0 [pid 5258] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5258] setpgid(0, 0) = 0 [pid 5258] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5258] write(3, "1000", 4) = 4 [pid 5258] close(3) = 0 [pid 5258] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5248] <... sendfile resumed>) = 1048576 [pid 5062] <... umount2 resumed>) = 0 [pid 5258] memfd_create("syzkaller", 0 [pid 5248] open(NULL, O_RDONLY [pid 5258] <... memfd_create resumed>) = 3 [pid 5248] <... open resumed>) = -1 EFAULT (Bad address) [pid 5062] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5258] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5248] exit_group(0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5248] <... exit_group resumed>) = ? [pid 5062] lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5248] +++ exited with 0 +++ [pid 5062] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5248, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5062] getdents64(4, [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5062] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5065] <... restart_syscall resumed>) = 0 [pid 5062] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5065] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] rmdir("./14/file0" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, [pid 5065] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5062] close(3 [pid 5065] fstat(3, [pid 5062] <... close resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] rmdir("./14" [pid 5065] getdents64(3, [pid 5062] <... rmdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] mkdir("./15", 0777 [pid 5065] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5258] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5259 [pid 5065] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./14/binderfs") = 0 [pid 5065] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5259 attached [pid 5259] chdir("./15" [pid 5257] <... write resumed>) = 2097152 [pid 5257] munmap(0x7ff395729000, 2097152 [pid 5259] <... chdir resumed>) = 0 [pid 5257] <... munmap resumed>) = 0 [pid 5257] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5257] ioctl(4, LOOP_SET_FD, 3 [pid 5259] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5259] setpgid(0, 0) = 0 [pid 5259] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5259] write(3, "1000", 4) = 4 [pid 5259] close(3) = 0 [pid 5259] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5259] memfd_create("syzkaller", 0 [pid 5257] <... ioctl resumed>) = 0 [pid 5259] <... memfd_create resumed>) = 3 [pid 5257] close(3 [pid 5259] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5257] <... close resumed>) = 0 [pid 5257] mkdir("./file0", 0777) = 0 [ 83.331971][ T5257] loop5: detected capacity change from 0 to 4096 [pid 5257] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5258] <... write resumed>) = 2097152 [pid 5258] munmap(0x7ff395729000, 2097152 [pid 5259] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5258] <... munmap resumed>) = 0 [pid 5258] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5250] <... sendfile resumed>) = 1048576 [pid 5258] ioctl(4, LOOP_SET_FD, 3 [pid 5250] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5250] exit_group(0) = ? [pid 5250] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5250, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5066] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./15/binderfs") = 0 [pid 5066] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5258] <... ioctl resumed>) = 0 [pid 5258] close(3) = 0 [pid 5258] mkdir("./file0", 0777) = 0 [ 83.379138][ T5257] NILFS (loop5): invalid segment: Checksum error in segment payload [ 83.410639][ T5258] loop1: detected capacity change from 0 to 4096 [pid 5258] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5259] <... write resumed>) = 2097152 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5259] munmap(0x7ff395729000, 2097152 [pid 5065] lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5259] <... munmap resumed>) = 0 [pid 5065] fstat(4, [pid 5259] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5259] <... openat resumed>) = 4 [pid 5065] getdents64(4, [pid 5259] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [ 83.446343][ T5257] NILFS (loop5): trying rollback from an earlier position [ 83.465062][ T5258] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5065] getdents64(4, [pid 5259] <... ioctl resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5259] close(3 [pid 5065] close(4 [pid 5259] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5259] mkdir("./file0", 0777 [pid 5065] rmdir("./14/file0" [pid 5259] <... mkdir resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, [pid 5259] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [ 83.502750][ T5259] loop0: detected capacity change from 0 to 4096 [ 83.509575][ T5258] NILFS (loop1): trying rollback from an earlier position [ 83.518223][ T5257] NILFS (loop5): recovery complete [pid 5065] close(3) = 0 [pid 5065] rmdir("./14") = 0 [pid 5065] mkdir("./15", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5257] <... mount resumed>) = 0 [pid 5257] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5257] chdir("./file0") = 0 [pid 5257] ioctl(4, LOOP_CLR_FD) = 0 [pid 5257] close(4) = 0 [pid 5257] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5257] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5257] ftruncate(5, 33587195) = 0 [pid 5257] sendfile(4, 5, NULL, 281474978811909 [pid 5065] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5261 [pid 5066] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5261 attached [pid 5261] chdir("./15") = 0 [pid 5261] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5261] setpgid(0, 0) = 0 [pid 5261] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 83.546912][ T5259] NILFS (loop0): invalid segment: Checksum error in segment payload [ 83.567160][ T5258] NILFS (loop1): recovery complete [ 83.581979][ T5260] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5261] write(3, "1000", 4) = 4 [pid 5261] close(3) = 0 [pid 5261] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5261] memfd_create("syzkaller", 0) = 3 [pid 5261] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5258] <... mount resumed>) = 0 [pid 5066] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5258] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5258] chdir("./file0") = 0 [pid 5258] ioctl(4, LOOP_CLR_FD) = 0 [pid 5258] close(4) = 0 [pid 5258] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5258] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5066] lstat("./15/file0", [pid 5258] ftruncate(5, 33587195) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5258] sendfile(4, 5, NULL, 281474978811909 [pid 5066] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./15/file0") = 0 [ 83.612970][ T5259] NILFS (loop0): trying rollback from an earlier position [ 83.638533][ T5262] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5066] getdents64(3, [pid 5261] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./15") = 0 [pid 5066] mkdir("./16", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5263 ./strace-static-x86_64: Process 5263 attached [pid 5263] chdir("./16") = 0 [pid 5263] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5263] setpgid(0, 0) = 0 [pid 5263] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5261] <... write resumed>) = 2097152 [pid 5263] <... openat resumed>) = 3 [pid 5261] munmap(0x7ff395729000, 2097152 [pid 5263] write(3, "1000", 4 [pid 5261] <... munmap resumed>) = 0 [pid 5263] <... write resumed>) = 4 [pid 5261] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5263] close(3 [pid 5261] <... openat resumed>) = 4 [pid 5263] <... close resumed>) = 0 [ 83.726467][ T5259] NILFS (loop0): recovery complete [pid 5261] ioctl(4, LOOP_SET_FD, 3 [pid 5263] symlink("/dev/binderfs", "./binderfs" [pid 5261] <... ioctl resumed>) = 0 [pid 5263] <... symlink resumed>) = 0 [pid 5263] memfd_create("syzkaller", 0) = 3 [pid 5263] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5259] <... mount resumed>) = 0 [pid 5259] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5259] chdir("./file0") = 0 [pid 5259] ioctl(4, LOOP_CLR_FD) = 0 [pid 5259] close(4) = 0 [pid 5259] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5263] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5259] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5261] close(3 [pid 5259] <... open resumed>) = 5 [pid 5261] <... close resumed>) = 0 [ 83.763002][ T5261] loop3: detected capacity change from 0 to 4096 [ 83.772177][ T5264] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5259] ftruncate(5, 33587195 [pid 5261] mkdir("./file0", 0777 [pid 5259] <... ftruncate resumed>) = 0 [pid 5261] <... mkdir resumed>) = 0 [pid 5259] sendfile(4, 5, NULL, 281474978811909 [pid 5261] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5263] <... write resumed>) = 2097152 [ 83.888188][ T5261] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5263] munmap(0x7ff395729000, 2097152) = 0 [pid 5263] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5263] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5263] close(3) = 0 [pid 5263] mkdir("./file0", 0777) = 0 [ 83.928592][ T5261] NILFS (loop3): trying rollback from an earlier position [ 83.962236][ T5263] loop4: detected capacity change from 0 to 4096 [pid 5263] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5255] <... sendfile resumed>) = 1048576 [pid 5255] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5255] exit_group(0) = ? [pid 5255] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5255, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./15/binderfs") = 0 [ 83.996278][ T5261] NILFS (loop3): recovery complete [ 84.011685][ T5263] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5064] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5261] <... mount resumed>) = 0 [pid 5261] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5261] chdir("./file0") = 0 [pid 5261] ioctl(4, LOOP_CLR_FD) = 0 [pid 5261] close(4) = 0 [pid 5261] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5261] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5261] ftruncate(5, 33587195) = 0 [ 84.056343][ T5263] NILFS (loop4): trying rollback from an earlier position [ 84.063850][ T5265] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.138902][ T5263] NILFS (loop4): recovery complete [pid 5261] sendfile(4, 5, NULL, 281474978811909 [pid 5263] <... mount resumed>) = 0 [pid 5263] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5263] chdir("./file0") = 0 [pid 5263] ioctl(4, LOOP_CLR_FD) = 0 [pid 5263] close(4) = 0 [pid 5263] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5263] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5263] ftruncate(5, 33587195) = 0 [ 84.182942][ T5266] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5263] sendfile(4, 5, NULL, 281474978811909 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./15/file0") = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./15") = 0 [pid 5064] mkdir("./16", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5267 ./strace-static-x86_64: Process 5267 attached [pid 5267] chdir("./16" [pid 5258] <... sendfile resumed>) = 1048576 [pid 5258] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5258] exit_group(0) = ? [pid 5258] +++ exited with 0 +++ [pid 5267] <... chdir resumed>) = 0 [pid 5267] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5258, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5267] <... prctl resumed>) = 0 [pid 5063] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5267] setpgid(0, 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5267] <... setpgid resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5267] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... openat resumed>) = 3 [pid 5267] <... openat resumed>) = 3 [pid 5267] write(3, "1000", 4 [pid 5063] fstat(3, [pid 5267] <... write resumed>) = 4 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5267] close(3 [pid 5063] getdents64(3, [pid 5267] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5267] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5063] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5267] memfd_create("syzkaller", 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5267] <... memfd_create resumed>) = 3 [pid 5063] unlink("./15/binderfs" [pid 5267] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5267] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5257] <... sendfile resumed>) = 1048576 [pid 5257] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5257] exit_group(0) = ? [pid 5257] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5257, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5067] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5267] <... write resumed>) = 2097152 [pid 5067] lstat("./15/binderfs", [pid 5267] munmap(0x7ff395729000, 2097152 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./15/binderfs" [pid 5267] <... munmap resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5067] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5267] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5267] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5267] close(3) = 0 [pid 5267] mkdir("./file0", 0777) = 0 [pid 5267] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5063] <... umount2 resumed>) = 0 [ 84.591348][ T5267] loop2: detected capacity change from 0 to 4096 [pid 5063] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./15/file0") = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./15" [pid 5259] <... sendfile resumed>) = 1048576 [pid 5259] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5259] exit_group(0) = ? [pid 5259] +++ exited with 0 +++ [pid 5063] <... rmdir resumed>) = 0 [pid 5063] mkdir("./16", 0777 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5259, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] <... umount2 resumed>) = 0 [ 84.681690][ T5267] NILFS (loop2): invalid segment: Checksum error in segment payload [ 84.689728][ T5267] NILFS (loop2): trying rollback from an earlier position [pid 5063] close(3 [pid 5062] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5268 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] unlink("./15/binderfs") = 0 [pid 5062] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5268 attached [pid 5268] chdir("./16" [pid 5067] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5268] <... chdir resumed>) = 0 [pid 5268] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5268] setpgid(0, 0 [pid 5067] lstat("./15/file0", [pid 5268] <... setpgid resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5268] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5268] <... openat resumed>) = 3 [pid 5067] <... openat resumed>) = 4 [pid 5268] write(3, "1000", 4) = 4 [pid 5268] close(3 [pid 5067] fstat(4, [pid 5268] <... close resumed>) = 0 [pid 5268] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5268] <... symlink resumed>) = 0 [pid 5067] getdents64(4, [pid 5268] memfd_create("syzkaller", 0 [pid 5067] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./15/file0" [pid 5268] <... memfd_create resumed>) = 3 [pid 5067] <... rmdir resumed>) = 0 [pid 5268] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] getdents64(3, [pid 5268] <... mmap resumed>) = 0x7ff395729000 [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./15") = 0 [pid 5067] mkdir("./16", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5269 [ 84.799784][ T5267] NILFS (loop2): recovery complete ./strace-static-x86_64: Process 5269 attached [pid 5269] chdir("./16") = 0 [pid 5269] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5269] setpgid(0, 0) = 0 [pid 5267] <... mount resumed>) = 0 [pid 5268] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] <... umount2 resumed>) = 0 [pid 5269] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5267] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5269] <... openat resumed>) = 3 [pid 5267] <... openat resumed>) = 3 [pid 5269] write(3, "1000", 4 [pid 5267] chdir("./file0" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5269] <... write resumed>) = 4 [pid 5267] <... chdir resumed>) = 0 [pid 5269] close(3 [pid 5267] ioctl(4, LOOP_CLR_FD [pid 5062] lstat("./15/file0", [pid 5269] <... close resumed>) = 0 [pid 5267] <... ioctl resumed>) = 0 [pid 5269] symlink("/dev/binderfs", "./binderfs" [ 84.846737][ T5270] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5267] close(4 [pid 5269] <... symlink resumed>) = 0 [pid 5268] <... write resumed>) = 2097152 [pid 5267] <... close resumed>) = 0 [pid 5062] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5267] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5268] munmap(0x7ff395729000, 2097152 [pid 5269] memfd_create("syzkaller", 0 [pid 5268] <... munmap resumed>) = 0 [pid 5267] <... open resumed>) = 4 [pid 5062] fstat(4, [pid 5269] <... memfd_create resumed>) = 3 [pid 5267] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5268] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] getdents64(4, [pid 5269] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5268] <... openat resumed>) = 4 [pid 5267] <... open resumed>) = 5 [pid 5062] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5268] ioctl(4, LOOP_SET_FD, 3 [pid 5267] ftruncate(5, 33587195 [pid 5062] getdents64(4, [pid 5269] <... mmap resumed>) = 0x7ff395729000 [pid 5268] <... ioctl resumed>) = 0 [pid 5267] <... ftruncate resumed>) = 0 [pid 5267] sendfile(4, 5, NULL, 281474978811909 [pid 5062] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] close(4 [pid 5268] close(3 [pid 5062] <... close resumed>) = 0 [pid 5268] <... close resumed>) = 0 [pid 5062] rmdir("./15/file0" [pid 5268] mkdir("./file0", 0777 [pid 5062] <... rmdir resumed>) = 0 [pid 5268] <... mkdir resumed>) = 0 [pid 5062] getdents64(3, [pid 5268] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./15") = 0 [pid 5062] mkdir("./16", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5269] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5271 [ 84.915975][ T5268] loop1: detected capacity change from 0 to 4096 ./strace-static-x86_64: Process 5271 attached [pid 5271] chdir("./16") = 0 [ 84.958709][ T5268] NILFS (loop1): invalid segment: Checksum error in segment payload [ 84.972997][ T5268] NILFS (loop1): trying rollback from an earlier position [ 84.996857][ T5268] NILFS (loop1): recovery complete [pid 5271] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5271] setpgid(0, 0) = 0 [pid 5271] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5271] write(3, "1000", 4) = 4 [pid 5271] close(3) = 0 [pid 5271] symlink("/dev/binderfs", "./binderfs" [pid 5269] <... write resumed>) = 2097152 [pid 5268] <... mount resumed>) = 0 [pid 5263] <... sendfile resumed>) = 1048576 [pid 5268] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5271] <... symlink resumed>) = 0 [pid 5269] munmap(0x7ff395729000, 2097152 [pid 5268] chdir("./file0" [pid 5263] open(NULL, O_RDONLY [pid 5268] <... chdir resumed>) = 0 [pid 5268] ioctl(4, LOOP_CLR_FD [pid 5271] memfd_create("syzkaller", 0 [pid 5268] <... ioctl resumed>) = 0 [pid 5263] <... open resumed>) = -1 EFAULT (Bad address) [pid 5268] close(4 [pid 5263] exit_group(0 [pid 5268] <... close resumed>) = 0 [pid 5268] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5268] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5268] ftruncate(5, 33587195) = 0 [pid 5268] sendfile(4, 5, NULL, 281474978811909 [pid 5271] <... memfd_create resumed>) = 3 [pid 5269] <... munmap resumed>) = 0 [pid 5263] <... exit_group resumed>) = ? [pid 5271] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5269] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5263] +++ exited with 0 +++ [pid 5271] <... mmap resumed>) = 0x7ff395729000 [pid 5269] <... openat resumed>) = 4 [ 85.047425][ T5272] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5269] ioctl(4, LOOP_SET_FD, 3 [pid 5261] <... sendfile resumed>) = 1048576 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5263, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5269] <... ioctl resumed>) = 0 [pid 5261] open(NULL, O_RDONLY [pid 5066] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5269] close(3 [pid 5261] <... open resumed>) = -1 EFAULT (Bad address) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5269] <... close resumed>) = 0 [pid 5261] exit_group(0 [pid 5066] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5269] mkdir("./file0", 0777) = 0 [pid 5261] <... exit_group resumed>) = ? [pid 5066] <... openat resumed>) = 3 [pid 5269] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5261] +++ exited with 0 +++ [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5261, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5066] getdents64(3, [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] <... restart_syscall resumed>) = 0 [pid 5066] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./16/binderfs", [pid 5065] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5271] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] unlink("./16/binderfs" [pid 5065] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... unlink resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5066] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./15/binderfs") = 0 [ 85.101822][ T5269] loop5: detected capacity change from 0 to 4096 [ 85.139532][ T5269] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5065] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5271] <... write resumed>) = 2097152 [pid 5271] munmap(0x7ff395729000, 2097152) = 0 [pid 5271] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 85.203214][ T5269] NILFS (loop5): trying rollback from an earlier position [pid 5271] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5271] close(3) = 0 [pid 5271] mkdir("./file0", 0777) = 0 [pid 5271] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 85.245758][ T5271] loop0: detected capacity change from 0 to 4096 [ 85.277399][ T5269] NILFS (loop5): recovery complete [pid 5066] lstat("./16/file0", [pid 5269] <... mount resumed>) = 0 [pid 5269] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5269] chdir("./file0") = 0 [pid 5066] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5269] ioctl(4, LOOP_CLR_FD) = 0 [pid 5269] close(4) = 0 [pid 5269] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5269] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5269] ftruncate(5, 33587195) = 0 [pid 5269] sendfile(4, 5, NULL, 281474978811909 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./16/file0") = 0 [pid 5066] getdents64(3, [pid 5065] <... umount2 resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3 [ 85.324231][ T5273] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.339628][ T5271] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5065] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] rmdir("./16" [pid 5065] lstat("./15/file0", [pid 5066] <... rmdir resumed>) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] mkdir("./17", 0777 [pid 5065] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] <... openat resumed>) = 4 [pid 5066] <... openat resumed>) = 3 [pid 5065] fstat(4, [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] getdents64(4, [pid 5066] close(3 [pid 5065] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] <... close resumed>) = 0 [pid 5065] getdents64(4, [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./15/file0") = 0 ./strace-static-x86_64: Process 5274 attached [pid 5066] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5274 [pid 5065] getdents64(3, [pid 5274] chdir("./17" [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5274] <... chdir resumed>) = 0 [pid 5065] close(3) = 0 [ 85.394181][ T5271] NILFS (loop0): trying rollback from an earlier position [pid 5065] rmdir("./15" [pid 5274] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... rmdir resumed>) = 0 [pid 5274] <... prctl resumed>) = 0 [pid 5065] mkdir("./16", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5274] setpgid(0, 0 [pid 5065] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5274] <... setpgid resumed>) = 0 [pid 5271] <... mount resumed>) = 0 [pid 5271] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5276 [pid 5274] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5271] <... openat resumed>) = 3 [pid 5271] chdir("./file0" [pid 5274] <... openat resumed>) = 3 [pid 5271] <... chdir resumed>) = 0 [pid 5274] write(3, "1000", 4) = 4 [pid 5271] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 5276 attached [pid 5274] close(3 [pid 5271] <... ioctl resumed>) = 0 [pid 5276] chdir("./16" [pid 5274] <... close resumed>) = 0 [pid 5271] close(4 [pid 5276] <... chdir resumed>) = 0 [pid 5274] symlink("/dev/binderfs", "./binderfs" [pid 5271] <... close resumed>) = 0 [pid 5276] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5274] <... symlink resumed>) = 0 [pid 5271] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5276] <... prctl resumed>) = 0 [pid 5274] memfd_create("syzkaller", 0 [pid 5271] <... open resumed>) = 4 [pid 5276] setpgid(0, 0 [pid 5274] <... memfd_create resumed>) = 3 [pid 5271] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5276] <... setpgid resumed>) = 0 [pid 5274] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5271] <... open resumed>) = 5 [pid 5276] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5274] <... mmap resumed>) = 0x7ff395729000 [pid 5271] ftruncate(5, 33587195 [pid 5276] <... openat resumed>) = 3 [pid 5271] <... ftruncate resumed>) = 0 [pid 5276] write(3, "1000", 4 [pid 5271] sendfile(4, 5, NULL, 281474978811909 [pid 5276] <... write resumed>) = 4 [pid 5276] close(3) = 0 [pid 5276] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5276] memfd_create("syzkaller", 0) = 3 [pid 5276] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [ 85.452006][ T5271] NILFS (loop0): recovery complete [ 85.468045][ T5275] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5276] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5274] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5276] <... write resumed>) = 2097152 [pid 5274] <... write resumed>) = 2097152 [pid 5276] munmap(0x7ff395729000, 2097152) = 0 [pid 5276] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5276] ioctl(4, LOOP_SET_FD, 3 [pid 5274] munmap(0x7ff395729000, 2097152) = 0 [pid 5274] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5274] ioctl(4, LOOP_SET_FD, 3 [pid 5276] <... ioctl resumed>) = 0 [pid 5276] close(3) = 0 [pid 5276] mkdir("./file0", 0777) = 0 [pid 5276] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5274] <... ioctl resumed>) = 0 [pid 5267] <... sendfile resumed>) = 1048576 [pid 5274] close(3 [pid 5267] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [ 85.661266][ T5276] loop3: detected capacity change from 0 to 4096 [ 85.668826][ T5274] loop4: detected capacity change from 0 to 4096 [pid 5274] <... close resumed>) = 0 [pid 5267] exit_group(0) = ? [pid 5267] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5267, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./16/binderfs", [pid 5274] mkdir("./file0", 0777 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./16/binderfs") = 0 [pid 5064] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5274] <... mkdir resumed>) = 0 [ 85.708733][ T5276] NILFS (loop3): invalid segment: Checksum error in segment payload [ 85.717003][ T5276] NILFS (loop3): trying rollback from an earlier position [ 85.749162][ T5274] NILFS (loop4): invalid segment: Checksum error in segment payload [ 85.769917][ T5274] NILFS (loop4): trying rollback from an earlier position [ 85.782863][ T5276] NILFS (loop3): recovery complete [pid 5274] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5276] <... mount resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5276] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5276] <... openat resumed>) = 3 [pid 5276] chdir("./file0" [pid 5064] lstat("./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5276] <... chdir resumed>) = 0 [pid 5064] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5276] ioctl(4, LOOP_CLR_FD [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5276] <... ioctl resumed>) = 0 [ 85.824069][ T5277] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5276] close(4 [pid 5064] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5276] <... close resumed>) = 0 [pid 5276] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5064] <... openat resumed>) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5276] <... open resumed>) = 4 [pid 5064] getdents64(4, [pid 5276] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5064] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, [pid 5276] <... open resumed>) = 5 [pid 5064] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 5276] ftruncate(5, 33587195 [pid 5064] <... close resumed>) = 0 [pid 5276] <... ftruncate resumed>) = 0 [ 85.869167][ T5274] NILFS (loop4): recovery complete [pid 5276] sendfile(4, 5, NULL, 281474978811909 [pid 5064] rmdir("./16/file0") = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./16") = 0 [pid 5064] mkdir("./17", 0777 [pid 5274] <... mount resumed>) = 0 [pid 5274] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5274] chdir("./file0") = 0 [pid 5274] ioctl(4, LOOP_CLR_FD) = 0 [pid 5274] close(4) = 0 [pid 5274] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5064] <... mkdir resumed>) = 0 [pid 5274] <... open resumed>) = 4 [pid 5274] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5274] ftruncate(5, 33587195) = 0 [pid 5274] sendfile(4, 5, NULL, 281474978811909 [pid 5064] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5279 [ 85.895288][ T5278] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds ./strace-static-x86_64: Process 5279 attached [pid 5279] chdir("./17") = 0 [pid 5279] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5279] setpgid(0, 0) = 0 [pid 5279] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5279] write(3, "1000", 4) = 4 [pid 5279] close(3) = 0 [pid 5279] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5279] memfd_create("syzkaller", 0) = 3 [pid 5279] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5268] <... sendfile resumed>) = 1048576 [pid 5268] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5268] exit_group(0) = ? [pid 5268] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5268, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5279] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./16/binderfs") = 0 [pid 5063] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5279] <... write resumed>) = 2097152 [pid 5279] munmap(0x7ff395729000, 2097152) = 0 [pid 5279] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5279] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5279] close(3) = 0 [pid 5279] mkdir("./file0", 0777) = 0 [ 86.181947][ T5279] loop2: detected capacity change from 0 to 4096 [pid 5279] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5269] <... sendfile resumed>) = 1048576 [pid 5269] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5063] <... umount2 resumed>) = 0 [pid 5269] exit_group(0 [pid 5063] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5269] <... exit_group resumed>) = ? [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5269] +++ exited with 0 +++ [pid 5063] lstat("./16/file0", [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5269, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] fstat(4, [pid 5067] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5063] getdents64(4, [pid 5067] fstat(3, [pid 5063] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, [pid 5067] getdents64(3, [pid 5063] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] close(4) = 0 [pid 5067] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [ 86.270909][ T5279] NILFS (loop2): invalid segment: Checksum error in segment payload [ 86.278945][ T5279] NILFS (loop2): trying rollback from an earlier position [pid 5063] rmdir("./16/file0") = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(3, [pid 5067] lstat("./16/binderfs", [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] close(3 [pid 5067] unlink("./16/binderfs" [pid 5063] <... close resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5063] rmdir("./16" [pid 5067] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... rmdir resumed>) = 0 [pid 5063] mkdir("./17", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5280 ./strace-static-x86_64: Process 5280 attached [pid 5280] chdir("./17") = 0 [pid 5280] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5280] setpgid(0, 0) = 0 [pid 5280] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5280] write(3, "1000", 4) = 4 [pid 5280] close(3) = 0 [pid 5280] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5280] memfd_create("syzkaller", 0) = 3 [pid 5280] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [ 86.405448][ T5279] NILFS (loop2): recovery complete [pid 5271] <... sendfile resumed>) = 1048576 [pid 5271] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5271] exit_group(0) = ? [pid 5271] +++ exited with 0 +++ [pid 5279] <... mount resumed>) = 0 [pid 5279] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5271, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5279] <... openat resumed>) = 3 [pid 5279] chdir("./file0") = 0 [pid 5279] ioctl(4, LOOP_CLR_FD) = 0 [pid 5279] close(4 [pid 5280] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5279] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5279] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5279] <... open resumed>) = 4 [pid 5067] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 86.435707][ T5281] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5062] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5279] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... openat resumed>) = 3 [pid 5279] ftruncate(5, 33587195 [pid 5062] fstat(3, [pid 5279] <... ftruncate resumed>) = 0 [pid 5067] lstat("./16/file0", [pid 5279] sendfile(4, 5, NULL, 281474978811909 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(3, [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] <... openat resumed>) = 4 [pid 5062] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] fstat(4, [pid 5062] lstat("./16/binderfs", [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] getdents64(4, [pid 5062] unlink("./16/binderfs" [pid 5067] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] <... unlink resumed>) = 0 [pid 5067] getdents64(4, [pid 5062] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./16/file0") = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./16") = 0 [pid 5067] mkdir("./17", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3 [pid 5280] <... write resumed>) = 2097152 [pid 5067] <... close resumed>) = 0 [pid 5280] munmap(0x7ff395729000, 2097152 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5280] <... munmap resumed>) = 0 [pid 5280] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5067] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5282 [pid 5280] <... openat resumed>) = 4 [pid 5280] ioctl(4, LOOP_SET_FD, 3) = 0 ./strace-static-x86_64: Process 5282 attached [pid 5280] close(3) = 0 [pid 5282] chdir("./17" [pid 5280] mkdir("./file0", 0777) = 0 [pid 5282] <... chdir resumed>) = 0 [pid 5282] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5280] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5282] <... prctl resumed>) = 0 [pid 5282] setpgid(0, 0) = 0 [pid 5282] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 86.582267][ T5280] loop1: detected capacity change from 0 to 4096 [pid 5282] write(3, "1000", 4) = 4 [pid 5282] close(3) = 0 [pid 5282] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5282] memfd_create("syzkaller", 0) = 3 [pid 5282] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [ 86.626479][ T5280] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5282] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./16/file0" [pid 5276] <... sendfile resumed>) = 1048576 [pid 5062] <... rmdir resumed>) = 0 [pid 5276] open(NULL, O_RDONLY [pid 5062] getdents64(3, [ 86.694069][ T5280] NILFS (loop1): trying rollback from an earlier position [pid 5276] <... open resumed>) = -1 EFAULT (Bad address) [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5282] <... write resumed>) = 2097152 [pid 5276] exit_group(0 [pid 5062] close(3 [pid 5276] <... exit_group resumed>) = ? [pid 5062] <... close resumed>) = 0 [pid 5276] +++ exited with 0 +++ [pid 5062] rmdir("./16" [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5276, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5062] <... rmdir resumed>) = 0 [pid 5065] <... restart_syscall resumed>) = 0 [pid 5062] mkdir("./17", 0777 [pid 5282] munmap(0x7ff395729000, 2097152 [pid 5062] <... mkdir resumed>) = 0 [pid 5065] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... openat resumed>) = 3 [pid 5065] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5065] fstat(3, [pid 5062] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] close(3) = 0 [pid 5282] <... munmap resumed>) = 0 [pid 5282] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5065] getdents64(3, [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5282] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 5283 attached [pid 5065] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5283 [pid 5283] chdir("./17" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5283] <... chdir resumed>) = 0 [pid 5065] lstat("./16/binderfs", [pid 5283] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5283] <... prctl resumed>) = 0 [pid 5065] unlink("./16/binderfs" [pid 5283] setpgid(0, 0) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 5283] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5283] <... openat resumed>) = 3 [ 86.774766][ T5280] NILFS (loop1): recovery complete [ 86.793302][ T5282] loop5: detected capacity change from 0 to 4096 [pid 5283] write(3, "1000", 4) = 4 [pid 5280] <... mount resumed>) = 0 [pid 5283] close(3 [pid 5280] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5283] <... close resumed>) = 0 [pid 5280] <... openat resumed>) = 3 [pid 5280] chdir("./file0") = 0 [pid 5280] ioctl(4, LOOP_CLR_FD) = 0 [pid 5282] close(3 [pid 5280] close(4 [pid 5283] symlink("/dev/binderfs", "./binderfs" [pid 5282] <... close resumed>) = 0 [pid 5280] <... close resumed>) = 0 [pid 5282] mkdir("./file0", 0777 [pid 5280] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5283] <... symlink resumed>) = 0 [pid 5282] <... mkdir resumed>) = 0 [pid 5280] <... open resumed>) = 4 [pid 5283] memfd_create("syzkaller", 0 [pid 5282] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5280] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5283] <... memfd_create resumed>) = 3 [pid 5280] <... open resumed>) = 5 [pid 5283] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5280] ftruncate(5, 33587195 [pid 5283] <... mmap resumed>) = 0x7ff395729000 [pid 5280] <... ftruncate resumed>) = 0 [ 86.819279][ T5284] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5280] sendfile(4, 5, NULL, 281474978811909 [pid 5283] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5274] <... sendfile resumed>) = 1048576 [pid 5274] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5274] exit_group(0) = ? [pid 5274] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5274, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5066] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./17/binderfs") = 0 [ 86.900693][ T5282] NILFS (loop5): invalid segment: Checksum error in segment payload [ 86.908745][ T5282] NILFS (loop5): trying rollback from an earlier position [pid 5066] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5283] <... write resumed>) = 2097152 [pid 5283] munmap(0x7ff395729000, 2097152) = 0 [pid 5283] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5283] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5283] close(3) = 0 [pid 5283] mkdir("./file0", 0777) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5283] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5065] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5282] <... mount resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5282] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5282] chdir("./file0") = 0 [pid 5282] ioctl(4, LOOP_CLR_FD [pid 5065] fstat(4, [pid 5282] <... ioctl resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5282] close(4 [pid 5065] getdents64(4, [pid 5282] <... close resumed>) = 0 [pid 5282] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5282] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5282] ftruncate(5, 33587195) = 0 [ 86.997690][ T5283] loop0: detected capacity change from 0 to 4096 [ 87.005738][ T5282] NILFS (loop5): recovery complete [ 87.035554][ T5285] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5282] sendfile(4, 5, NULL, 281474978811909 [pid 5065] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./16/file0") = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./16") = 0 [pid 5065] mkdir("./17", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 87.072226][ T5283] NILFS (loop0): invalid segment: Checksum error in segment payload [ 87.080723][ T5283] NILFS (loop0): trying rollback from an earlier position [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5287 [ 87.135292][ T5283] NILFS (loop0): recovery complete [pid 5283] <... mount resumed>) = 0 [pid 5283] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 5287 attached [pid 5283] chdir("./file0" [pid 5066] <... umount2 resumed>) = 0 [pid 5287] chdir("./17") = 0 [pid 5283] <... chdir resumed>) = 0 [pid 5066] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5287] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5283] ioctl(4, LOOP_CLR_FD [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5287] <... prctl resumed>) = 0 [pid 5283] <... ioctl resumed>) = 0 [pid 5066] lstat("./17/file0", [pid 5287] setpgid(0, 0 [pid 5283] close(4 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5287] <... setpgid resumed>) = 0 [pid 5283] <... close resumed>) = 0 [ 87.165253][ T5286] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5066] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5287] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5283] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5066] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5287] <... openat resumed>) = 3 [pid 5283] <... open resumed>) = 4 [pid 5066] <... openat resumed>) = 4 [pid 5287] write(3, "1000", 4 [pid 5283] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5066] fstat(4, [pid 5287] <... write resumed>) = 4 [pid 5283] <... open resumed>) = 5 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5287] close(3 [pid 5283] ftruncate(5, 33587195 [pid 5066] getdents64(4, [pid 5287] <... close resumed>) = 0 [pid 5283] <... ftruncate resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5287] symlink("/dev/binderfs", "./binderfs" [pid 5283] sendfile(4, 5, NULL, 281474978811909 [pid 5066] getdents64(4, [pid 5287] <... symlink resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5287] memfd_create("syzkaller", 0 [pid 5066] close(4 [pid 5287] <... memfd_create resumed>) = 3 [pid 5066] <... close resumed>) = 0 [pid 5287] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] rmdir("./17/file0" [pid 5287] <... mmap resumed>) = 0x7ff395729000 [pid 5066] <... rmdir resumed>) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./17") = 0 [pid 5066] mkdir("./18", 0777 [pid 5279] <... sendfile resumed>) = 1048576 [pid 5279] open(NULL, O_RDONLY [pid 5066] <... mkdir resumed>) = 0 [pid 5279] <... open resumed>) = -1 EFAULT (Bad address) [pid 5279] exit_group(0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5279] <... exit_group resumed>) = ? [pid 5066] <... openat resumed>) = 3 [pid 5279] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5279, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5064] <... restart_syscall resumed>) = 0 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5064] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5288 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5288 attached ) = -1 EINVAL (Invalid argument) [pid 5288] chdir("./18" [pid 5287] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] lstat("./17/binderfs", [pid 5288] <... chdir resumed>) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5288] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] unlink("./17/binderfs" [pid 5288] <... prctl resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5288] setpgid(0, 0 [pid 5064] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5288] <... setpgid resumed>) = 0 [pid 5288] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5288] write(3, "1000", 4) = 4 [pid 5288] close(3) = 0 [pid 5288] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5288] memfd_create("syzkaller", 0) = 3 [pid 5288] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5287] <... write resumed>) = 2097152 [pid 5288] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5287] munmap(0x7ff395729000, 2097152) = 0 [pid 5287] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5287] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5287] close(3) = 0 [pid 5287] mkdir("./file0", 0777 [pid 5288] <... write resumed>) = 2097152 [pid 5287] <... mkdir resumed>) = 0 [pid 5288] munmap(0x7ff395729000, 2097152 [ 87.407864][ T5287] loop3: detected capacity change from 0 to 4096 [pid 5287] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5288] <... munmap resumed>) = 0 [pid 5288] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5288] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5288] close(3) = 0 [pid 5288] mkdir("./file0", 0777) = 0 [ 87.472719][ T5287] NILFS (loop3): invalid segment: Checksum error in segment payload [ 87.476218][ T5288] loop4: detected capacity change from 0 to 4096 [pid 5288] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 87.515979][ T5287] NILFS (loop3): trying rollback from an earlier position [ 87.554600][ T5288] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5064] lstat("./17/file0", [pid 5287] <... mount resumed>) = 0 [pid 5287] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5287] <... openat resumed>) = 3 [pid 5064] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5287] chdir("./file0" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5287] <... chdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5287] ioctl(4, LOOP_CLR_FD [pid 5064] <... openat resumed>) = 4 [pid 5287] <... ioctl resumed>) = 0 [pid 5064] fstat(4, [pid 5287] close(4 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5287] <... close resumed>) = 0 [pid 5287] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5287] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5287] ftruncate(5, 33587195) = 0 [pid 5287] sendfile(4, 5, NULL, 281474978811909 [pid 5064] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [ 87.562656][ T5287] NILFS (loop3): recovery complete [ 87.565743][ T5289] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.574834][ T5288] NILFS (loop4): trying rollback from an earlier position [pid 5064] close(4) = 0 [pid 5064] rmdir("./17/file0") = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./17") = 0 [pid 5064] mkdir("./18", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 87.638025][ T5288] NILFS (loop4): recovery complete [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5291 ./strace-static-x86_64: Process 5291 attached [pid 5291] chdir("./18" [pid 5288] <... mount resumed>) = 0 [pid 5288] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5291] <... chdir resumed>) = 0 [pid 5288] chdir("./file0" [pid 5291] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5288] <... chdir resumed>) = 0 [pid 5291] <... prctl resumed>) = 0 [pid 5288] ioctl(4, LOOP_CLR_FD [pid 5291] setpgid(0, 0 [pid 5288] <... ioctl resumed>) = 0 [pid 5291] <... setpgid resumed>) = 0 [ 87.668344][ T5290] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5288] close(4 [pid 5291] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5288] <... close resumed>) = 0 [pid 5291] <... openat resumed>) = 3 [pid 5288] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5291] write(3, "1000", 4) = 4 [pid 5288] <... open resumed>) = 4 [pid 5291] close(3 [pid 5288] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5291] <... close resumed>) = 0 [pid 5291] symlink("/dev/binderfs", "./binderfs" [pid 5288] <... open resumed>) = 5 [pid 5291] <... symlink resumed>) = 0 [pid 5288] ftruncate(5, 33587195 [pid 5291] memfd_create("syzkaller", 0 [pid 5288] <... ftruncate resumed>) = 0 [pid 5291] <... memfd_create resumed>) = 3 [pid 5288] sendfile(4, 5, NULL, 281474978811909 [pid 5291] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5291] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5280] <... sendfile resumed>) = 1048576 [pid 5280] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5280] exit_group(0) = ? [pid 5280] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5280, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5063] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./17/binderfs") = 0 [pid 5063] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5291] <... write resumed>) = 2097152 [pid 5291] munmap(0x7ff395729000, 2097152) = 0 [pid 5291] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5291] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5291] close(3) = 0 [pid 5291] mkdir("./file0", 0777) = 0 [ 87.896847][ T5291] loop2: detected capacity change from 0 to 4096 [pid 5291] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5282] <... sendfile resumed>) = 1048576 [pid 5282] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5282] exit_group(0) = ? [pid 5282] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5282, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5067] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./17/binderfs") = 0 [ 87.975962][ T5291] NILFS (loop2): invalid segment: Checksum error in segment payload [ 88.013949][ T5291] NILFS (loop2): trying rollback from an earlier position [pid 5067] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 5283] <... sendfile resumed>) = 1048576 [pid 5283] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5283] exit_group(0 [pid 5063] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5283] <... exit_group resumed>) = ? [pid 5283] +++ exited with 0 +++ [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./17/file0", [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5283, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 5063] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... restart_syscall resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... openat resumed>) = 4 [pid 5062] <... openat resumed>) = 3 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] unlink("./17/binderfs" [pid 5063] getdents64(4, [pid 5062] <... unlink resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5062] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5291] <... mount resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5291] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] rmdir("./17/file0" [pid 5291] <... openat resumed>) = 3 [pid 5063] <... rmdir resumed>) = 0 [pid 5291] chdir("./file0" [pid 5063] getdents64(3, [pid 5291] <... chdir resumed>) = 0 [pid 5291] ioctl(4, LOOP_CLR_FD [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5291] <... ioctl resumed>) = 0 [pid 5063] close(3 [pid 5291] close(4 [pid 5063] <... close resumed>) = 0 [pid 5291] <... close resumed>) = 0 [pid 5291] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5063] rmdir("./17") = 0 [pid 5291] <... open resumed>) = 4 [pid 5063] mkdir("./18", 0777 [pid 5291] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5063] <... mkdir resumed>) = 0 [pid 5291] <... open resumed>) = 5 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5291] ftruncate(5, 33587195) = 0 [pid 5291] sendfile(4, 5, NULL, 281474978811909 [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 88.108196][ T5291] NILFS (loop2): recovery complete [ 88.119268][ T5292] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5293 ./strace-static-x86_64: Process 5293 attached [pid 5293] chdir("./18") = 0 [pid 5293] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5293] setpgid(0, 0) = 0 [pid 5293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5293] write(3, "1000", 4) = 4 [pid 5293] close(3) = 0 [pid 5293] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5293] memfd_create("syzkaller", 0) = 3 [pid 5293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./17/file0") = 0 [pid 5067] getdents64(3, [pid 5293] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./17") = 0 [pid 5067] mkdir("./18", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5294 [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./17/file0") = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./17") = 0 [pid 5062] mkdir("./18", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5293] <... write resumed>) = 2097152 [pid 5062] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5295 ./strace-static-x86_64: Process 5294 attached [pid 5294] chdir("./18" [pid 5293] munmap(0x7ff395729000, 2097152 [pid 5294] <... chdir resumed>) = 0 [pid 5294] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5294] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5295 attached [pid 5295] chdir("./18" [pid 5294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5295] <... chdir resumed>) = 0 [pid 5293] <... munmap resumed>) = 0 [pid 5295] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5294] <... openat resumed>) = 3 [pid 5293] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5295] <... prctl resumed>) = 0 [pid 5294] write(3, "1000", 4 [pid 5293] <... openat resumed>) = 4 [pid 5295] setpgid(0, 0 [pid 5294] <... write resumed>) = 4 [pid 5293] ioctl(4, LOOP_SET_FD, 3 [pid 5294] close(3 [pid 5295] <... setpgid resumed>) = 0 [pid 5294] <... close resumed>) = 0 [pid 5294] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5294] memfd_create("syzkaller", 0 [pid 5295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5294] <... memfd_create resumed>) = 3 [pid 5293] <... ioctl resumed>) = 0 [pid 5295] <... openat resumed>) = 3 [pid 5293] close(3 [pid 5295] write(3, "1000", 4 [pid 5293] <... close resumed>) = 0 [pid 5295] <... write resumed>) = 4 [pid 5293] mkdir("./file0", 0777 [pid 5295] close(3) = 0 [pid 5293] <... mkdir resumed>) = 0 [pid 5295] symlink("/dev/binderfs", "./binderfs" [pid 5293] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5295] <... symlink resumed>) = 0 [pid 5295] memfd_create("syzkaller", 0 [pid 5294] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5295] <... memfd_create resumed>) = 3 [pid 5295] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5294] <... mmap resumed>) = 0x7ff395729000 [pid 5295] <... mmap resumed>) = 0x7ff395729000 [ 88.366275][ T5293] loop1: detected capacity change from 0 to 4096 [pid 5295] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 88.421711][ T5293] NILFS (loop1): invalid segment: Checksum error in segment payload [ 88.437488][ T5293] NILFS (loop1): trying rollback from an earlier position [pid 5294] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5287] <... sendfile resumed>) = 1048576 [pid 5287] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5295] <... write resumed>) = 2097152 [pid 5287] exit_group(0) = ? [pid 5295] munmap(0x7ff395729000, 2097152) = 0 [pid 5287] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5287, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5295] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5295] ioctl(4, LOOP_SET_FD, 3 [ 88.489370][ T5293] NILFS (loop1): recovery complete [pid 5065] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5294] <... write resumed>) = 2097152 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5293] <... mount resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5293] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] lstat("./17/binderfs", [pid 5295] <... ioctl resumed>) = 0 [pid 5294] munmap(0x7ff395729000, 2097152 [pid 5293] <... openat resumed>) = 3 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5295] close(3 [pid 5294] <... munmap resumed>) = 0 [pid 5065] unlink("./17/binderfs" [pid 5295] <... close resumed>) = 0 [pid 5294] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5293] chdir("./file0" [pid 5295] mkdir("./file0", 0777 [pid 5294] <... openat resumed>) = 4 [pid 5293] <... chdir resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 5295] <... mkdir resumed>) = 0 [pid 5294] ioctl(4, LOOP_SET_FD, 3 [pid 5293] ioctl(4, LOOP_CLR_FD [pid 5065] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5295] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5293] <... ioctl resumed>) = 0 [pid 5288] <... sendfile resumed>) = 1048576 [pid 5293] close(4 [pid 5288] open(NULL, O_RDONLY [pid 5293] <... close resumed>) = 0 [pid 5288] <... open resumed>) = -1 EFAULT (Bad address) [pid 5293] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5288] exit_group(0) = ? [pid 5288] +++ exited with 0 +++ [pid 5294] <... ioctl resumed>) = 0 [pid 5294] close(3) = 0 [pid 5294] mkdir("./file0", 0777) = 0 [pid 5294] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5293] <... open resumed>) = 4 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5288, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [ 88.525412][ T5295] loop0: detected capacity change from 0 to 4096 [ 88.535982][ T5296] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.559108][ T5294] loop5: detected capacity change from 0 to 4096 [pid 5293] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5293] ftruncate(5, 33587195) = 0 [pid 5293] sendfile(4, 5, NULL, 281474978811909 [pid 5066] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./18/binderfs") = 0 [ 88.594441][ T5295] NILFS (loop0): invalid segment: Checksum error in segment payload [ 88.614867][ T5294] NILFS (loop5): invalid segment: Checksum error in segment payload [ 88.624254][ T5294] NILFS (loop5): trying rollback from an earlier position [ 88.632751][ T5295] NILFS (loop0): trying rollback from an earlier position [pid 5066] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5294] <... mount resumed>) = 0 [ 88.672105][ T5294] NILFS (loop5): recovery complete [ 88.680447][ T5295] NILFS (loop0): recovery complete [ 88.705686][ T5298] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5295] <... mount resumed>) = 0 [pid 5294] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5295] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5294] <... openat resumed>) = 3 [pid 5295] <... openat resumed>) = 3 [pid 5294] chdir("./file0" [pid 5295] chdir("./file0" [pid 5294] <... chdir resumed>) = 0 [pid 5295] <... chdir resumed>) = 0 [pid 5294] ioctl(4, LOOP_CLR_FD [pid 5295] ioctl(4, LOOP_CLR_FD [pid 5294] <... ioctl resumed>) = 0 [pid 5295] <... ioctl resumed>) = 0 [pid 5294] close(4 [pid 5295] close(4 [pid 5294] <... close resumed>) = 0 [pid 5295] <... close resumed>) = 0 [pid 5294] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5295] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5294] <... open resumed>) = 4 [pid 5295] <... open resumed>) = 4 [pid 5294] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5295] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5294] <... open resumed>) = 5 [pid 5295] <... open resumed>) = 5 [pid 5294] ftruncate(5, 33587195 [pid 5295] ftruncate(5, 33587195 [pid 5294] <... ftruncate resumed>) = 0 [ 88.718650][ T5297] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5295] <... ftruncate resumed>) = 0 [pid 5294] sendfile(4, 5, NULL, 281474978811909 [pid 5066] <... umount2 resumed>) = 0 [pid 5295] sendfile(4, 5, NULL, 281474978811909 [pid 5066] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... openat resumed>) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] <... openat resumed>) = 4 [pid 5065] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] fstat(4, [pid 5065] close(4 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./17/file0" [pid 5066] getdents64(4, [pid 5065] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./17" [pid 5066] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5065] <... rmdir resumed>) = 0 [pid 5065] mkdir("./18", 0777 [pid 5066] getdents64(4, [pid 5065] <... mkdir resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5066] close(4 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./18/file0" [pid 5065] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5299 ./strace-static-x86_64: Process 5299 attached [pid 5066] <... rmdir resumed>) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./18" [pid 5299] chdir("./18" [pid 5066] <... rmdir resumed>) = 0 [pid 5299] <... chdir resumed>) = 0 [pid 5066] mkdir("./19", 0777 [pid 5299] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5299] setpgid(0, 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5299] <... setpgid resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5299] <... openat resumed>) = 3 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5299] write(3, "1000", 4 [pid 5066] close(3 [pid 5299] <... write resumed>) = 4 [pid 5066] <... close resumed>) = 0 [pid 5299] close(3 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5299] <... close resumed>) = 0 [pid 5299] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5299] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5300 attached ) = 3 [pid 5066] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5300 [pid 5299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5300] chdir("./19") = 0 [pid 5300] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5300] setpgid(0, 0) = 0 [pid 5300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5300] write(3, "1000", 4) = 4 [pid 5300] close(3) = 0 [pid 5300] symlink("/dev/binderfs", "./binderfs" [pid 5299] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5300] <... symlink resumed>) = 0 [pid 5300] memfd_create("syzkaller", 0) = 3 [pid 5300] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5300] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5299] <... write resumed>) = 2097152 [pid 5299] munmap(0x7ff395729000, 2097152) = 0 [pid 5299] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5299] ioctl(4, LOOP_SET_FD, 3 [pid 5291] <... sendfile resumed>) = 1048576 [pid 5300] <... write resumed>) = 2097152 [pid 5291] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5291] exit_group(0) = ? [pid 5300] munmap(0x7ff395729000, 2097152 [pid 5291] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5291, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5299] <... ioctl resumed>) = 0 [pid 5299] close(3) = 0 [pid 5299] mkdir("./file0", 0777 [pid 5064] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5300] <... munmap resumed>) = 0 [pid 5300] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5300] <... openat resumed>) = 4 [pid 5064] <... openat resumed>) = 3 [pid 5064] fstat(3, [pid 5300] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, [pid 5299] <... mkdir resumed>) = 0 [pid 5299] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5300] <... ioctl resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5300] close(3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5300] <... close resumed>) = 0 [pid 5064] lstat("./18/binderfs", [pid 5300] mkdir("./file0", 0777 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5300] <... mkdir resumed>) = 0 [ 89.082898][ T5299] loop3: detected capacity change from 0 to 4096 [ 89.113544][ T5300] loop4: detected capacity change from 0 to 4096 [pid 5300] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5064] unlink("./18/binderfs") = 0 [ 89.151736][ T5299] NILFS (loop3): invalid segment: Checksum error in segment payload [ 89.171034][ T5300] NILFS (loop4): invalid segment: Checksum error in segment payload [ 89.173838][ T5299] NILFS (loop3): trying rollback from an earlier position [ 89.179353][ T5300] NILFS (loop4): trying rollback from an earlier position [pid 5064] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5300] <... mount resumed>) = 0 [pid 5300] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5300] chdir("./file0") = 0 [pid 5300] ioctl(4, LOOP_CLR_FD) = 0 [pid 5300] close(4) = 0 [pid 5300] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5300] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5300] ftruncate(5, 33587195) = 0 [ 89.274869][ T5300] NILFS (loop4): recovery complete [ 89.291045][ T5299] NILFS (loop3): recovery complete [ 89.296398][ T5301] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5300] sendfile(4, 5, NULL, 281474978811909 [pid 5299] <... mount resumed>) = 0 [pid 5299] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5299] chdir("./file0") = 0 [pid 5299] ioctl(4, LOOP_CLR_FD) = 0 [pid 5299] close(4) = 0 [pid 5299] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5299] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5064] <... umount2 resumed>) = 0 [pid 5299] <... open resumed>) = 5 [pid 5299] ftruncate(5, 33587195) = 0 [pid 5299] sendfile(4, 5, NULL, 281474978811909 [pid 5064] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 89.339265][ T5302] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./18/file0") = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./18") = 0 [pid 5064] mkdir("./19", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5303 ./strace-static-x86_64: Process 5303 attached [pid 5303] chdir("./19") = 0 [pid 5303] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5303] setpgid(0, 0) = 0 [pid 5303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5303] write(3, "1000", 4) = 4 [pid 5303] close(3) = 0 [pid 5303] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5303] memfd_create("syzkaller", 0) = 3 [pid 5303] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5293] <... sendfile resumed>) = 1048576 [pid 5293] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5293] exit_group(0) = ? [pid 5293] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5293, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5063] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./18/binderfs") = 0 [pid 5063] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5303] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5294] <... sendfile resumed>) = 1048576 [pid 5294] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5294] exit_group(0) = ? [pid 5294] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5294, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5067] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./18/binderfs") = 0 [pid 5067] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5303] <... write resumed>) = 2097152 [pid 5303] munmap(0x7ff395729000, 2097152) = 0 [pid 5303] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5303] ioctl(4, LOOP_SET_FD, 3 [pid 5295] <... sendfile resumed>) = 1048576 [pid 5295] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5295] exit_group(0) = ? [pid 5295] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5295, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5303] <... ioctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5303] close(3 [pid 5062] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5303] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5303] mkdir("./file0", 0777 [pid 5062] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, [pid 5303] <... mkdir resumed>) = 0 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5303] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5062] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] unlink("./18/binderfs") = 0 [ 89.672164][ T5303] loop2: detected capacity change from 0 to 4096 [pid 5062] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 89.734769][ T5303] NILFS (loop2): invalid segment: Checksum error in segment payload [ 89.769477][ T5303] NILFS (loop2): trying rollback from an earlier position [pid 5063] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./18/file0") = 0 [pid 5063] getdents64(3, [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./18" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... rmdir resumed>) = 0 [pid 5067] lstat("./18/file0", [pid 5063] mkdir("./19", 0777 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5067] <... openat resumed>) = 4 [pid 5067] fstat(4, [pid 5063] <... openat resumed>) = 3 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] <... umount2 resumed>) = 0 [pid 5067] getdents64(4, [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5062] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] close(3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] getdents64(4, [pid 5063] <... close resumed>) = 0 [pid 5062] lstat("./18/file0", [pid 5067] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] close(4 [pid 5062] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5305 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... close resumed>) = 0 [pid 5062] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, [pid 5067] rmdir("./18/file0" [pid 5062] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./18/file0") = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./18") = 0 [pid 5062] mkdir("./19", 0777./strace-static-x86_64: Process 5305 attached ) = 0 [pid 5305] chdir("./19" [ 89.860910][ T5303] NILFS (loop2): recovery complete [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5305] <... chdir resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5305] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5303] <... mount resumed>) = 0 [pid 5067] getdents64(3, [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5305] <... prctl resumed>) = 0 [pid 5303] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5305] setpgid(0, 0 [pid 5303] <... openat resumed>) = 3 [pid 5062] close(3 [pid 5305] <... setpgid resumed>) = 0 [pid 5303] chdir("./file0" [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] <... close resumed>) = 0 [pid 5305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5303] <... chdir resumed>) = 0 [pid 5067] close(3 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5305] <... openat resumed>) = 3 [pid 5303] ioctl(4, LOOP_CLR_FD [pid 5067] <... close resumed>) = 0 [pid 5305] write(3, "1000", 4 [pid 5303] <... ioctl resumed>) = 0 [pid 5067] rmdir("./18" [pid 5062] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5306 [pid 5305] <... write resumed>) = 4 [pid 5303] close(4 [pid 5305] close(3 [pid 5303] <... close resumed>) = 0 [pid 5305] <... close resumed>) = 0 [pid 5303] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5067] <... rmdir resumed>) = 0 [pid 5305] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5305] memfd_create("syzkaller", 0) = 3 [pid 5305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5306 attached ) = 0x7ff395729000 [pid 5067] mkdir("./19", 0777 [pid 5306] chdir("./19" [pid 5303] <... open resumed>) = 4 [pid 5306] <... chdir resumed>) = 0 [pid 5303] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5306] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5303] <... open resumed>) = 5 [pid 5067] <... mkdir resumed>) = 0 [pid 5306] <... prctl resumed>) = 0 [pid 5303] ftruncate(5, 33587195 [pid 5306] setpgid(0, 0 [pid 5303] <... ftruncate resumed>) = 0 [pid 5306] <... setpgid resumed>) = 0 [pid 5303] sendfile(4, 5, NULL, 281474978811909 [pid 5306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5306] <... openat resumed>) = 3 [pid 5067] <... openat resumed>) = 3 [pid 5306] write(3, "1000", 4 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5306] <... write resumed>) = 4 [pid 5306] close(3) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 89.897242][ T5304] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5067] close(3 [pid 5306] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... close resumed>) = 0 [pid 5306] <... symlink resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5306] memfd_create("syzkaller", 0) = 3 [pid 5306] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 ./strace-static-x86_64: Process 5307 attached [pid 5067] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5307 [pid 5307] chdir("./19") = 0 [pid 5305] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5307] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5307] setpgid(0, 0) = 0 [pid 5307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5307] write(3, "1000", 4) = 4 [pid 5307] close(3) = 0 [pid 5307] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5307] memfd_create("syzkaller", 0) = 3 [pid 5307] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5306] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5307] <... mmap resumed>) = 0x7ff395729000 [pid 5307] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5305] <... write resumed>) = 2097152 [pid 5305] munmap(0x7ff395729000, 2097152) = 0 [pid 5305] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5305] ioctl(4, LOOP_SET_FD, 3 [pid 5306] <... write resumed>) = 2097152 [pid 5306] munmap(0x7ff395729000, 2097152) = 0 [pid 5306] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5306] ioctl(4, LOOP_SET_FD, 3 [pid 5307] <... write resumed>) = 2097152 [pid 5305] <... ioctl resumed>) = 0 [pid 5305] close(3) = 0 [pid 5305] mkdir("./file0", 0777) = 0 [pid 5305] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5307] munmap(0x7ff395729000, 2097152 [pid 5306] <... ioctl resumed>) = 0 [pid 5307] <... munmap resumed>) = 0 [pid 5306] close(3) = 0 [ 90.119500][ T5305] loop1: detected capacity change from 0 to 4096 [ 90.142763][ T5306] loop0: detected capacity change from 0 to 4096 [pid 5306] mkdir("./file0", 0777 [pid 5307] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5306] <... mkdir resumed>) = 0 [pid 5306] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5307] <... openat resumed>) = 4 [pid 5307] ioctl(4, LOOP_SET_FD, 3 [pid 5299] <... sendfile resumed>) = 1048576 [pid 5299] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5307] <... ioctl resumed>) = 0 [pid 5299] exit_group(0) = ? [pid 5299] +++ exited with 0 +++ [pid 5307] close(3) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5299, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5307] mkdir("./file0", 0777 [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5307] <... mkdir resumed>) = 0 [pid 5065] <... restart_syscall resumed>) = 0 [ 90.184418][ T5305] NILFS (loop1): invalid segment: Checksum error in segment payload [ 90.197615][ T5307] loop5: detected capacity change from 0 to 4096 [ 90.213170][ T5305] NILFS (loop1): trying rollback from an earlier position [ 90.223420][ T5306] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5307] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5300] <... sendfile resumed>) = 1048576 [pid 5065] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5300] open(NULL, O_RDONLY [pid 5065] getdents64(3, [pid 5305] <... mount resumed>) = 0 [pid 5305] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5300] <... open resumed>) = -1 EFAULT (Bad address) [pid 5305] <... openat resumed>) = 3 [pid 5300] exit_group(0 [pid 5305] chdir("./file0" [pid 5300] <... exit_group resumed>) = ? [pid 5305] <... chdir resumed>) = 0 [pid 5300] +++ exited with 0 +++ [pid 5305] ioctl(4, LOOP_CLR_FD) = 0 [ 90.235673][ T5305] NILFS (loop1): recovery complete [ 90.241323][ T5306] NILFS (loop0): trying rollback from an earlier position [ 90.251271][ T5308] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.259932][ T5307] NILFS (loop5): invalid segment: Checksum error in segment payload [ 90.274427][ T5306] NILFS (loop0): recovery complete [pid 5305] close(4) = 0 [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5305] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5305] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5300, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- [pid 5065] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5305] ftruncate(5, 33587195) = 0 [pid 5305] sendfile(4, 5, NULL, 281474978811909 [pid 5306] <... mount resumed>) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... restart_syscall resumed>) = 0 [pid 5065] lstat("./18/binderfs", [pid 5306] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5306] chdir("./file0" [pid 5065] unlink("./18/binderfs" [pid 5306] <... chdir resumed>) = 0 [pid 5066] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... unlink resumed>) = 0 [pid 5306] ioctl(4, LOOP_CLR_FD [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5306] <... ioctl resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5306] close(4 [pid 5066] <... openat resumed>) = 3 [pid 5066] fstat(3, [pid 5306] <... close resumed>) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5306] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5306] <... open resumed>) = 4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5306] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5066] lstat("./19/binderfs", [pid 5306] <... open resumed>) = 5 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5306] ftruncate(5, 33587195 [pid 5066] unlink("./19/binderfs" [pid 5306] <... ftruncate resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5306] sendfile(4, 5, NULL, 281474978811909 [ 90.290941][ T5309] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.302174][ T5307] NILFS (loop5): trying rollback from an earlier position [ 90.363481][ T5307] NILFS (loop5): recovery complete [pid 5066] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5307] <... mount resumed>) = 0 [pid 5307] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5307] chdir("./file0") = 0 [pid 5307] ioctl(4, LOOP_CLR_FD) = 0 [pid 5307] close(4) = 0 [pid 5307] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5307] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5307] ftruncate(5, 33587195) = 0 [ 90.386662][ T5310] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5307] sendfile(4, 5, NULL, 281474978811909 [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./18/file0" [pid 5066] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./19/file0", [pid 5065] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./18" [pid 5066] <... openat resumed>) = 4 [pid 5065] <... rmdir resumed>) = 0 [pid 5065] mkdir("./19", 0777 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5065] <... mkdir resumed>) = 0 [pid 5066] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5066] close(4) = 0 [pid 5066] rmdir("./19/file0") = 0 [pid 5065] <... openat resumed>) = 3 [pid 5066] getdents64(3, [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] rmdir("./19" [pid 5065] close(3 [pid 5066] <... rmdir resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5066] mkdir("./20", 0777 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... mkdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5065] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5311 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5311 attached , child_tidptr=0x5555573f85d0) = 5312 [pid 5311] chdir("./19") = 0 [pid 5311] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5311] setpgid(0, 0) = 0 [pid 5311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 5312 attached [pid 5311] write(3, "1000", 4 [pid 5312] chdir("./20" [pid 5311] <... write resumed>) = 4 [pid 5312] <... chdir resumed>) = 0 [pid 5311] close(3 [pid 5312] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5311] <... close resumed>) = 0 [pid 5312] <... prctl resumed>) = 0 [pid 5311] symlink("/dev/binderfs", "./binderfs" [pid 5312] setpgid(0, 0 [pid 5311] <... symlink resumed>) = 0 [pid 5312] <... setpgid resumed>) = 0 [pid 5311] memfd_create("syzkaller", 0 [pid 5312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5311] <... memfd_create resumed>) = 3 [pid 5312] <... openat resumed>) = 3 [pid 5311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5312] write(3, "1000", 4 [pid 5311] <... mmap resumed>) = 0x7ff395729000 [pid 5312] <... write resumed>) = 4 [pid 5312] close(3) = 0 [pid 5312] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5312] memfd_create("syzkaller", 0) = 3 [pid 5312] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5311] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5312] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5311] <... write resumed>) = 2097152 [pid 5311] munmap(0x7ff395729000, 2097152) = 0 [pid 5311] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5311] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5312] <... write resumed>) = 2097152 [pid 5312] munmap(0x7ff395729000, 2097152 [pid 5311] close(3 [pid 5312] <... munmap resumed>) = 0 [pid 5311] <... close resumed>) = 0 [pid 5312] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5311] mkdir("./file0", 0777 [pid 5312] <... openat resumed>) = 4 [pid 5312] ioctl(4, LOOP_SET_FD, 3 [pid 5311] <... mkdir resumed>) = 0 [ 90.762072][ T5311] loop3: detected capacity change from 0 to 4096 [pid 5312] <... ioctl resumed>) = 0 [pid 5311] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5312] close(3) = 0 [pid 5312] mkdir("./file0", 0777) = 0 [pid 5303] <... sendfile resumed>) = 1048576 [pid 5312] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5303] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5303] exit_group(0) = ? [ 90.821451][ T5312] loop4: detected capacity change from 0 to 4096 [ 90.835867][ T5311] NILFS (loop3): invalid segment: Checksum error in segment payload [ 90.858474][ T5311] NILFS (loop3): trying rollback from an earlier position [pid 5303] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5303, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./19/binderfs") = 0 [ 90.898179][ T5312] NILFS (loop4): invalid segment: Checksum error in segment payload [ 90.920110][ T5311] NILFS (loop3): recovery complete [ 90.944233][ T5312] NILFS (loop4): trying rollback from an earlier position [pid 5064] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5311] <... mount resumed>) = 0 [pid 5311] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5311] chdir("./file0") = 0 [pid 5311] ioctl(4, LOOP_CLR_FD) = 0 [pid 5311] close(4) = 0 [pid 5311] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5311] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5311] ftruncate(5, 33587195) = 0 [ 91.000325][ T5313] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.025588][ T5312] NILFS (loop4): recovery complete [pid 5311] sendfile(4, 5, NULL, 281474978811909 [pid 5312] <... mount resumed>) = 0 [pid 5312] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5312] chdir("./file0") = 0 [pid 5312] ioctl(4, LOOP_CLR_FD) = 0 [pid 5312] close(4) = 0 [pid 5312] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5312] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5312] ftruncate(5, 33587195) = 0 [ 91.098384][ T5314] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5312] sendfile(4, 5, NULL, 281474978811909 [pid 5064] <... umount2 resumed>) = 0 [pid 5306] <... sendfile resumed>) = 1048576 [pid 5306] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5306] exit_group(0 [pid 5064] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5306] <... exit_group resumed>) = ? [pid 5306] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5306, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, [pid 5064] lstat("./19/file0", [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./19/binderfs", [pid 5064] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] <... openat resumed>) = 4 [pid 5062] unlink("./19/binderfs") = 0 [pid 5062] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./19/file0") = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./19") = 0 [pid 5064] mkdir("./20", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5315 ./strace-static-x86_64: Process 5315 attached [pid 5315] chdir("./20") = 0 [pid 5315] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5315] setpgid(0, 0) = 0 [pid 5315] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5315] write(3, "1000", 4 [pid 5305] <... sendfile resumed>) = 1048576 [pid 5315] <... write resumed>) = 4 [pid 5305] open(NULL, O_RDONLY [pid 5315] close(3 [pid 5305] <... open resumed>) = -1 EFAULT (Bad address) [pid 5315] <... close resumed>) = 0 [pid 5305] exit_group(0 [pid 5315] symlink("/dev/binderfs", "./binderfs" [pid 5305] <... exit_group resumed>) = ? [pid 5315] <... symlink resumed>) = 0 [pid 5305] +++ exited with 0 +++ [pid 5315] memfd_create("syzkaller", 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5305, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5315] <... memfd_create resumed>) = 3 [pid 5315] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5307] <... sendfile resumed>) = 1048576 [pid 5315] <... mmap resumed>) = 0x7ff395729000 [pid 5307] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5063] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5307] exit_group(0) = ? [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5307] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5307, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5063] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, [pid 5067] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] fstat(3, [pid 5063] lstat("./19/binderfs", [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] unlink("./19/binderfs" [pid 5067] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... unlink resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] lstat("./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./19/binderfs") = 0 [pid 5067] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5315] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] <... umount2 resumed>) = 0 [pid 5315] <... write resumed>) = 2097152 [pid 5315] munmap(0x7ff395729000, 2097152 [pid 5062] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5315] <... munmap resumed>) = 0 [pid 5315] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5315] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5315] <... ioctl resumed>) = 0 [pid 5315] close(3) = 0 [pid 5315] mkdir("./file0", 0777 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(4, [pid 5315] <... mkdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5315] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5062] close(4) = 0 [pid 5062] rmdir("./19/file0") = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [ 91.413264][ T5315] loop2: detected capacity change from 0 to 4096 [pid 5062] rmdir("./19") = 0 [pid 5062] mkdir("./20", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5316 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5316 attached ) = 4 [pid 5063] fstat(4, [pid 5316] chdir("./20") = 0 [pid 5316] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5316] setpgid(0, 0) = 0 [pid 5316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5316] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = 0 [pid 5063] getdents64(4, [pid 5316] write(3, "1000", 4) = 4 [pid 5316] close(3) = 0 [pid 5316] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5067] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 91.481197][ T5315] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5063] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] lstat("./19/file0", [pid 5316] memfd_create("syzkaller", 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, [pid 5316] <... memfd_create resumed>) = 3 [pid 5067] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5316] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5316] <... mmap resumed>) = 0x7ff395729000 [pid 5067] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] close(4 [pid 5067] <... openat resumed>) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] <... close resumed>) = 0 [pid 5067] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5063] rmdir("./19/file0" [pid 5067] rmdir("./19/file0") = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5063] getdents64(3, [pid 5067] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] rmdir("./19" [pid 5063] close(3 [pid 5067] <... rmdir resumed>) = 0 [pid 5067] mkdir("./20", 0777 [pid 5063] <... close resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5063] rmdir("./19" [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] <... rmdir resumed>) = 0 [pid 5067] close(3 [pid 5063] mkdir("./20", 0777 [pid 5067] <... close resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5317 [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3./strace-static-x86_64: Process 5317 attached ) = 0 [ 91.537670][ T5315] NILFS (loop2): trying rollback from an earlier position [pid 5317] chdir("./20" [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5317] <... chdir resumed>) = 0 [pid 5316] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5317] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5317] setpgid(0, 0) = 0 [pid 5317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5317] write(3, "1000", 4) = 4 [pid 5317] close(3) = 0 [pid 5317] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5317] memfd_create("syzkaller", 0) = 3 [pid 5317] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5063] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5318 ./strace-static-x86_64: Process 5318 attached [pid 5318] chdir("./20") = 0 [pid 5318] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5317] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5318] <... prctl resumed>) = 0 [pid 5318] setpgid(0, 0) = 0 [pid 5318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5318] write(3, "1000", 4) = 4 [ 91.609033][ T5315] NILFS (loop2): recovery complete [pid 5318] close(3) = 0 [pid 5318] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5318] memfd_create("syzkaller", 0) = 3 [pid 5318] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5315] <... mount resumed>) = 0 [pid 5315] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5315] chdir("./file0") = 0 [pid 5315] ioctl(4, LOOP_CLR_FD) = 0 [pid 5315] close(4) = 0 [pid 5315] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5315] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5315] ftruncate(5, 33587195) = 0 [pid 5315] sendfile(4, 5, NULL, 281474978811909 [pid 5318] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5316] <... write resumed>) = 2097152 [pid 5316] munmap(0x7ff395729000, 2097152) = 0 [pid 5316] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5316] ioctl(4, LOOP_SET_FD, 3 [pid 5318] <... write resumed>) = 2097152 [ 91.681252][ T5319] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.712512][ T5316] loop0: detected capacity change from 0 to 4096 [pid 5318] munmap(0x7ff395729000, 2097152) = 0 [pid 5318] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5317] <... write resumed>) = 2097152 [pid 5316] <... ioctl resumed>) = 0 [pid 5318] ioctl(4, LOOP_SET_FD, 3 [pid 5316] close(3) = 0 [pid 5316] mkdir("./file0", 0777) = 0 [pid 5316] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5317] munmap(0x7ff395729000, 2097152) = 0 [pid 5317] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5317] ioctl(4, LOOP_SET_FD, 3 [pid 5318] <... ioctl resumed>) = 0 [pid 5318] close(3) = 0 [pid 5318] mkdir("./file0", 0777) = 0 [ 91.775885][ T5318] loop1: detected capacity change from 0 to 4096 [ 91.806108][ T5317] loop5: detected capacity change from 0 to 4096 [pid 5318] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5317] <... ioctl resumed>) = 0 [pid 5317] close(3) = 0 [pid 5317] mkdir("./file0", 0777) = 0 [ 91.821654][ T5316] NILFS (loop0): invalid segment: Checksum error in segment payload [ 91.827399][ T5318] NILFS (loop1): invalid segment: Checksum error in segment payload [ 91.829821][ T5316] NILFS (loop0): trying rollback from an earlier position [ 91.838400][ T5318] NILFS (loop1): trying rollback from an earlier position [pid 5317] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5316] <... mount resumed>) = 0 [pid 5316] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5316] chdir("./file0") = 0 [ 91.875792][ T5316] NILFS (loop0): recovery complete [ 91.876404][ T5317] NILFS (loop5): invalid segment: Checksum error in segment payload [ 91.892770][ T5318] NILFS (loop1): recovery complete [ 91.899323][ T5320] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5316] ioctl(4, LOOP_CLR_FD) = 0 [pid 5316] close(4 [pid 5311] <... sendfile resumed>) = 1048576 [pid 5311] open(NULL, O_RDONLY [pid 5316] <... close resumed>) = 0 [pid 5311] <... open resumed>) = -1 EFAULT (Bad address) [pid 5311] exit_group(0) = ? [pid 5311] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5311, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5316] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5065] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5316] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5318] <... mount resumed>) = 0 [pid 5316] <... open resumed>) = 5 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5318] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5316] ftruncate(5, 33587195 [pid 5065] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5318] <... openat resumed>) = 3 [pid 5316] <... ftruncate resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5318] chdir("./file0" [ 91.920070][ T5321] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.942923][ T5317] NILFS (loop5): trying rollback from an earlier position [pid 5316] sendfile(4, 5, NULL, 281474978811909 [pid 5065] fstat(3, [pid 5318] <... chdir resumed>) = 0 [pid 5318] ioctl(4, LOOP_CLR_FD [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5318] <... ioctl resumed>) = 0 [pid 5065] getdents64(3, [pid 5318] close(4 [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5318] <... close resumed>) = 0 [pid 5318] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5065] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5318] <... open resumed>) = 4 [pid 5065] lstat("./19/binderfs", [pid 5318] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./19/binderfs" [pid 5318] <... open resumed>) = 5 [pid 5318] ftruncate(5, 33587195 [pid 5065] <... unlink resumed>) = 0 [pid 5318] <... ftruncate resumed>) = 0 [pid 5065] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5318] sendfile(4, 5, NULL, 281474978811909 [pid 5317] <... mount resumed>) = 0 [ 91.983171][ T5317] NILFS (loop5): recovery complete [pid 5317] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5317] chdir("./file0") = 0 [pid 5317] ioctl(4, LOOP_CLR_FD) = 0 [pid 5317] close(4 [pid 5312] <... sendfile resumed>) = 1048576 [pid 5312] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5312] exit_group(0) = ? [pid 5317] <... close resumed>) = 0 [pid 5312] +++ exited with 0 +++ [pid 5317] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5312, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [ 92.021701][ T5322] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5066] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5317] <... open resumed>) = 4 [pid 5317] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5066] unlink("./20/binderfs" [pid 5317] <... open resumed>) = 5 [pid 5066] <... unlink resumed>) = 0 [pid 5317] ftruncate(5, 33587195 [pid 5066] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5317] <... ftruncate resumed>) = 0 [pid 5317] sendfile(4, 5, NULL, 281474978811909 [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./19/file0") = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./19") = 0 [pid 5065] mkdir("./20", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5066] <... umount2 resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] close(3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... close resumed>) = 0 [pid 5066] lstat("./20/file0", [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5323 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./20/file0") = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./20") = 0 [pid 5066] mkdir("./21", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3./strace-static-x86_64: Process 5323 attached ) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5323] chdir("./20" [pid 5066] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5324 [pid 5323] <... chdir resumed>) = 0 [pid 5323] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5324 attached ) = 0 [pid 5323] setpgid(0, 0) = 0 [pid 5324] chdir("./21") = 0 [pid 5324] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5324] setpgid(0, 0) = 0 [pid 5324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5324] write(3, "1000", 4) = 4 [pid 5323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5324] close(3 [pid 5323] <... openat resumed>) = 3 [pid 5324] <... close resumed>) = 0 [pid 5323] write(3, "1000", 4 [pid 5324] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5323] <... write resumed>) = 4 [pid 5324] memfd_create("syzkaller", 0 [pid 5323] close(3 [pid 5324] <... memfd_create resumed>) = 3 [pid 5323] <... close resumed>) = 0 [pid 5324] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5323] symlink("/dev/binderfs", "./binderfs" [pid 5324] <... mmap resumed>) = 0x7ff395729000 [pid 5324] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5323] <... symlink resumed>) = 0 [pid 5323] memfd_create("syzkaller", 0) = 3 [pid 5323] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5323] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5324] <... write resumed>) = 2097152 [pid 5324] munmap(0x7ff395729000, 2097152) = 0 [pid 5324] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5324] ioctl(4, LOOP_SET_FD, 3 [pid 5323] <... write resumed>) = 2097152 [pid 5323] munmap(0x7ff395729000, 2097152) = 0 [pid 5323] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5323] ioctl(4, LOOP_SET_FD, 3 [pid 5324] <... ioctl resumed>) = 0 [pid 5324] close(3) = 0 [pid 5324] mkdir("./file0", 0777) = 0 [pid 5324] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5315] <... sendfile resumed>) = 1048576 [pid 5315] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5315] exit_group(0 [pid 5323] <... ioctl resumed>) = 0 [pid 5315] <... exit_group resumed>) = ? [pid 5323] close(3) = 0 [ 92.516653][ T5324] loop4: detected capacity change from 0 to 4096 [ 92.542835][ T5323] loop3: detected capacity change from 0 to 4096 [pid 5323] mkdir("./file0", 0777) = 0 [pid 5315] +++ exited with 0 +++ [pid 5323] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5315, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5064] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./20/binderfs") = 0 [ 92.584441][ T5324] NILFS (loop4): invalid segment: Checksum error in segment payload [ 92.615688][ T5323] NILFS (loop3): invalid segment: Checksum error in segment payload [ 92.627393][ T5324] NILFS (loop4): trying rollback from an earlier position [ 92.636043][ T5323] NILFS (loop3): trying rollback from an earlier position [ 92.684695][ T5324] NILFS (loop4): recovery complete [pid 5064] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5324] <... mount resumed>) = 0 [pid 5324] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5324] chdir("./file0") = 0 [pid 5324] ioctl(4, LOOP_CLR_FD) = 0 [pid 5324] close(4) = 0 [pid 5324] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5324] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5324] ftruncate(5, 33587195) = 0 [pid 5324] sendfile(4, 5, NULL, 281474978811909 [pid 5323] <... mount resumed>) = 0 [pid 5323] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5064] <... umount2 resumed>) = 0 [pid 5323] chdir("./file0") = 0 [pid 5064] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5323] ioctl(4, LOOP_CLR_FD) = 0 [pid 5323] close(4) = 0 [pid 5323] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5323] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [ 92.722983][ T5323] NILFS (loop3): recovery complete [ 92.732519][ T5326] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.744842][ T5325] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5323] ftruncate(5, 33587195) = 0 [pid 5323] sendfile(4, 5, NULL, 281474978811909 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./20/file0") = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./20") = 0 [pid 5064] mkdir("./21", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3 [pid 5318] <... sendfile resumed>) = 1048576 [pid 5064] <... close resumed>) = 0 [pid 5318] open(NULL, O_RDONLY [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5318] <... open resumed>) = -1 EFAULT (Bad address) [pid 5318] exit_group(0) = ? [pid 5316] <... sendfile resumed>) = 1048576 [pid 5064] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5327 [pid 5316] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5316] exit_group(0) = ? ./strace-static-x86_64: Process 5327 attached [pid 5318] +++ exited with 0 +++ [pid 5316] +++ exited with 0 +++ [pid 5327] chdir("./21" [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5318, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5327] <... chdir resumed>) = 0 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5316, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- [pid 5327] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... restart_syscall resumed>) = 0 [pid 5062] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5327] <... prctl resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5327] setpgid(0, 0 [pid 5062] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5327] <... setpgid resumed>) = 0 [pid 5063] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... openat resumed>) = 3 [pid 5327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] fstat(3, [pid 5327] <... openat resumed>) = 3 [pid 5063] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5327] write(3, "1000", 4 [pid 5063] <... openat resumed>) = 3 [pid 5062] getdents64(3, [pid 5327] <... write resumed>) = 4 [pid 5063] fstat(3, [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5327] close(3 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5327] <... close resumed>) = 0 [pid 5063] getdents64(3, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5327] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] lstat("./20/binderfs", [pid 5327] <... symlink resumed>) = 0 [pid 5063] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5327] memfd_create("syzkaller", 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] unlink("./20/binderfs" [pid 5327] <... memfd_create resumed>) = 3 [pid 5063] lstat("./20/binderfs", [pid 5062] <... unlink resumed>) = 0 [pid 5327] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5327] <... mmap resumed>) = 0x7ff395729000 [pid 5063] unlink("./20/binderfs") = 0 [pid 5063] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5327] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5317] <... sendfile resumed>) = 1048576 [pid 5317] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5317] exit_group(0) = ? [pid 5317] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5317, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5067] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./20/binderfs") = 0 [pid 5067] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5327] <... write resumed>) = 2097152 [pid 5327] munmap(0x7ff395729000, 2097152 [pid 5063] <... umount2 resumed>) = 0 [pid 5327] <... munmap resumed>) = 0 [pid 5327] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5327] ioctl(4, LOOP_SET_FD, 3 [pid 5063] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5327] <... ioctl resumed>) = 0 [pid 5063] lstat("./20/file0", [pid 5062] <... umount2 resumed>) = 0 [pid 5327] close(3 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5327] <... close resumed>) = 0 [pid 5063] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5327] mkdir("./file0", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5327] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] lstat("./20/file0", [pid 5327] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5063] <... openat resumed>) = 4 [pid 5062] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] fstat(4, [pid 5062] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(4, [pid 5062] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] <... openat resumed>) = 4 [pid 5063] getdents64(4, [ 93.155293][ T5327] loop2: detected capacity change from 0 to 4096 [pid 5062] fstat(4, [pid 5063] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] close(4 [pid 5062] getdents64(4, [pid 5063] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] rmdir("./20/file0" [pid 5062] getdents64(4, [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(3, [pid 5062] close(4 [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] <... close resumed>) = 0 [pid 5063] close(3 [pid 5062] rmdir("./20/file0" [pid 5063] <... close resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5063] rmdir("./20" [pid 5062] getdents64(3, [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] mkdir("./21", 0777 [pid 5062] close(3 [pid 5063] <... mkdir resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] rmdir("./20" [pid 5063] <... openat resumed>) = 3 [pid 5062] <... rmdir resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] mkdir("./21", 0777 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5062] <... mkdir resumed>) = 0 [pid 5063] close(3 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5328 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5329 ./strace-static-x86_64: Process 5329 attached ./strace-static-x86_64: Process 5328 attached [pid 5328] chdir("./21") = 0 [pid 5328] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5328] setpgid(0, 0) = 0 [pid 5328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5328] write(3, "1000", 4) = 4 [pid 5328] close(3) = 0 [pid 5328] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5328] memfd_create("syzkaller", 0 [pid 5329] chdir("./21" [pid 5328] <... memfd_create resumed>) = 3 [pid 5328] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5329] <... chdir resumed>) = 0 [pid 5329] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 93.196321][ T5327] NILFS (loop2): invalid segment: Checksum error in segment payload [ 93.218314][ T5327] NILFS (loop2): trying rollback from an earlier position [pid 5329] setpgid(0, 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5329] <... setpgid resumed>) = 0 [pid 5329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5329] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5329] write(3, "1000", 4 [pid 5067] lstat("./20/file0", [pid 5329] <... write resumed>) = 4 [pid 5329] close(3 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5329] <... close resumed>) = 0 [pid 5067] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5329] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5329] <... symlink resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5329] memfd_create("syzkaller", 0) = 3 [pid 5328] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] <... openat resumed>) = 4 [pid 5329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] fstat(4, [pid 5329] <... mmap resumed>) = 0x7ff395729000 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./20/file0") = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./20") = 0 [pid 5067] mkdir("./21", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5327] <... mount resumed>) = 0 [pid 5327] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5327] <... openat resumed>) = 3 [pid 5327] chdir("./file0") = 0 [pid 5327] ioctl(4, LOOP_CLR_FD) = 0 [ 93.311087][ T5327] NILFS (loop2): recovery complete ./strace-static-x86_64: Process 5331 attached [pid 5329] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5327] close(4 [pid 5067] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5331 [pid 5331] chdir("./21" [pid 5327] <... close resumed>) = 0 [pid 5327] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5331] <... chdir resumed>) = 0 [pid 5327] <... open resumed>) = 4 [pid 5331] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5327] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5331] <... prctl resumed>) = 0 [pid 5327] ftruncate(5, 33587195 [pid 5331] setpgid(0, 0 [pid 5327] <... ftruncate resumed>) = 0 [pid 5331] <... setpgid resumed>) = 0 [pid 5327] sendfile(4, 5, NULL, 281474978811909 [pid 5331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5331] write(3, "1000", 4) = 4 [ 93.339486][ T5330] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5331] close(3) = 0 [pid 5331] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5331] memfd_create("syzkaller", 0) = 3 [pid 5331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5328] <... write resumed>) = 2097152 [pid 5328] munmap(0x7ff395729000, 2097152) = 0 [pid 5328] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5328] ioctl(4, LOOP_SET_FD, 3 [pid 5331] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5329] <... write resumed>) = 2097152 [pid 5329] munmap(0x7ff395729000, 2097152) = 0 [pid 5328] <... ioctl resumed>) = 0 [pid 5328] close(3) = 0 [pid 5328] mkdir("./file0", 0777 [pid 5329] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5328] <... mkdir resumed>) = 0 [pid 5329] <... openat resumed>) = 4 [pid 5328] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [ 93.443265][ T5328] loop1: detected capacity change from 0 to 4096 [ 93.480863][ T5329] loop0: detected capacity change from 0 to 4096 [pid 5329] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5329] close(3) = 0 [pid 5329] mkdir("./file0", 0777) = 0 [pid 5331] <... write resumed>) = 2097152 [pid 5329] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [ 93.508624][ T5328] NILFS (loop1): invalid segment: Checksum error in segment payload [ 93.546840][ T5329] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5331] munmap(0x7ff395729000, 2097152) = 0 [pid 5331] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5331] ioctl(4, LOOP_SET_FD, 3 [pid 5324] <... sendfile resumed>) = 1048576 [pid 5324] open(NULL, O_RDONLY [pid 5331] <... ioctl resumed>) = 0 [pid 5324] <... open resumed>) = -1 EFAULT (Bad address) [pid 5331] close(3 [pid 5324] exit_group(0 [pid 5331] <... close resumed>) = 0 [pid 5324] <... exit_group resumed>) = ? [ 93.558475][ T5329] NILFS (loop0): trying rollback from an earlier position [ 93.563384][ T5328] NILFS (loop1): trying rollback from an earlier position [ 93.576136][ T5329] NILFS (loop0): recovery complete [ 93.584551][ T5331] loop5: detected capacity change from 0 to 4096 [pid 5331] mkdir("./file0", 0777 [pid 5324] +++ exited with 0 +++ [pid 5329] <... mount resumed>) = 0 [pid 5329] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5331] <... mkdir resumed>) = 0 [pid 5329] <... openat resumed>) = 3 [pid 5329] chdir("./file0") = 0 [pid 5329] ioctl(4, LOOP_CLR_FD) = 0 [pid 5329] close(4) = 0 [pid 5329] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5329] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5329] ftruncate(5, 33587195) = 0 [pid 5329] sendfile(4, 5, NULL, 281474978811909 [pid 5331] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5324, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5066] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 93.605810][ T5332] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.633122][ T5328] NILFS (loop1): recovery complete [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./21/binderfs") = 0 [pid 5066] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5328] <... mount resumed>) = 0 [pid 5328] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5323] <... sendfile resumed>) = 1048576 [pid 5323] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5323] exit_group(0) = ? [pid 5323] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5323, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5328] chdir("./file0" [pid 5065] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5328] <... chdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5328] ioctl(4, LOOP_CLR_FD [pid 5065] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5328] <... ioctl resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [ 93.660110][ T5333] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.661171][ T5331] NILFS (loop5): invalid segment: Checksum error in segment payload [ 93.695695][ T5331] NILFS (loop5): trying rollback from an earlier position [pid 5328] close(4 [pid 5065] fstat(3, [pid 5328] <... close resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, [pid 5328] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5328] <... open resumed>) = 4 [pid 5065] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5328] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5328] <... open resumed>) = 5 [pid 5065] lstat("./20/binderfs", [pid 5328] ftruncate(5, 33587195 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5328] <... ftruncate resumed>) = 0 [pid 5065] unlink("./20/binderfs" [pid 5328] sendfile(4, 5, NULL, 281474978811909 [pid 5065] <... unlink resumed>) = 0 [ 93.714813][ T5331] NILFS (loop5): recovery complete [pid 5065] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5331] <... mount resumed>) = 0 [pid 5331] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5331] chdir("./file0") = 0 [pid 5331] ioctl(4, LOOP_CLR_FD) = 0 [ 93.756576][ T5334] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5331] close(4) = 0 [pid 5331] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5331] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5331] ftruncate(5, 33587195) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5331] sendfile(4, 5, NULL, 281474978811909 [pid 5066] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] close(4 [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./21/file0") = 0 [pid 5066] getdents64(3, [pid 5065] <... openat resumed>) = 4 [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./21" [pid 5065] fstat(4, [pid 5066] <... rmdir resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] mkdir("./22", 0777 [pid 5065] getdents64(4, [pid 5066] <... mkdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] getdents64(4, [pid 5066] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5065] close(4 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] <... close resumed>) = 0 [pid 5066] close(3 [pid 5065] rmdir("./20/file0" [pid 5066] <... close resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 5066] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5335 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./20") = 0 [pid 5065] mkdir("./21", 0777./strace-static-x86_64: Process 5335 attached ) = 0 [pid 5335] chdir("./22" [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5335] <... chdir resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5335] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5336 [pid 5335] setpgid(0, 0./strace-static-x86_64: Process 5336 attached ) = 0 [pid 5336] chdir("./21" [pid 5335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5336] <... chdir resumed>) = 0 [pid 5336] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5335] <... openat resumed>) = 3 [pid 5336] <... prctl resumed>) = 0 [pid 5335] write(3, "1000", 4 [pid 5336] setpgid(0, 0 [pid 5335] <... write resumed>) = 4 [pid 5336] <... setpgid resumed>) = 0 [pid 5335] close(3 [pid 5336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5335] <... close resumed>) = 0 [pid 5336] <... openat resumed>) = 3 [pid 5335] symlink("/dev/binderfs", "./binderfs" [pid 5336] write(3, "1000", 4 [pid 5335] <... symlink resumed>) = 0 [pid 5336] <... write resumed>) = 4 [pid 5335] memfd_create("syzkaller", 0 [pid 5336] close(3 [pid 5335] <... memfd_create resumed>) = 3 [pid 5336] <... close resumed>) = 0 [pid 5335] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5336] symlink("/dev/binderfs", "./binderfs" [pid 5335] <... mmap resumed>) = 0x7ff395729000 [pid 5336] <... symlink resumed>) = 0 [pid 5336] memfd_create("syzkaller", 0) = 3 [pid 5336] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5335] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5336] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5335] <... write resumed>) = 2097152 [pid 5335] munmap(0x7ff395729000, 2097152) = 0 [pid 5335] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5335] ioctl(4, LOOP_SET_FD, 3 [pid 5336] <... write resumed>) = 2097152 [pid 5336] munmap(0x7ff395729000, 2097152) = 0 [pid 5336] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5335] <... ioctl resumed>) = 0 [pid 5335] close(3) = 0 [pid 5335] mkdir("./file0", 0777) = 0 [pid 5335] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5336] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5336] close(3) = 0 [ 94.222200][ T5335] loop4: detected capacity change from 0 to 4096 [ 94.257880][ T5336] loop3: detected capacity change from 0 to 4096 [pid 5336] mkdir("./file0", 0777) = 0 [ 94.284397][ T5335] NILFS (loop4): invalid segment: Checksum error in segment payload [ 94.304284][ T5335] NILFS (loop4): trying rollback from an earlier position [pid 5336] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5335] <... mount resumed>) = 0 [pid 5335] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5335] chdir("./file0") = 0 [pid 5327] <... sendfile resumed>) = 1048576 [pid 5335] ioctl(4, LOOP_CLR_FD [pid 5327] open(NULL, O_RDONLY [pid 5335] <... ioctl resumed>) = 0 [pid 5335] close(4 [pid 5327] <... open resumed>) = -1 EFAULT (Bad address) [ 94.331656][ T5335] NILFS (loop4): recovery complete [ 94.333979][ T5336] NILFS (loop3): invalid segment: Checksum error in segment payload [ 94.345725][ T5336] NILFS (loop3): trying rollback from an earlier position [ 94.354142][ T5337] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5335] <... close resumed>) = 0 [pid 5327] exit_group(0 [pid 5335] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5327] <... exit_group resumed>) = ? [pid 5335] <... open resumed>) = 4 [pid 5327] +++ exited with 0 +++ [pid 5335] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5327, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5335] ftruncate(5, 33587195 [pid 5064] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5335] <... ftruncate resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5335] sendfile(4, 5, NULL, 281474978811909 [pid 5064] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./21/binderfs") = 0 [ 94.403334][ T5336] NILFS (loop3): recovery complete [pid 5064] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5336] <... mount resumed>) = 0 [pid 5336] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5336] chdir("./file0") = 0 [pid 5336] ioctl(4, LOOP_CLR_FD) = 0 [pid 5336] close(4) = 0 [pid 5336] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5336] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5336] ftruncate(5, 33587195) = 0 [pid 5336] sendfile(4, 5, NULL, 281474978811909 [pid 5328] <... sendfile resumed>) = 1048576 [pid 5328] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [ 94.466754][ T5338] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5328] exit_group(0) = ? [pid 5328] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5328, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5063] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./21/binderfs") = 0 [pid 5063] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5329] <... sendfile resumed>) = 1048576 [pid 5329] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5329] exit_group(0) = ? [pid 5329] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5329, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5062] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] unlink("./21/binderfs") = 0 [pid 5062] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./21/file0") = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./21") = 0 [pid 5063] mkdir("./22", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5339 ./strace-static-x86_64: Process 5339 attached [pid 5339] chdir("./22") = 0 [pid 5339] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5339] setpgid(0, 0) = 0 [pid 5064] close(4 [pid 5339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] <... close resumed>) = 0 [pid 5339] <... openat resumed>) = 3 [pid 5064] rmdir("./21/file0" [pid 5339] write(3, "1000", 4) = 4 [pid 5339] close(3) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5339] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5339] memfd_create("syzkaller", 0 [pid 5064] getdents64(3, [pid 5339] <... memfd_create resumed>) = 3 [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5339] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5064] close(3) = 0 [pid 5064] rmdir("./21" [pid 5331] <... sendfile resumed>) = 1048576 [pid 5331] open(NULL, O_RDONLY [pid 5064] <... rmdir resumed>) = 0 [pid 5339] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5331] <... open resumed>) = -1 EFAULT (Bad address) [pid 5064] mkdir("./22", 0777 [pid 5331] exit_group(0 [pid 5064] <... mkdir resumed>) = 0 [pid 5331] <... exit_group resumed>) = ? [pid 5331] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5331, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3 [pid 5067] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./21/binderfs") = 0 [pid 5067] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5340 ./strace-static-x86_64: Process 5340 attached [pid 5062] <... umount2 resumed>) = 0 [pid 5340] chdir("./22") = 0 [pid 5340] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5340] setpgid(0, 0) = 0 [pid 5340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5340] write(3, "1000", 4) = 4 [pid 5062] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5340] close(3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5340] <... close resumed>) = 0 [pid 5062] lstat("./21/file0", [pid 5340] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5340] <... symlink resumed>) = 0 [pid 5062] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5340] memfd_create("syzkaller", 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5340] <... memfd_create resumed>) = 3 [pid 5062] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5340] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... openat resumed>) = 4 [pid 5340] <... mmap resumed>) = 0x7ff395729000 [pid 5062] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./21/file0" [pid 5339] <... write resumed>) = 2097152 [pid 5339] munmap(0x7ff395729000, 2097152 [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./21" [pid 5339] <... munmap resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5339] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] mkdir("./22", 0777 [pid 5339] <... openat resumed>) = 4 [pid 5062] <... mkdir resumed>) = 0 [pid 5339] ioctl(4, LOOP_SET_FD, 3 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5062] close(3) = 0 [pid 5340] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5339] <... ioctl resumed>) = 0 [pid 5339] close(3) = 0 [pid 5339] mkdir("./file0", 0777) = 0 [pid 5339] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5341 ./strace-static-x86_64: Process 5341 attached [ 94.889572][ T5339] loop1: detected capacity change from 0 to 4096 [pid 5341] chdir("./22") = 0 [pid 5341] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5341] setpgid(0, 0) = 0 [pid 5341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5341] write(3, "1000", 4) = 4 [pid 5341] close(3) = 0 [pid 5341] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5341] memfd_create("syzkaller", 0) = 3 [pid 5341] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./21/file0", [pid 5341] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./21/file0" [pid 5340] <... write resumed>) = 2097152 [pid 5067] <... rmdir resumed>) = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5341] <... write resumed>) = 2097152 [pid 5067] close(3 [pid 5340] munmap(0x7ff395729000, 2097152 [pid 5067] <... close resumed>) = 0 [pid 5341] munmap(0x7ff395729000, 2097152 [pid 5067] rmdir("./21" [pid 5340] <... munmap resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5340] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5067] mkdir("./22", 0777 [pid 5341] <... munmap resumed>) = 0 [ 94.980797][ T5339] NILFS (loop1): invalid segment: Checksum error in segment payload [ 95.009040][ T5339] NILFS (loop1): trying rollback from an earlier position [pid 5340] <... openat resumed>) = 4 [pid 5067] <... mkdir resumed>) = 0 [pid 5341] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5340] ioctl(4, LOOP_SET_FD, 3 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5341] <... openat resumed>) = 4 [pid 5067] <... openat resumed>) = 3 [pid 5341] ioctl(4, LOOP_SET_FD, 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3 [pid 5340] <... ioctl resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5340] close(3 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5340] <... close resumed>) = 0 [pid 5340] mkdir("./file0", 0777 [pid 5067] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5342 [pid 5341] <... ioctl resumed>) = 0 [pid 5340] <... mkdir resumed>) = 0 [pid 5341] close(3 [pid 5340] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5341] <... close resumed>) = 0 ./strace-static-x86_64: Process 5342 attached [pid 5341] mkdir("./file0", 0777) = 0 [pid 5342] chdir("./22" [ 95.056071][ T5339] NILFS (loop1): recovery complete [ 95.063937][ T5340] loop2: detected capacity change from 0 to 4096 [ 95.065845][ T5341] loop0: detected capacity change from 0 to 4096 [pid 5341] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5342] <... chdir resumed>) = 0 [pid 5342] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5342] setpgid(0, 0) = 0 [pid 5342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5342] write(3, "1000", 4) = 4 [pid 5339] <... mount resumed>) = 0 [pid 5342] close(3 [pid 5339] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5342] <... close resumed>) = 0 [pid 5339] <... openat resumed>) = 3 [pid 5342] symlink("/dev/binderfs", "./binderfs" [pid 5339] chdir("./file0" [pid 5342] <... symlink resumed>) = 0 [pid 5339] <... chdir resumed>) = 0 [pid 5342] memfd_create("syzkaller", 0 [pid 5339] ioctl(4, LOOP_CLR_FD [pid 5342] <... memfd_create resumed>) = 3 [pid 5339] <... ioctl resumed>) = 0 [pid 5342] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5339] close(4 [pid 5342] <... mmap resumed>) = 0x7ff395729000 [pid 5339] <... close resumed>) = 0 [pid 5339] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5339] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5339] ftruncate(5, 33587195) = 0 [ 95.116044][ T5341] NILFS (loop0): invalid segment: Checksum error in segment payload [ 95.129100][ T5343] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.145738][ T5340] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5339] sendfile(4, 5, NULL, 281474978811909 [pid 5342] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 95.189188][ T5340] NILFS (loop2): trying rollback from an earlier position [ 95.206787][ T5341] NILFS (loop0): trying rollback from an earlier position [pid 5335] <... sendfile resumed>) = 1048576 [pid 5335] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5335] exit_group(0) = ? [pid 5335] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5335, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5066] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./22/binderfs") = 0 [pid 5066] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5342] <... write resumed>) = 2097152 [pid 5342] munmap(0x7ff395729000, 2097152) = 0 [pid 5342] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 95.257892][ T5340] NILFS (loop2): recovery complete [ 95.278116][ T5341] NILFS (loop0): recovery complete [pid 5342] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5342] close(3) = 0 [pid 5342] mkdir("./file0", 0777) = 0 [pid 5342] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5341] <... mount resumed>) = 0 [pid 5340] <... mount resumed>) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5341] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5340] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5341] <... openat resumed>) = 3 [pid 5340] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5340] chdir("./file0" [pid 5066] lstat("./22/file0", [pid 5341] chdir("./file0" [pid 5340] <... chdir resumed>) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5341] <... chdir resumed>) = 0 [pid 5340] ioctl(4, LOOP_CLR_FD [pid 5066] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5341] ioctl(4, LOOP_CLR_FD [pid 5340] <... ioctl resumed>) = 0 [pid 5341] <... ioctl resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5341] close(4 [pid 5340] close(4 [pid 5066] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5341] <... close resumed>) = 0 [pid 5340] <... close resumed>) = 0 [pid 5341] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5340] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5066] <... openat resumed>) = 4 [ 95.312343][ T5342] loop5: detected capacity change from 0 to 4096 [ 95.319594][ T5345] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.340393][ T5344] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5341] <... open resumed>) = 4 [pid 5340] <... open resumed>) = 4 [pid 5066] fstat(4, [pid 5341] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5340] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5341] <... open resumed>) = 5 [pid 5340] <... open resumed>) = 5 [pid 5066] getdents64(4, [pid 5340] ftruncate(5, 33587195 [pid 5341] ftruncate(5, 33587195 [pid 5066] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5341] <... ftruncate resumed>) = 0 [pid 5340] <... ftruncate resumed>) = 0 [pid 5066] getdents64(4, [pid 5341] sendfile(4, 5, NULL, 281474978811909 [pid 5340] sendfile(4, 5, NULL, 281474978811909 [pid 5066] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./22/file0") = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3 [pid 5336] <... sendfile resumed>) = 1048576 [pid 5066] <... close resumed>) = 0 [pid 5336] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5066] rmdir("./22" [pid 5336] exit_group(0) = ? [pid 5066] <... rmdir resumed>) = 0 [pid 5336] +++ exited with 0 +++ [ 95.369804][ T5342] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5066] mkdir("./23", 0777) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5336, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 95.429896][ T5342] NILFS (loop5): trying rollback from an earlier position [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5346 [pid 5065] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./21/binderfs"./strace-static-x86_64: Process 5346 attached ) = 0 [pid 5346] chdir("./23" [pid 5065] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5346] <... chdir resumed>) = 0 [pid 5346] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5346] setpgid(0, 0) = 0 [pid 5346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5346] write(3, "1000", 4) = 4 [pid 5346] close(3) = 0 [pid 5346] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5346] memfd_create("syzkaller", 0) = 3 [pid 5346] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [ 95.472029][ T5342] NILFS (loop5): recovery complete [pid 5342] <... mount resumed>) = 0 [pid 5346] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5342] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5342] chdir("./file0") = 0 [pid 5342] ioctl(4, LOOP_CLR_FD) = 0 [pid 5342] close(4) = 0 [pid 5342] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [ 95.515832][ T5347] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5342] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5342] ftruncate(5, 33587195) = 0 [pid 5342] sendfile(4, 5, NULL, 281474978811909 [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./21/file0" [pid 5346] <... write resumed>) = 2097152 [pid 5065] <... rmdir resumed>) = 0 [pid 5346] munmap(0x7ff395729000, 2097152 [pid 5065] getdents64(3, [pid 5346] <... munmap resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5346] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5065] close(3 [pid 5346] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./21") = 0 [pid 5065] mkdir("./22", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5346] <... ioctl resumed>) = 0 [pid 5346] close(3) = 0 [pid 5346] mkdir("./file0", 0777 [pid 5065] close(3 [pid 5346] <... mkdir resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5346] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5065] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5348 [ 95.692687][ T5346] loop4: detected capacity change from 0 to 4096 ./strace-static-x86_64: Process 5348 attached [pid 5348] chdir("./22") = 0 [pid 5348] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5348] setpgid(0, 0) = 0 [pid 5348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5348] write(3, "1000", 4) = 4 [pid 5348] close(3) = 0 [pid 5348] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5348] memfd_create("syzkaller", 0) = 3 [pid 5348] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [ 95.748660][ T5346] NILFS (loop4): invalid segment: Checksum error in segment payload [ 95.781804][ T5346] NILFS (loop4): trying rollback from an earlier position [ 95.829576][ T5346] NILFS (loop4): recovery complete [pid 5346] <... mount resumed>) = 0 [pid 5346] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5346] chdir("./file0") = 0 [pid 5346] ioctl(4, LOOP_CLR_FD [pid 5348] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5346] <... ioctl resumed>) = 0 [ 95.870245][ T5349] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5346] close(4) = 0 [pid 5346] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5346] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5346] ftruncate(5, 33587195 [pid 5348] <... write resumed>) = 2097152 [pid 5346] <... ftruncate resumed>) = 0 [pid 5348] munmap(0x7ff395729000, 2097152 [pid 5346] sendfile(4, 5, NULL, 281474978811909 [pid 5348] <... munmap resumed>) = 0 [pid 5348] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5348] ioctl(4, LOOP_SET_FD, 3) = 0 [ 95.969809][ T5348] loop3: detected capacity change from 0 to 4096 [pid 5348] close(3) = 0 [pid 5348] mkdir("./file0", 0777) = 0 [pid 5348] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5339] <... sendfile resumed>) = 1048576 [pid 5339] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5339] exit_group(0) = ? [pid 5339] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5339, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 5063] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./22/binderfs") = 0 [ 96.068420][ T5348] NILFS (loop3): invalid segment: Checksum error in segment payload [ 96.094538][ T5348] NILFS (loop3): trying rollback from an earlier position [ 96.163361][ T5348] NILFS (loop3): recovery complete [pid 5063] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5348] <... mount resumed>) = 0 [pid 5348] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5348] chdir("./file0") = 0 [pid 5348] ioctl(4, LOOP_CLR_FD) = 0 [pid 5348] close(4) = 0 [pid 5348] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5348] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5348] ftruncate(5, 33587195) = 0 [ 96.208670][ T5350] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5348] sendfile(4, 5, NULL, 281474978811909 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5340] <... sendfile resumed>) = 1048576 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5340] open(NULL, O_RDONLY [pid 5063] lstat("./22/file0", [pid 5340] <... open resumed>) = -1 EFAULT (Bad address) [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5340] exit_group(0 [pid 5063] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5340] <... exit_group resumed>) = ? [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5340] +++ exited with 0 +++ [pid 5341] <... sendfile resumed>) = 1048576 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5340, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5063] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5341] open(NULL, O_RDONLY [pid 5064] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5341] <... open resumed>) = -1 EFAULT (Bad address) [pid 5063] <... openat resumed>) = 4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5341] exit_group(0 [pid 5064] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] fstat(4, [pid 5064] <... openat resumed>) = 3 [pid 5341] <... exit_group resumed>) = ? [pid 5064] fstat(3, [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, [pid 5341] +++ exited with 0 +++ [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5341, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5063] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(3, [pid 5063] getdents64(4, [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] close(4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./22/binderfs", [pid 5063] <... close resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] rmdir("./22/file0" [pid 5064] unlink("./22/binderfs" [pid 5062] <... openat resumed>) = 3 [pid 5064] <... unlink resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] fstat(3, [pid 5064] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(3, [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] getdents64(3, [pid 5063] close(3 [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] <... close resumed>) = 0 [pid 5062] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] rmdir("./22" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... rmdir resumed>) = 0 [pid 5062] lstat("./22/binderfs", [pid 5063] mkdir("./23", 0777 [pid 5062] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] unlink("./22/binderfs" [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] <... unlink resumed>) = 0 [pid 5062] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5351 ./strace-static-x86_64: Process 5351 attached [pid 5351] chdir("./23") = 0 [pid 5351] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5351] setpgid(0, 0) = 0 [pid 5351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5351] write(3, "1000", 4) = 4 [pid 5351] close(3) = 0 [pid 5351] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5351] memfd_create("syzkaller", 0) = 3 [pid 5351] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5351] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... umount2 resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5342] <... sendfile resumed>) = 1048576 [pid 5342] open(NULL, O_RDONLY [pid 5064] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5342] <... open resumed>) = -1 EFAULT (Bad address) [pid 5342] exit_group(0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5342] <... exit_group resumed>) = ? [pid 5064] lstat("./22/file0", [pid 5062] lstat("./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5342] +++ exited with 0 +++ [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5342, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... openat resumed>) = 4 [pid 5062] <... openat resumed>) = 4 [pid 5067] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] fstat(4, [pid 5067] <... openat resumed>) = 3 [pid 5064] fstat(4, [pid 5067] fstat(3, [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, [pid 5064] getdents64(4, [pid 5062] getdents64(4, [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./22/binderfs", [pid 5064] getdents64(4, [pid 5062] getdents64(4, [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] close(4 [pid 5067] unlink("./22/binderfs" [pid 5064] close(4) = 0 [pid 5062] <... close resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5064] rmdir("./22/file0" [pid 5062] rmdir("./22/file0") = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5067] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] getdents64(3, [pid 5062] getdents64(3, [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3 [pid 5062] close(3 [pid 5064] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5064] rmdir("./22" [pid 5062] rmdir("./22" [pid 5064] <... rmdir resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5064] mkdir("./23", 0777 [pid 5062] mkdir("./23", 0777) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... openat resumed>) = 3 [pid 5064] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5062] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5062] close(3 [pid 5064] close(3 [pid 5351] <... write resumed>) = 2097152 [pid 5351] munmap(0x7ff395729000, 2097152) = 0 [pid 5351] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5351] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5351] <... ioctl resumed>) = 0 [pid 5351] close(3) = 0 [pid 5351] mkdir("./file0", 0777 [pid 5064] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5353 [pid 5062] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5352 [pid 5351] <... mkdir resumed>) = 0 [pid 5351] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, ""./strace-static-x86_64: Process 5352 attached ./strace-static-x86_64: Process 5353 attached [pid 5352] chdir("./23" [pid 5353] chdir("./23" [pid 5352] <... chdir resumed>) = 0 [pid 5353] <... chdir resumed>) = 0 [pid 5352] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5353] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5352] <... prctl resumed>) = 0 [pid 5353] <... prctl resumed>) = 0 [pid 5352] setpgid(0, 0 [pid 5353] setpgid(0, 0 [pid 5352] <... setpgid resumed>) = 0 [pid 5353] <... setpgid resumed>) = 0 [pid 5352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5352] <... openat resumed>) = 3 [ 96.606178][ T5351] loop1: detected capacity change from 0 to 4096 [pid 5353] <... openat resumed>) = 3 [pid 5352] write(3, "1000", 4 [pid 5353] write(3, "1000", 4 [pid 5352] <... write resumed>) = 4 [pid 5353] <... write resumed>) = 4 [pid 5352] close(3 [pid 5353] close(3 [pid 5352] <... close resumed>) = 0 [pid 5353] <... close resumed>) = 0 [pid 5352] symlink("/dev/binderfs", "./binderfs" [pid 5353] symlink("/dev/binderfs", "./binderfs" [pid 5352] <... symlink resumed>) = 0 [pid 5353] <... symlink resumed>) = 0 [pid 5352] memfd_create("syzkaller", 0 [pid 5353] memfd_create("syzkaller", 0 [pid 5352] <... memfd_create resumed>) = 3 [pid 5353] <... memfd_create resumed>) = 3 [pid 5352] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5352] <... mmap resumed>) = 0x7ff395729000 [pid 5353] <... mmap resumed>) = 0x7ff395729000 [ 96.673025][ T5351] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5353] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 96.737510][ T5351] NILFS (loop1): trying rollback from an earlier position [pid 5352] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, [pid 5352] <... write resumed>) = 2097152 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./22/file0") = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5352] munmap(0x7ff395729000, 2097152 [pid 5067] rmdir("./22" [pid 5352] <... munmap resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5067] mkdir("./23", 0777) = 0 [pid 5352] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5352] <... openat resumed>) = 4 [pid 5067] <... openat resumed>) = 3 [pid 5352] ioctl(4, LOOP_SET_FD, 3 [ 96.810259][ T5351] NILFS (loop1): recovery complete [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5353] <... write resumed>) = 2097152 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5356 [pid 5351] <... mount resumed>) = 0 [pid 5351] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 5356 attached ) = 3 [pid 5356] chdir("./23") = 0 [pid 5356] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5356] setpgid(0, 0 [pid 5351] chdir("./file0" [pid 5356] <... setpgid resumed>) = 0 [pid 5356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5351] <... chdir resumed>) = 0 [pid 5356] <... openat resumed>) = 3 [pid 5356] write(3, "1000", 4 [pid 5351] ioctl(4, LOOP_CLR_FD [pid 5356] <... write resumed>) = 4 [pid 5352] <... ioctl resumed>) = 0 [pid 5356] close(3 [pid 5352] close(3 [pid 5351] <... ioctl resumed>) = 0 [pid 5356] <... close resumed>) = 0 [pid 5352] <... close resumed>) = 0 [pid 5351] close(4 [pid 5356] symlink("/dev/binderfs", "./binderfs" [pid 5352] mkdir("./file0", 0777 [pid 5356] <... symlink resumed>) = 0 [pid 5352] <... mkdir resumed>) = 0 [pid 5351] <... close resumed>) = 0 [pid 5356] memfd_create("syzkaller", 0 [pid 5352] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5351] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5356] <... memfd_create resumed>) = 3 [ 96.842442][ T5352] loop0: detected capacity change from 0 to 4096 [ 96.859661][ T5355] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5356] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5353] munmap(0x7ff395729000, 2097152 [pid 5351] <... open resumed>) = 4 [pid 5346] <... sendfile resumed>) = 1048576 [pid 5356] <... mmap resumed>) = 0x7ff395729000 [pid 5351] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5353] <... munmap resumed>) = 0 [pid 5346] open(NULL, O_RDONLY [pid 5351] <... open resumed>) = 5 [pid 5351] ftruncate(5, 33587195) = 0 [pid 5353] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5351] sendfile(4, 5, NULL, 281474978811909 [pid 5346] <... open resumed>) = -1 EFAULT (Bad address) [pid 5353] <... openat resumed>) = 4 [pid 5346] exit_group(0 [pid 5353] ioctl(4, LOOP_SET_FD, 3 [pid 5346] <... exit_group resumed>) = ? [pid 5356] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5346] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5346, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5066] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./23/binderfs") = 0 [pid 5066] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5353] <... ioctl resumed>) = 0 [ 96.895476][ T5352] NILFS (loop0): invalid segment: Checksum error in segment payload [ 96.922086][ T5353] loop2: detected capacity change from 0 to 4096 [ 96.929568][ T5352] NILFS (loop0): trying rollback from an earlier position [pid 5353] close(3) = 0 [pid 5353] mkdir("./file0", 0777) = 0 [pid 5353] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5356] <... write resumed>) = 2097152 [pid 5356] munmap(0x7ff395729000, 2097152) = 0 [pid 5356] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5356] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5356] close(3) = 0 [pid 5356] mkdir("./file0", 0777 [pid 5352] <... mount resumed>) = 0 [ 97.014641][ T5353] NILFS (loop2): invalid segment: Checksum error in segment payload [ 97.015809][ T5356] loop5: detected capacity change from 0 to 4096 [ 97.031114][ T5352] NILFS (loop0): recovery complete [ 97.040589][ T5353] NILFS (loop2): trying rollback from an earlier position [pid 5352] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5352] chdir("./file0" [pid 5356] <... mkdir resumed>) = 0 [pid 5352] <... chdir resumed>) = 0 [pid 5356] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5352] ioctl(4, LOOP_CLR_FD) = 0 [pid 5352] close(4) = 0 [pid 5352] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5352] <... open resumed>) = 4 [pid 5352] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5352] ftruncate(5, 33587195) = 0 [ 97.063317][ T5357] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5352] sendfile(4, 5, NULL, 281474978811909 [pid 5066] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./23/file0") = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./23" [pid 5348] <... sendfile resumed>) = 1048576 [pid 5066] <... rmdir resumed>) = 0 [pid 5348] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5066] mkdir("./24", 0777 [pid 5348] exit_group(0) = ? [pid 5066] <... mkdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3 [pid 5348] +++ exited with 0 +++ [pid 5066] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5348, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5065] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5358 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 97.115277][ T5356] NILFS (loop5): invalid segment: Checksum error in segment payload [ 97.127831][ T5353] NILFS (loop2): recovery complete [pid 5065] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, ./strace-static-x86_64: Process 5358 attached [pid 5358] chdir("./24") = 0 [pid 5358] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5358] setpgid(0, 0) = 0 [pid 5358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5358] write(3, "1000", 4) = 4 [pid 5358] close(3) = 0 [pid 5358] symlink("/dev/binderfs", "./binderfs" [pid 5353] <... mount resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5358] <... symlink resumed>) = 0 [pid 5353] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5358] memfd_create("syzkaller", 0 [pid 5353] <... openat resumed>) = 3 [pid 5065] getdents64(3, [pid 5358] <... memfd_create resumed>) = 3 [pid 5358] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5358] <... mmap resumed>) = 0x7ff395729000 [pid 5353] chdir("./file0" [pid 5065] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5353] <... chdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5353] ioctl(4, LOOP_CLR_FD [ 97.162215][ T5356] NILFS (loop5): trying rollback from an earlier position [ 97.175884][ T5359] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] lstat("./22/binderfs", [pid 5353] <... ioctl resumed>) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5353] close(4 [pid 5065] unlink("./22/binderfs" [pid 5353] <... close resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 5353] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5065] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5353] <... open resumed>) = 4 [pid 5353] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5353] ftruncate(5, 33587195) = 0 [pid 5353] sendfile(4, 5, NULL, 281474978811909 [ 97.249265][ T5356] NILFS (loop5): recovery complete [pid 5358] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5356] <... mount resumed>) = 0 [pid 5356] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5356] chdir("./file0") = 0 [pid 5356] ioctl(4, LOOP_CLR_FD) = 0 [pid 5356] close(4) = 0 [pid 5356] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5356] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5356] ftruncate(5, 33587195) = 0 [ 97.295148][ T5361] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5356] sendfile(4, 5, NULL, 281474978811909 [pid 5065] <... umount2 resumed>) = 0 [pid 5358] <... write resumed>) = 2097152 [pid 5358] munmap(0x7ff395729000, 2097152) = 0 [pid 5358] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5358] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5358] close(3) = 0 [pid 5358] mkdir("./file0", 0777 [pid 5065] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5358] <... mkdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5358] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5065] lstat("./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 97.462816][ T5358] loop4: detected capacity change from 0 to 4096 [pid 5065] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./22/file0") = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./22") = 0 [pid 5065] mkdir("./23", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5363 ./strace-static-x86_64: Process 5363 attached [pid 5363] chdir("./23") = 0 [pid 5363] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5363] setpgid(0, 0) = 0 [pid 5363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5363] write(3, "1000", 4) = 4 [pid 5363] close(3) = 0 [pid 5363] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5363] memfd_create("syzkaller", 0) = 3 [pid 5363] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [ 97.537434][ T5358] NILFS (loop4): invalid segment: Checksum error in segment payload [ 97.568433][ T5358] NILFS (loop4): trying rollback from an earlier position [pid 5363] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5358] <... mount resumed>) = 0 [pid 5358] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5358] chdir("./file0") = 0 [pid 5358] ioctl(4, LOOP_CLR_FD) = 0 [pid 5358] close(4) = 0 [ 97.643609][ T5358] NILFS (loop4): recovery complete [ 97.662665][ T5364] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5358] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5358] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5358] ftruncate(5, 33587195) = 0 [pid 5358] sendfile(4, 5, NULL, 281474978811909 [pid 5363] <... write resumed>) = 2097152 [pid 5363] munmap(0x7ff395729000, 2097152) = 0 [pid 5363] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5363] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5363] close(3) = 0 [pid 5363] mkdir("./file0", 0777) = 0 [ 97.792776][ T5363] loop3: detected capacity change from 0 to 4096 [pid 5363] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5351] <... sendfile resumed>) = 1048576 [pid 5351] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5351] exit_group(0) = ? [pid 5351] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5351, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 97.867857][ T5363] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./23/binderfs") = 0 [pid 5063] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5352] <... sendfile resumed>) = 1048576 [pid 5352] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5352] exit_group(0) = ? [pid 5352] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5352, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 97.948175][ T5363] NILFS (loop3): trying rollback from an earlier position [pid 5062] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [ 97.991864][ T5363] NILFS (loop3): recovery complete [pid 5062] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5363] <... mount resumed>) = 0 [pid 5062] lstat("./23/binderfs", [pid 5363] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5363] chdir("./file0" [pid 5062] unlink("./23/binderfs" [pid 5363] <... chdir resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 5363] ioctl(4, LOOP_CLR_FD) = 0 [pid 5062] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 98.028936][ T5365] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5363] close(4) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5363] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5063] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, [pid 5363] <... open resumed>) = 4 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5363] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5063] getdents64(4, [pid 5363] <... open resumed>) = 5 [pid 5063] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5363] ftruncate(5, 33587195 [pid 5063] getdents64(4, [pid 5363] <... ftruncate resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5363] sendfile(4, 5, NULL, 281474978811909 [pid 5063] close(4) = 0 [pid 5063] rmdir("./23/file0") = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./23") = 0 [pid 5063] mkdir("./24", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5366 ./strace-static-x86_64: Process 5366 attached [pid 5366] chdir("./24") = 0 [pid 5366] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5366] setpgid(0, 0) = 0 [pid 5366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5366] write(3, "1000", 4) = 4 [pid 5366] close(3) = 0 [pid 5366] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5366] memfd_create("syzkaller", 0) = 3 [pid 5366] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5366] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5353] <... sendfile resumed>) = 1048576 [pid 5353] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5353] exit_group(0) = ? [pid 5353] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5353, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 5064] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5356] <... sendfile resumed>) = 1048576 [pid 5064] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5356] open(NULL, O_RDONLY [pid 5064] <... openat resumed>) = 3 [pid 5356] <... open resumed>) = -1 EFAULT (Bad address) [pid 5064] fstat(3, [pid 5356] exit_group(0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5356] <... exit_group resumed>) = ? [pid 5064] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./23/binderfs", [pid 5356] +++ exited with 0 +++ [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5356, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- [pid 5064] unlink("./23/binderfs" [pid 5067] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5064] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./23/binderfs") = 0 [pid 5067] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5366] <... write resumed>) = 2097152 [pid 5366] munmap(0x7ff395729000, 2097152) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5366] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5366] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5366] close(3 [pid 5062] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5366] <... close resumed>) = 0 [pid 5366] mkdir("./file0", 0777 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./23/file0", [pid 5366] <... mkdir resumed>) = 0 [pid 5062] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./23/file0") = 0 [pid 5062] getdents64(3, [pid 5366] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [ 98.343965][ T5366] loop1: detected capacity change from 0 to 4096 [pid 5062] close(3) = 0 [pid 5062] rmdir("./23") = 0 [pid 5062] mkdir("./24", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5368 ./strace-static-x86_64: Process 5368 attached [pid 5368] chdir("./24") = 0 [pid 5368] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5368] setpgid(0, 0) = 0 [pid 5368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5368] write(3, "1000", 4) = 4 [pid 5368] close(3) = 0 [pid 5368] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5368] memfd_create("syzkaller", 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5368] <... memfd_create resumed>) = 3 [pid 5368] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5064] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5368] <... mmap resumed>) = 0x7ff395729000 [pid 5067] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] lstat("./23/file0", [pid 5064] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... openat resumed>) = 4 [pid 5067] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] fstat(4, [pid 5067] <... openat resumed>) = 4 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 98.432318][ T5366] NILFS (loop1): invalid segment: Checksum error in segment payload [ 98.466371][ T5366] NILFS (loop1): trying rollback from an earlier position [pid 5067] fstat(4, [pid 5064] getdents64(4, [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, [pid 5064] getdents64(4, [pid 5067] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5368] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] getdents64(4, [pid 5064] close(4 [pid 5067] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] <... close resumed>) = 0 [pid 5067] close(4 [pid 5064] rmdir("./23/file0" [pid 5067] <... close resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5067] rmdir("./23/file0" [pid 5064] getdents64(3, [pid 5067] <... rmdir resumed>) = 0 [pid 5067] getdents64(3, [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3 [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] <... close resumed>) = 0 [pid 5067] close(3 [pid 5064] rmdir("./23" [pid 5067] <... close resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5067] rmdir("./23" [pid 5064] mkdir("./24", 0777 [pid 5067] <... rmdir resumed>) = 0 [pid 5067] mkdir("./24", 0777 [pid 5064] <... mkdir resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5064] <... openat resumed>) = 3 [pid 5067] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] close(3 [pid 5064] close(3 [pid 5067] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5369 [pid 5064] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5370 ./strace-static-x86_64: Process 5369 attached [pid 5369] chdir("./24"./strace-static-x86_64: Process 5370 attached ) = 0 [ 98.528954][ T5366] NILFS (loop1): recovery complete [pid 5370] chdir("./24" [pid 5369] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5370] <... chdir resumed>) = 0 [pid 5370] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5370] setpgid(0, 0) = 0 [pid 5370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5369] <... prctl resumed>) = 0 [pid 5370] <... openat resumed>) = 3 [pid 5369] setpgid(0, 0 [pid 5370] write(3, "1000", 4 [pid 5369] <... setpgid resumed>) = 0 [pid 5370] <... write resumed>) = 4 [pid 5370] close(3 [pid 5369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5370] <... close resumed>) = 0 [pid 5369] <... openat resumed>) = 3 [pid 5370] symlink("/dev/binderfs", "./binderfs" [pid 5369] write(3, "1000", 4 [pid 5370] <... symlink resumed>) = 0 [pid 5370] memfd_create("syzkaller", 0) = 3 [pid 5369] <... write resumed>) = 4 [pid 5370] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5369] close(3 [pid 5366] <... mount resumed>) = 0 [pid 5370] <... mmap resumed>) = 0x7ff395729000 [pid 5369] <... close resumed>) = 0 [pid 5368] <... write resumed>) = 2097152 [pid 5366] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5369] symlink("/dev/binderfs", "./binderfs" [pid 5368] munmap(0x7ff395729000, 2097152 [pid 5366] <... openat resumed>) = 3 [pid 5369] <... symlink resumed>) = 0 [pid 5368] <... munmap resumed>) = 0 [pid 5366] chdir("./file0" [pid 5369] memfd_create("syzkaller", 0 [pid 5368] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5366] <... chdir resumed>) = 0 [pid 5369] <... memfd_create resumed>) = 3 [pid 5368] <... openat resumed>) = 4 [pid 5366] ioctl(4, LOOP_CLR_FD [pid 5370] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5368] ioctl(4, LOOP_SET_FD, 3 [pid 5366] <... ioctl resumed>) = 0 [pid 5369] <... mmap resumed>) = 0x7ff395729000 [pid 5368] <... ioctl resumed>) = 0 [pid 5366] close(4 [pid 5358] <... sendfile resumed>) = 1048576 [pid 5370] <... write resumed>) = 2097152 [ 98.593029][ T5371] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.631662][ T5368] loop0: detected capacity change from 0 to 4096 [pid 5369] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5368] close(3 [pid 5366] <... close resumed>) = 0 [pid 5358] open(NULL, O_RDONLY [pid 5370] munmap(0x7ff395729000, 2097152 [pid 5368] <... close resumed>) = 0 [pid 5366] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5358] <... open resumed>) = -1 EFAULT (Bad address) [pid 5368] mkdir("./file0", 0777) = 0 [pid 5366] <... open resumed>) = 4 [pid 5358] exit_group(0 [pid 5368] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5370] <... munmap resumed>) = 0 [pid 5369] <... write resumed>) = 2097152 [pid 5366] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5358] <... exit_group resumed>) = ? [pid 5370] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5369] munmap(0x7ff395729000, 2097152 [pid 5366] <... open resumed>) = 5 [pid 5358] +++ exited with 0 +++ [pid 5370] <... openat resumed>) = 4 [pid 5369] <... munmap resumed>) = 0 [pid 5366] ftruncate(5, 33587195 [pid 5370] ioctl(4, LOOP_SET_FD, 3 [pid 5369] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5366] <... ftruncate resumed>) = 0 [pid 5369] <... openat resumed>) = 4 [pid 5366] sendfile(4, 5, NULL, 281474978811909 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5358, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5369] ioctl(4, LOOP_SET_FD, 3 [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 98.692371][ T5368] NILFS (loop0): invalid segment: Checksum error in segment payload [ 98.710710][ T5368] NILFS (loop0): trying rollback from an earlier position [ 98.715866][ T5370] loop2: detected capacity change from 0 to 4096 [ 98.734402][ T5369] loop5: detected capacity change from 0 to 4096 [pid 5066] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5370] <... ioctl resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5370] close(3 [pid 5066] <... openat resumed>) = 3 [pid 5370] <... close resumed>) = 0 [pid 5370] mkdir("./file0", 0777) = 0 [pid 5370] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5369] <... ioctl resumed>) = 0 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, [pid 5369] close(3) = 0 [pid 5369] mkdir("./file0", 0777) = 0 [pid 5368] <... mount resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5369] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5368] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 98.745700][ T5368] NILFS (loop0): recovery complete [ 98.758523][ T5370] NILFS (loop2): invalid segment: Checksum error in segment payload [ 98.773683][ T5372] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5066] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5368] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5368] chdir("./file0" [pid 5066] lstat("./24/binderfs", [pid 5368] <... chdir resumed>) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5368] ioctl(4, LOOP_CLR_FD [pid 5066] unlink("./24/binderfs" [pid 5368] <... ioctl resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5368] close(4 [pid 5066] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5368] <... close resumed>) = 0 [ 98.790472][ T5370] NILFS (loop2): trying rollback from an earlier position [ 98.813088][ T5369] NILFS (loop5): invalid segment: Checksum error in segment payload [ 98.813251][ T5370] NILFS (loop2): recovery complete [ 98.821314][ T5369] NILFS (loop5): trying rollback from an earlier position [pid 5368] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5368] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5368] ftruncate(5, 33587195) = 0 [pid 5368] sendfile(4, 5, NULL, 281474978811909 [pid 5370] <... mount resumed>) = 0 [pid 5370] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5370] chdir("./file0") = 0 [pid 5370] ioctl(4, LOOP_CLR_FD) = 0 [pid 5370] close(4) = 0 [ 98.842067][ T5369] NILFS (loop5): recovery complete [ 98.850560][ T5374] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5370] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5369] <... mount resumed>) = 0 [pid 5370] <... open resumed>) = 4 [pid 5369] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5370] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5369] <... openat resumed>) = 3 [pid 5370] <... open resumed>) = 5 [pid 5369] chdir("./file0" [pid 5370] ftruncate(5, 33587195 [pid 5369] <... chdir resumed>) = 0 [pid 5370] <... ftruncate resumed>) = 0 [pid 5369] ioctl(4, LOOP_CLR_FD [pid 5370] sendfile(4, 5, NULL, 281474978811909 [pid 5369] <... ioctl resumed>) = 0 [pid 5369] close(4) = 0 [pid 5369] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5369] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [ 98.892487][ T5373] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5369] ftruncate(5, 33587195) = 0 [pid 5369] sendfile(4, 5, NULL, 281474978811909 [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5363] <... sendfile resumed>) = 1048576 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5363] open(NULL, O_RDONLY [pid 5066] lstat("./24/file0", [pid 5363] <... open resumed>) = -1 EFAULT (Bad address) [pid 5363] exit_group(0 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5363] <... exit_group resumed>) = ? [pid 5363] +++ exited with 0 +++ [pid 5066] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5363, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5066] <... openat resumed>) = 4 [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5066] fstat(4, [pid 5065] <... restart_syscall resumed>) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5065] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] getdents64(4, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5065] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] close(4 [pid 5065] <... openat resumed>) = 3 [pid 5066] <... close resumed>) = 0 [pid 5065] fstat(3, [pid 5066] rmdir("./24/file0" [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, [pid 5066] getdents64(3, [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5065] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./24" [pid 5065] lstat("./23/binderfs", [pid 5066] <... rmdir resumed>) = 0 [pid 5066] mkdir("./25", 0777 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5065] unlink("./23/binderfs" [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5065] <... unlink resumed>) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5065] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5376 ./strace-static-x86_64: Process 5376 attached [pid 5376] chdir("./25") = 0 [pid 5376] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5376] setpgid(0, 0) = 0 [pid 5376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5376] write(3, "1000", 4) = 4 [pid 5376] close(3) = 0 [pid 5376] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5376] memfd_create("syzkaller", 0) = 3 [pid 5376] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5376] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... umount2 resumed>) = 0 [pid 5376] <... write resumed>) = 2097152 [pid 5065] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5376] munmap(0x7ff395729000, 2097152 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5376] <... munmap resumed>) = 0 [pid 5065] lstat("./23/file0", [pid 5376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5376] <... openat resumed>) = 4 [pid 5065] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5376] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5376] <... ioctl resumed>) = 0 [pid 5065] getdents64(4, [pid 5376] close(3 [pid 5065] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5376] <... close resumed>) = 0 [pid 5065] getdents64(4, [pid 5376] mkdir("./file0", 0777 [pid 5065] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5376] <... mkdir resumed>) = 0 [pid 5065] close(4 [pid 5376] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./23/file0") = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./23") = 0 [pid 5065] mkdir("./24", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [ 99.419568][ T5376] loop4: detected capacity change from 0 to 4096 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5377 ./strace-static-x86_64: Process 5377 attached [pid 5377] chdir("./24") = 0 [pid 5377] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5377] setpgid(0, 0) = 0 [pid 5377] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5377] write(3, "1000", 4) = 4 [pid 5377] close(3) = 0 [pid 5377] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5377] memfd_create("syzkaller", 0) = 3 [pid 5377] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [ 99.481310][ T5376] NILFS (loop4): invalid segment: Checksum error in segment payload [ 99.502266][ T5376] NILFS (loop4): trying rollback from an earlier position [ 99.579271][ T5376] NILFS (loop4): recovery complete [pid 5377] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5376] <... mount resumed>) = 0 [pid 5376] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5376] chdir("./file0" [pid 5366] <... sendfile resumed>) = 1048576 [pid 5376] <... chdir resumed>) = 0 [pid 5376] ioctl(4, LOOP_CLR_FD [pid 5366] open(NULL, O_RDONLY [pid 5376] <... ioctl resumed>) = 0 [pid 5366] <... open resumed>) = -1 EFAULT (Bad address) [pid 5376] close(4 [pid 5366] exit_group(0 [pid 5376] <... close resumed>) = 0 [pid 5376] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5376] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5376] ftruncate(5, 33587195) = 0 [ 99.624084][ T5379] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5376] sendfile(4, 5, NULL, 281474978811909 [pid 5377] <... write resumed>) = 2097152 [pid 5366] <... exit_group resumed>) = ? [pid 5377] munmap(0x7ff395729000, 2097152 [pid 5366] +++ exited with 0 +++ [pid 5377] <... munmap resumed>) = 0 [pid 5377] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5366, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5377] <... openat resumed>) = 4 [pid 5063] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5377] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, [pid 5377] <... ioctl resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5377] close(3 [pid 5063] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5377] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5377] mkdir("./file0", 0777 [pid 5063] lstat("./24/binderfs", [pid 5377] <... mkdir resumed>) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5377] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5063] unlink("./24/binderfs") = 0 [pid 5063] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5370] <... sendfile resumed>) = 1048576 [pid 5370] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5370] exit_group(0) = ? [pid 5370] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5370, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5064] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [ 99.674387][ T5377] loop3: detected capacity change from 0 to 4096 [ 99.712310][ T5377] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5064] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./24/binderfs") = 0 [pid 5064] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5369] <... sendfile resumed>) = 1048576 [pid 5369] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5369] exit_group(0) = ? [pid 5369] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5369, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5067] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./24/binderfs") = 0 [ 99.760278][ T5377] NILFS (loop3): trying rollback from an earlier position [pid 5067] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 5368] <... sendfile resumed>) = 1048576 [pid 5368] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [ 99.832738][ T5377] NILFS (loop3): recovery complete [pid 5368] exit_group(0) = ? [pid 5377] <... mount resumed>) = 0 [pid 5368] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5368, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 5377] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./24/binderfs", [pid 5063] lstat("./24/file0", [pid 5062] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5377] <... openat resumed>) = 3 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] unlink("./24/binderfs" [pid 5377] chdir("./file0" [pid 5063] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... unlink resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, [pid 5377] <... chdir resumed>) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./24/file0" [pid 5377] ioctl(4, LOOP_CLR_FD [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./24") = 0 [pid 5063] mkdir("./25", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3 [pid 5377] <... ioctl resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5377] close(4) = 0 [ 99.874826][ T5380] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5067] <... umount2 resumed>) = 0 [pid 5064] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5377] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5067] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5381 attached [pid 5377] <... open resumed>) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./24/file0", [pid 5377] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5067] lstat("./24/file0", [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5381 [pid 5381] chdir("./25" [pid 5377] <... open resumed>) = 5 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5381] <... chdir resumed>) = 0 [pid 5377] ftruncate(5, 33587195 [pid 5067] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5381] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5377] <... ftruncate resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5381] <... prctl resumed>) = 0 [pid 5377] sendfile(4, 5, NULL, 281474978811909 [pid 5064] fstat(4, [pid 5381] setpgid(0, 0 [pid 5067] <... openat resumed>) = 4 [pid 5381] <... setpgid resumed>) = 0 [pid 5067] fstat(4, [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5381] <... openat resumed>) = 3 [pid 5067] getdents64(4, [pid 5064] getdents64(4, [pid 5381] write(3, "1000", 4 [pid 5067] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5381] <... write resumed>) = 4 [pid 5067] getdents64(4, [pid 5064] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5381] close(3 [pid 5067] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] getdents64(4, [pid 5381] <... close resumed>) = 0 [pid 5067] close(4 [pid 5064] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5381] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./24/file0" [pid 5064] close(4 [pid 5381] <... symlink resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5381] memfd_create("syzkaller", 0 [pid 5067] getdents64(3, [pid 5064] rmdir("./24/file0") = 0 [pid 5381] <... memfd_create resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5381] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] close(3 [pid 5064] getdents64(3, [pid 5381] <... mmap resumed>) = 0x7ff395729000 [pid 5067] <... close resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] rmdir("./24" [pid 5064] close(3 [pid 5067] <... rmdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5067] mkdir("./25", 0777 [pid 5064] rmdir("./24" [pid 5067] <... mkdir resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5064] mkdir("./25", 0777 [pid 5067] <... openat resumed>) = 3 [pid 5064] <... mkdir resumed>) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5381] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] <... openat resumed>) = 3 [pid 5067] close(3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5067] <... close resumed>) = 0 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] close(3) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5382 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5383 ./strace-static-x86_64: Process 5382 attached [pid 5382] chdir("./25") = 0 [pid 5382] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5382] setpgid(0, 0) = 0 [pid 5382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 5383 attached [pid 5382] write(3, "1000", 4) = 4 [pid 5382] close(3) = 0 [pid 5382] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5382] memfd_create("syzkaller", 0) = 3 [pid 5382] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5383] chdir("./25" [pid 5062] <... umount2 resumed>) = 0 [pid 5383] <... chdir resumed>) = 0 [pid 5383] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5383] <... prctl resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5383] setpgid(0, 0) = 0 [pid 5062] lstat("./24/file0", [pid 5383] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5383] <... openat resumed>) = 3 [pid 5383] write(3, "1000", 4 [pid 5062] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5383] <... write resumed>) = 4 [pid 5383] close(3 [pid 5382] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5383] <... close resumed>) = 0 [pid 5383] symlink("/dev/binderfs", "./binderfs" [pid 5062] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5383] <... symlink resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5383] memfd_create("syzkaller", 0 [pid 5062] fstat(4, [pid 5383] <... memfd_create resumed>) = 3 [pid 5383] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5383] <... mmap resumed>) = 0x7ff395729000 [pid 5062] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./24/file0" [pid 5381] <... write resumed>) = 2097152 [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./24") = 0 [pid 5383] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5381] munmap(0x7ff395729000, 2097152 [pid 5062] mkdir("./25", 0777 [pid 5381] <... munmap resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5381] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5381] <... openat resumed>) = 4 [pid 5062] <... openat resumed>) = 3 [pid 5381] ioctl(4, LOOP_SET_FD, 3 [pid 5062] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5062] close(3) = 0 [pid 5382] <... write resumed>) = 2097152 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5384 [pid 5381] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5384 attached [pid 5381] close(3 [pid 5384] chdir("./25" [pid 5381] <... close resumed>) = 0 [pid 5384] <... chdir resumed>) = 0 [pid 5384] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5382] munmap(0x7ff395729000, 2097152 [pid 5381] mkdir("./file0", 0777 [pid 5384] <... prctl resumed>) = 0 [pid 5382] <... munmap resumed>) = 0 [pid 5384] setpgid(0, 0 [pid 5382] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5381] <... mkdir resumed>) = 0 [pid 5384] <... setpgid resumed>) = 0 [pid 5382] <... openat resumed>) = 4 [pid 5381] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 100.195767][ T5381] loop1: detected capacity change from 0 to 4096 [pid 5382] ioctl(4, LOOP_SET_FD, 3 [pid 5384] <... openat resumed>) = 3 [pid 5384] write(3, "1000", 4) = 4 [pid 5384] close(3) = 0 [pid 5384] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5384] memfd_create("syzkaller", 0) = 3 [pid 5384] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5383] <... write resumed>) = 2097152 [pid 5382] <... ioctl resumed>) = 0 [pid 5382] close(3) = 0 [pid 5383] munmap(0x7ff395729000, 2097152 [pid 5382] mkdir("./file0", 0777 [pid 5383] <... munmap resumed>) = 0 [pid 5382] <... mkdir resumed>) = 0 [pid 5383] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5382] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5383] <... openat resumed>) = 4 [ 100.244807][ T5382] loop5: detected capacity change from 0 to 4096 [ 100.254039][ T5381] NILFS (loop1): invalid segment: Checksum error in segment payload [ 100.276335][ T5381] NILFS (loop1): trying rollback from an earlier position [pid 5383] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5383] close(3) = 0 [pid 5383] mkdir("./file0", 0777 [pid 5384] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5383] <... mkdir resumed>) = 0 [ 100.300887][ T5383] loop2: detected capacity change from 0 to 4096 [ 100.326909][ T5381] NILFS (loop1): recovery complete [pid 5383] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5381] <... mount resumed>) = 0 [pid 5381] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5381] chdir("./file0") = 0 [pid 5381] ioctl(4, LOOP_CLR_FD) = 0 [pid 5381] close(4) = 0 [pid 5381] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5381] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5381] ftruncate(5, 33587195) = 0 [pid 5381] sendfile(4, 5, NULL, 281474978811909 [pid 5384] <... write resumed>) = 2097152 [ 100.347587][ T5382] NILFS (loop5): invalid segment: Checksum error in segment payload [ 100.348576][ T5383] NILFS (loop2): invalid segment: Checksum error in segment payload [ 100.356697][ T5385] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.376562][ T5382] NILFS (loop5): trying rollback from an earlier position [pid 5384] munmap(0x7ff395729000, 2097152) = 0 [pid 5384] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5384] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5384] close(3) = 0 [pid 5384] mkdir("./file0", 0777) = 0 [ 100.437118][ T5382] NILFS (loop5): recovery complete [ 100.441178][ T5384] loop0: detected capacity change from 0 to 4096 [ 100.451313][ T5383] NILFS (loop2): trying rollback from an earlier position [pid 5384] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5382] <... mount resumed>) = 0 [pid 5376] <... sendfile resumed>) = 1048576 [pid 5382] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [ 100.488308][ T5384] NILFS (loop0): invalid segment: Checksum error in segment payload [ 100.517194][ T5384] NILFS (loop0): trying rollback from an earlier position [ 100.524564][ T5386] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5376] open(NULL, O_RDONLY [pid 5382] <... openat resumed>) = 3 [pid 5376] <... open resumed>) = -1 EFAULT (Bad address) [pid 5382] chdir("./file0" [pid 5376] exit_group(0 [pid 5382] <... chdir resumed>) = 0 [pid 5382] ioctl(4, LOOP_CLR_FD [pid 5376] <... exit_group resumed>) = ? [pid 5382] <... ioctl resumed>) = 0 [pid 5382] close(4 [pid 5376] +++ exited with 0 +++ [pid 5382] <... close resumed>) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5376, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5066] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5382] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5066] <... openat resumed>) = 3 [pid 5066] fstat(3, [pid 5382] <... open resumed>) = 4 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5382] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5066] unlink("./25/binderfs" [pid 5382] <... open resumed>) = 5 [pid 5066] <... unlink resumed>) = 0 [pid 5382] ftruncate(5, 33587195 [pid 5066] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5382] <... ftruncate resumed>) = 0 [ 100.541629][ T5383] NILFS (loop2): recovery complete [pid 5382] sendfile(4, 5, NULL, 281474978811909 [pid 5383] <... mount resumed>) = 0 [pid 5383] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5383] chdir("./file0") = 0 [pid 5383] ioctl(4, LOOP_CLR_FD) = 0 [pid 5383] close(4) = 0 [pid 5383] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5383] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5383] ftruncate(5, 33587195) = 0 [ 100.590294][ T5387] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.659959][ T5384] NILFS (loop0): recovery complete [pid 5383] sendfile(4, 5, NULL, 281474978811909 [pid 5384] <... mount resumed>) = 0 [pid 5384] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5384] chdir("./file0") = 0 [pid 5384] ioctl(4, LOOP_CLR_FD) = 0 [pid 5384] close(4) = 0 [pid 5384] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5384] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5384] ftruncate(5, 33587195) = 0 [ 100.694302][ T5388] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5384] sendfile(4, 5, NULL, 281474978811909 [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./25/file0") = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./25") = 0 [pid 5066] mkdir("./26", 0777) = 0 [pid 5377] <... sendfile resumed>) = 1048576 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5377] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5377] exit_group(0) = ? [pid 5066] <... openat resumed>) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5377] +++ exited with 0 +++ [pid 5066] close(3) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5377, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5065] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... openat resumed>) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5389 [pid 5065] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5389 attached [pid 5065] lstat("./24/binderfs", [pid 5389] chdir("./26" [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5389] <... chdir resumed>) = 0 [pid 5065] unlink("./24/binderfs" [pid 5389] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... unlink resumed>) = 0 [pid 5389] <... prctl resumed>) = 0 [pid 5065] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5389] setpgid(0, 0) = 0 [pid 5389] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5389] write(3, "1000", 4) = 4 [pid 5389] close(3) = 0 [pid 5389] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5389] memfd_create("syzkaller", 0) = 3 [pid 5389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5389] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5389] munmap(0x7ff395729000, 2097152 [pid 5065] lstat("./24/file0", [pid 5389] <... munmap resumed>) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5389] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5065] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5389] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, [pid 5389] close(3 [pid 5065] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5389] <... close resumed>) = 0 [pid 5065] rmdir("./24/file0" [pid 5389] mkdir("./file0", 0777 [pid 5065] <... rmdir resumed>) = 0 [pid 5381] <... sendfile resumed>) = 1048576 [pid 5065] getdents64(3, [pid 5389] <... mkdir resumed>) = 0 [pid 5381] open(NULL, O_RDONLY [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5381] <... open resumed>) = -1 EFAULT (Bad address) [pid 5065] close(3 [pid 5389] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5381] exit_group(0 [pid 5065] <... close resumed>) = 0 [pid 5381] <... exit_group resumed>) = ? [pid 5065] rmdir("./24") = 0 [pid 5381] +++ exited with 0 +++ [pid 5065] mkdir("./25", 0777) = 0 [ 101.191834][ T5389] loop4: detected capacity change from 0 to 4096 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5381, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=22 /* 0.22 s */} --- [pid 5063] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] <... openat resumed>) = 3 [pid 5065] close(3 [pid 5063] fstat(3, [pid 5065] <... close resumed>) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./25/binderfs") = 0 [pid 5063] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5390 ./strace-static-x86_64: Process 5390 attached [pid 5390] chdir("./25") = 0 [ 101.252323][ T5389] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5390] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5390] setpgid(0, 0) = 0 [pid 5390] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5390] write(3, "1000", 4) = 4 [pid 5390] close(3) = 0 [ 101.300479][ T5389] NILFS (loop4): trying rollback from an earlier position [ 101.319456][ T5389] NILFS (loop4): recovery complete [pid 5390] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5389] <... mount resumed>) = 0 [pid 5390] memfd_create("syzkaller", 0 [pid 5389] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5390] <... memfd_create resumed>) = 3 [pid 5390] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5389] <... openat resumed>) = 3 [pid 5390] <... mmap resumed>) = 0x7ff395729000 [pid 5389] chdir("./file0") = 0 [pid 5389] ioctl(4, LOOP_CLR_FD) = 0 [pid 5389] close(4 [pid 5390] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5389] <... close resumed>) = 0 [pid 5389] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5389] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [ 101.360856][ T5391] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5389] ftruncate(5, 33587195) = 0 [pid 5389] sendfile(4, 5, NULL, 281474978811909 [pid 5063] <... umount2 resumed>) = 0 [pid 5390] <... write resumed>) = 2097152 [pid 5063] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5390] munmap(0x7ff395729000, 2097152 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5390] <... munmap resumed>) = 0 [pid 5383] <... sendfile resumed>) = 1048576 [pid 5063] lstat("./25/file0", [pid 5390] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5383] open(NULL, O_RDONLY [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5390] <... openat resumed>) = 4 [pid 5383] <... open resumed>) = -1 EFAULT (Bad address) [pid 5390] ioctl(4, LOOP_SET_FD, 3 [pid 5383] exit_group(0 [pid 5063] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5383] <... exit_group resumed>) = ? [pid 5383] +++ exited with 0 +++ [pid 5390] <... ioctl resumed>) = 0 [pid 5382] <... sendfile resumed>) = 1048576 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5390] close(3 [pid 5382] open(NULL, O_RDONLY [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5383, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5063] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5390] <... close resumed>) = 0 [pid 5382] <... open resumed>) = -1 EFAULT (Bad address) [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 5390] mkdir("./file0", 0777 [pid 5382] exit_group(0 [pid 5064] <... restart_syscall resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5382] <... exit_group resumed>) = ? [pid 5063] fstat(4, [pid 5390] <... mkdir resumed>) = 0 [pid 5382] +++ exited with 0 +++ [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5382, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5064] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(4, [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5390] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5067] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... openat resumed>) = 3 [pid 5063] getdents64(4, [pid 5067] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] fstat(3, [pid 5063] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] close(4 [pid 5067] fstat(3, [pid 5064] getdents64(3, [pid 5063] <... close resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] rmdir("./25/file0" [pid 5067] getdents64(3, [pid 5064] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... rmdir resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(3, [pid 5067] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] lstat("./25/binderfs", [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] close(3 [pid 5067] lstat("./25/binderfs", [pid 5064] unlink("./25/binderfs" [pid 5063] <... close resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5063] rmdir("./25" [pid 5067] unlink("./25/binderfs" [pid 5064] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... rmdir resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5063] mkdir("./26", 0777 [pid 5067] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5392 ./strace-static-x86_64: Process 5392 attached [pid 5392] chdir("./26") = 0 [pid 5392] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5392] setpgid(0, 0) = 0 [ 101.582619][ T5390] loop3: detected capacity change from 0 to 4096 [pid 5392] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5392] write(3, "1000", 4) = 4 [pid 5392] close(3) = 0 [pid 5392] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5392] memfd_create("syzkaller", 0) = 3 [pid 5392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [ 101.661380][ T5390] NILFS (loop3): invalid segment: Checksum error in segment payload [ 101.679348][ T5390] NILFS (loop3): trying rollback from an earlier position [pid 5392] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5384] <... sendfile resumed>) = 1048576 [pid 5064] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5392] <... write resumed>) = 2097152 [pid 5384] open(NULL, O_RDONLY [pid 5064] fstat(4, [pid 5384] <... open resumed>) = -1 EFAULT (Bad address) [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 101.751113][ T5390] NILFS (loop3): recovery complete [pid 5384] exit_group(0 [pid 5064] getdents64(4, [pid 5384] <... exit_group resumed>) = ? [pid 5064] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 5384] +++ exited with 0 +++ [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./25/file0" [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5384, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5064] <... rmdir resumed>) = 0 [pid 5390] <... mount resumed>) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5064] getdents64(3, [pid 5390] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5390] <... openat resumed>) = 3 [pid 5064] close(3 [pid 5390] chdir("./file0" [pid 5064] <... close resumed>) = 0 [pid 5062] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] rmdir("./25" [pid 5390] <... chdir resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] mkdir("./26", 0777 [pid 5390] ioctl(4, LOOP_CLR_FD [pid 5064] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5390] <... ioctl resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5062] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5062] fstat(3, [pid 5390] close(4 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] close(3 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5390] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5390] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5390] <... open resumed>) = 4 [pid 5062] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5390] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5390] <... open resumed>) = 5 [pid 5062] lstat("./25/binderfs", [pid 5392] munmap(0x7ff395729000, 2097152 [pid 5390] ftruncate(5, 33587195 [pid 5064] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5394 [pid 5062] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5390] <... ftruncate resumed>) = 0 [ 101.798712][ T5393] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5062] unlink("./25/binderfs" [pid 5392] <... munmap resumed>) = 0 [pid 5390] sendfile(4, 5, NULL, 281474978811909 [pid 5392] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 5394 attached ) = 4 [pid 5062] <... unlink resumed>) = 0 [pid 5394] chdir("./26" [pid 5392] ioctl(4, LOOP_SET_FD, 3 [pid 5062] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5394] <... chdir resumed>) = 0 [pid 5394] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5392] <... ioctl resumed>) = 0 [pid 5394] <... prctl resumed>) = 0 [pid 5392] close(3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5394] setpgid(0, 0 [pid 5392] <... close resumed>) = 0 [pid 5067] lstat("./25/file0", [pid 5394] <... setpgid resumed>) = 0 [pid 5392] mkdir("./file0", 0777 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5394] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5392] <... mkdir resumed>) = 0 [pid 5067] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5394] <... openat resumed>) = 3 [pid 5392] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5394] write(3, "1000", 4 [pid 5067] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5394] <... write resumed>) = 4 [pid 5067] <... openat resumed>) = 4 [pid 5394] close(3 [pid 5067] fstat(4, [pid 5394] <... close resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5394] symlink("/dev/binderfs", "./binderfs" [pid 5067] getdents64(4, [pid 5394] <... symlink resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5394] memfd_create("syzkaller", 0 [pid 5067] getdents64(4, [pid 5394] <... memfd_create resumed>) = 3 [pid 5067] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5394] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] close(4 [pid 5394] <... mmap resumed>) = 0x7ff395729000 [ 101.844920][ T5392] loop1: detected capacity change from 0 to 4096 [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./25/file0") = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./25") = 0 [pid 5067] mkdir("./26", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5395 ./strace-static-x86_64: Process 5395 attached [pid 5395] chdir("./26") = 0 [pid 5395] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5395] setpgid(0, 0) = 0 [ 101.891292][ T5392] NILFS (loop1): invalid segment: Checksum error in segment payload [ 101.899340][ T5392] NILFS (loop1): trying rollback from an earlier position [pid 5395] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5394] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5395] <... openat resumed>) = 3 [pid 5395] write(3, "1000", 4) = 4 [pid 5395] close(3) = 0 [pid 5395] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5395] memfd_create("syzkaller", 0) = 3 [ 101.951230][ T5392] NILFS (loop1): recovery complete [pid 5395] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5395] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5392] <... mount resumed>) = 0 [pid 5062] fstat(4, [pid 5392] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5392] chdir("./file0") = 0 [pid 5392] ioctl(4, LOOP_CLR_FD) = 0 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5395] <... write resumed>) = 2097152 [pid 5394] <... write resumed>) = 2097152 [ 102.035866][ T5396] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5392] close(4 [pid 5062] getdents64(4, [pid 5395] munmap(0x7ff395729000, 2097152 [pid 5394] munmap(0x7ff395729000, 2097152 [pid 5392] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5395] <... munmap resumed>) = 0 [pid 5394] <... munmap resumed>) = 0 [pid 5062] getdents64(4, [pid 5395] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5394] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5395] <... openat resumed>) = 4 [pid 5394] <... openat resumed>) = 4 [pid 5062] close(4 [pid 5395] ioctl(4, LOOP_SET_FD, 3 [pid 5394] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... close resumed>) = 0 [pid 5392] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] rmdir("./25/file0" [pid 5394] <... ioctl resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5394] close(3 [pid 5392] <... open resumed>) = 4 [pid 5062] getdents64(3, [pid 5394] <... close resumed>) = 0 [pid 5392] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5395] <... ioctl resumed>) = 0 [pid 5394] mkdir("./file0", 0777 [pid 5392] <... open resumed>) = 5 [pid 5062] close(3 [pid 5395] close(3 [pid 5394] <... mkdir resumed>) = 0 [pid 5392] ftruncate(5, 33587195 [pid 5062] <... close resumed>) = 0 [pid 5395] <... close resumed>) = 0 [pid 5394] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5062] rmdir("./25" [pid 5395] mkdir("./file0", 0777 [pid 5392] <... ftruncate resumed>) = 0 [ 102.079693][ T5395] loop5: detected capacity change from 0 to 4096 [ 102.087089][ T5394] loop2: detected capacity change from 0 to 4096 [ 102.109883][ T5394] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5062] <... rmdir resumed>) = 0 [pid 5395] <... mkdir resumed>) = 0 [pid 5392] sendfile(4, 5, NULL, 281474978811909 [pid 5062] mkdir("./26", 0777 [pid 5395] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5062] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5397 [ 102.128673][ T5395] NILFS (loop5): invalid segment: Checksum error in segment payload ./strace-static-x86_64: Process 5397 attached [pid 5397] chdir("./26") = 0 [pid 5397] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5397] setpgid(0, 0) = 0 [pid 5397] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5397] write(3, "1000", 4) = 4 [pid 5397] close(3) = 0 [pid 5397] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5397] memfd_create("syzkaller", 0) = 3 [pid 5397] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [ 102.173962][ T5394] NILFS (loop2): trying rollback from an earlier position [ 102.192490][ T5395] NILFS (loop5): trying rollback from an earlier position [ 102.273394][ T5394] NILFS (loop2): recovery complete [ 102.293032][ T5395] NILFS (loop5): recovery complete [ 102.308316][ T5399] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5397] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5395] <... mount resumed>) = 0 [pid 5394] <... mount resumed>) = 0 [pid 5395] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5394] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5395] <... openat resumed>) = 3 [pid 5394] <... openat resumed>) = 3 [pid 5395] chdir("./file0") = 0 [pid 5394] chdir("./file0" [pid 5395] ioctl(4, LOOP_CLR_FD [pid 5394] <... chdir resumed>) = 0 [pid 5395] <... ioctl resumed>) = 0 [pid 5394] ioctl(4, LOOP_CLR_FD [pid 5395] close(4 [pid 5394] <... ioctl resumed>) = 0 [pid 5395] <... close resumed>) = 0 [pid 5395] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5394] close(4 [pid 5395] <... open resumed>) = 4 [pid 5395] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5394] <... close resumed>) = 0 [pid 5395] <... open resumed>) = 5 [pid 5394] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5395] ftruncate(5, 33587195) = 0 [pid 5395] sendfile(4, 5, NULL, 281474978811909 [pid 5394] <... open resumed>) = 4 [ 102.319228][ T5398] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5394] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5394] ftruncate(5, 33587195) = 0 [pid 5394] sendfile(4, 5, NULL, 281474978811909 [pid 5397] <... write resumed>) = 2097152 [pid 5397] munmap(0x7ff395729000, 2097152 [pid 5389] <... sendfile resumed>) = 1048576 [pid 5389] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5397] <... munmap resumed>) = 0 [pid 5389] exit_group(0 [pid 5397] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5389] <... exit_group resumed>) = ? [pid 5397] <... openat resumed>) = 4 [pid 5389] +++ exited with 0 +++ [pid 5397] ioctl(4, LOOP_SET_FD, 3 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5389, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5066] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./26/binderfs") = 0 [pid 5066] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5397] <... ioctl resumed>) = 0 [pid 5397] close(3) = 0 [pid 5397] mkdir("./file0", 0777) = 0 [ 102.461113][ T5397] loop0: detected capacity change from 0 to 4096 [ 102.539402][ T5397] NILFS (loop0): invalid segment: Checksum error in segment payload [ 102.606846][ T5397] NILFS (loop0): trying rollback from an earlier position [pid 5397] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./26/file0") = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./26") = 0 [pid 5066] mkdir("./27", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 102.686654][ T5397] NILFS (loop0): recovery complete [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5401 ./strace-static-x86_64: Process 5401 attached [pid 5397] <... mount resumed>) = 0 [pid 5401] chdir("./27" [pid 5397] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5397] chdir("./file0") = 0 [pid 5401] <... chdir resumed>) = 0 [pid 5390] <... sendfile resumed>) = 1048576 [pid 5397] ioctl(4, LOOP_CLR_FD [pid 5401] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5390] open(NULL, O_RDONLY [pid 5401] <... prctl resumed>) = 0 [pid 5397] <... ioctl resumed>) = 0 [pid 5390] <... open resumed>) = -1 EFAULT (Bad address) [pid 5401] setpgid(0, 0 [pid 5397] close(4 [pid 5390] exit_group(0 [pid 5401] <... setpgid resumed>) = 0 [pid 5397] <... close resumed>) = 0 [pid 5390] <... exit_group resumed>) = ? [pid 5401] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5397] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5390] +++ exited with 0 +++ [ 102.747557][ T5400] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5401] <... openat resumed>) = 3 [pid 5397] <... open resumed>) = 4 [pid 5401] write(3, "1000", 4 [pid 5397] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5401] <... write resumed>) = 4 [pid 5397] <... open resumed>) = 5 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5390, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5401] close(3 [pid 5397] ftruncate(5, 33587195 [pid 5065] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5401] <... close resumed>) = 0 [pid 5397] <... ftruncate resumed>) = 0 [pid 5401] symlink("/dev/binderfs", "./binderfs" [pid 5397] sendfile(4, 5, NULL, 281474978811909 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5401] <... symlink resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5401] memfd_create("syzkaller", 0 [pid 5065] <... openat resumed>) = 3 [pid 5401] <... memfd_create resumed>) = 3 [pid 5065] fstat(3, [pid 5401] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5401] <... mmap resumed>) = 0x7ff395729000 [pid 5065] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./25/binderfs") = 0 [pid 5065] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5401] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5065] <... umount2 resumed>) = 0 [pid 5401] munmap(0x7ff395729000, 2097152) = 0 [pid 5401] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5401] ioctl(4, LOOP_SET_FD, 3 [pid 5065] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, [pid 5401] <... ioctl resumed>) = 0 [pid 5392] <... sendfile resumed>) = 1048576 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5401] close(3 [pid 5392] open(NULL, O_RDONLY [pid 5065] getdents64(4, [pid 5401] <... close resumed>) = 0 [pid 5392] <... open resumed>) = -1 EFAULT (Bad address) [pid 5401] mkdir("./file0", 0777 [pid 5392] exit_group(0 [pid 5065] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5401] <... mkdir resumed>) = 0 [pid 5392] <... exit_group resumed>) = ? [pid 5065] getdents64(4, [pid 5401] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5392] +++ exited with 0 +++ [pid 5065] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5065] close(4 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5392, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=13 /* 0.13 s */} --- [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./25/file0") = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 103.013062][ T5401] loop4: detected capacity change from 0 to 4096 [pid 5065] <... close resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] rmdir("./25") = 0 [pid 5063] <... openat resumed>) = 3 [pid 5065] mkdir("./26", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5402 ./strace-static-x86_64: Process 5402 attached [pid 5402] chdir("./26") = 0 [pid 5402] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./26/binderfs", [pid 5402] setpgid(0, 0) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./26/binderfs" [pid 5402] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] <... unlink resumed>) = 0 [pid 5402] write(3, "1000", 4 [pid 5063] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5402] <... write resumed>) = 4 [pid 5402] close(3) = 0 [pid 5402] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5402] memfd_create("syzkaller", 0) = 3 [pid 5402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [ 103.111336][ T5401] NILFS (loop4): invalid segment: Checksum error in segment payload [ 103.162714][ T5401] NILFS (loop4): trying rollback from an earlier position [pid 5402] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5395] <... sendfile resumed>) = 1048576 [pid 5395] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5395] exit_group(0) = ? [pid 5395] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5395, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5067] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5394] <... sendfile resumed>) = 1048576 [pid 5067] lstat("./26/binderfs", [pid 5394] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5394] exit_group(0 [pid 5067] unlink("./26/binderfs" [pid 5394] <... exit_group resumed>) = ? [pid 5067] <... unlink resumed>) = 0 [ 103.247529][ T5401] NILFS (loop4): recovery complete [pid 5067] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5402] <... write resumed>) = 2097152 [pid 5394] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5394, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5401] <... mount resumed>) = 0 [pid 5401] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5064] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5401] chdir("./file0") = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5401] ioctl(4, LOOP_CLR_FD) = 0 [pid 5064] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5401] close(4) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5402] munmap(0x7ff395729000, 2097152) = 0 [pid 5401] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5401] <... open resumed>) = 4 [pid 5401] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5401] <... open resumed>) = 5 [pid 5064] lstat("./26/binderfs", [pid 5401] ftruncate(5, 33587195) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5401] sendfile(4, 5, NULL, 281474978811909 [pid 5402] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5064] unlink("./26/binderfs" [pid 5402] <... openat resumed>) = 4 [pid 5064] <... unlink resumed>) = 0 [pid 5402] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5064] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5402] close(3 [pid 5063] fstat(4, [pid 5402] <... close resumed>) = 0 [ 103.289569][ T5403] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.321609][ T5402] loop3: detected capacity change from 0 to 4096 [pid 5402] mkdir("./file0", 0777 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5402] <... mkdir resumed>) = 0 [pid 5402] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5063] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./26/file0") = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./26") = 0 [pid 5063] mkdir("./27", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5404 ./strace-static-x86_64: Process 5404 attached [pid 5404] chdir("./27") = 0 [pid 5404] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5404] setpgid(0, 0) = 0 [ 103.403439][ T5402] NILFS (loop3): invalid segment: Checksum error in segment payload [ 103.415621][ T5402] NILFS (loop3): trying rollback from an earlier position [pid 5404] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... umount2 resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5404] <... openat resumed>) = 3 [pid 5404] write(3, "1000", 4 [pid 5067] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5404] <... write resumed>) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5404] close(3 [pid 5067] lstat("./26/file0", [pid 5064] lstat("./26/file0", [pid 5404] <... close resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5404] symlink("/dev/binderfs", "./binderfs" [pid 5067] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5404] <... symlink resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5404] memfd_create("syzkaller", 0 [pid 5067] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5404] <... memfd_create resumed>) = 3 [pid 5067] <... openat resumed>) = 4 [pid 5064] <... openat resumed>) = 4 [pid 5404] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] fstat(4, [pid 5064] fstat(4, [pid 5404] <... mmap resumed>) = 0x7ff395729000 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5404] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] getdents64(4, [pid 5064] getdents64(4, [pid 5067] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, [pid 5064] getdents64(4, [pid 5067] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] close(4 [pid 5064] close(4 [pid 5067] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5067] rmdir("./26/file0" [pid 5064] rmdir("./26/file0" [pid 5067] <... rmdir resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5067] getdents64(3, [pid 5064] getdents64(3, [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5064] close(3 [pid 5067] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5067] rmdir("./26" [pid 5064] rmdir("./26" [pid 5067] <... rmdir resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5067] mkdir("./27", 0777 [pid 5064] mkdir("./27", 0777 [pid 5067] <... mkdir resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5067] <... openat resumed>) = 3 [pid 5064] <... openat resumed>) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] close(3 [pid 5064] close(3 [pid 5067] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 103.500945][ T5402] NILFS (loop3): recovery complete [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5405 [pid 5064] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5406 ./strace-static-x86_64: Process 5406 attached [pid 5406] chdir("./27"./strace-static-x86_64: Process 5405 attached ) = 0 [pid 5406] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5406] setpgid(0, 0) = 0 [pid 5405] chdir("./27" [pid 5406] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5405] <... chdir resumed>) = 0 [pid 5406] write(3, "1000", 4 [pid 5405] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5406] <... write resumed>) = 4 [pid 5405] <... prctl resumed>) = 0 [pid 5406] close(3 [pid 5405] setpgid(0, 0 [pid 5406] <... close resumed>) = 0 [pid 5405] <... setpgid resumed>) = 0 [pid 5406] symlink("/dev/binderfs", "./binderfs" [pid 5405] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5406] <... symlink resumed>) = 0 [pid 5405] <... openat resumed>) = 3 [pid 5406] memfd_create("syzkaller", 0 [pid 5405] write(3, "1000", 4 [pid 5406] <... memfd_create resumed>) = 3 [pid 5405] <... write resumed>) = 4 [pid 5406] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5405] close(3 [pid 5406] <... mmap resumed>) = 0x7ff395729000 [pid 5405] <... close resumed>) = 0 [pid 5405] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5405] memfd_create("syzkaller", 0) = 3 [pid 5405] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5402] <... mount resumed>) = 0 [pid 5404] <... write resumed>) = 2097152 [pid 5402] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5402] chdir("./file0") = 0 [pid 5402] ioctl(4, LOOP_CLR_FD) = 0 [pid 5402] close(4) = 0 [pid 5402] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5402] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5402] ftruncate(5, 33587195) = 0 [pid 5402] sendfile(4, 5, NULL, 281474978811909 [pid 5405] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5404] munmap(0x7ff395729000, 2097152) = 0 [pid 5404] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 103.567484][ T5407] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5404] ioctl(4, LOOP_SET_FD, 3 [pid 5406] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5404] <... ioctl resumed>) = 0 [pid 5404] close(3) = 0 [pid 5404] mkdir("./file0", 0777) = 0 [ 103.619736][ T5404] loop1: detected capacity change from 0 to 4096 [pid 5404] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5406] <... write resumed>) = 2097152 [pid 5406] munmap(0x7ff395729000, 2097152) = 0 [pid 5406] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5406] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5406] close(3) = 0 [pid 5397] <... sendfile resumed>) = 1048576 [pid 5397] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5397] exit_group(0) = ? [pid 5397] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5397, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5062] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5406] mkdir("./file0", 0777 [pid 5062] fstat(3, [pid 5406] <... mkdir resumed>) = 0 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5406] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5062] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] unlink("./26/binderfs") = 0 [ 103.694322][ T5406] loop2: detected capacity change from 0 to 4096 [pid 5062] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5405] <... write resumed>) = 2097152 [pid 5405] munmap(0x7ff395729000, 2097152) = 0 [pid 5405] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 103.734968][ T5404] NILFS (loop1): invalid segment: Checksum error in segment payload [ 103.758686][ T5404] NILFS (loop1): trying rollback from an earlier position [ 103.773508][ T5406] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5405] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5405] close(3) = 0 [pid 5405] mkdir("./file0", 0777) = 0 [ 103.775898][ T5405] loop5: detected capacity change from 0 to 4096 [ 103.794011][ T5406] NILFS (loop2): trying rollback from an earlier position [ 103.817530][ T5404] NILFS (loop1): recovery complete [ 103.818589][ T5405] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5405] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5404] <... mount resumed>) = 0 [pid 5404] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5404] chdir("./file0") = 0 [pid 5404] ioctl(4, LOOP_CLR_FD) = 0 [pid 5404] close(4) = 0 [pid 5404] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5404] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5404] ftruncate(5, 33587195) = 0 [ 103.834198][ T5406] NILFS (loop2): recovery complete [ 103.835467][ T5405] NILFS (loop5): trying rollback from an earlier position [ 103.861955][ T5408] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5404] sendfile(4, 5, NULL, 281474978811909 [pid 5406] <... mount resumed>) = 0 [pid 5406] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5406] chdir("./file0") = 0 [pid 5406] ioctl(4, LOOP_CLR_FD) = 0 [pid 5406] close(4) = 0 [pid 5406] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5405] <... mount resumed>) = 0 [pid 5406] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5405] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5406] <... open resumed>) = 5 [pid 5406] ftruncate(5, 33587195 [pid 5405] <... openat resumed>) = 3 [pid 5406] <... ftruncate resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5406] sendfile(4, 5, NULL, 281474978811909 [pid 5405] chdir("./file0" [ 103.881655][ T5405] NILFS (loop5): recovery complete [ 103.903829][ T5409] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.920311][ T5410] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5062] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5405] <... chdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5405] ioctl(4, LOOP_CLR_FD [pid 5062] lstat("./26/file0", [pid 5405] <... ioctl resumed>) = 0 [pid 5062] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5405] close(4 [pid 5062] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5405] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5405] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5405] <... open resumed>) = 4 [pid 5062] <... openat resumed>) = 4 [pid 5405] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] fstat(4, [pid 5405] <... open resumed>) = 5 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5405] ftruncate(5, 33587195 [pid 5062] getdents64(4, [pid 5405] <... ftruncate resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5405] sendfile(4, 5, NULL, 281474978811909 [pid 5062] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./26/file0") = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./26") = 0 [pid 5062] mkdir("./27", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5411 ./strace-static-x86_64: Process 5411 attached [pid 5411] chdir("./27") = 0 [pid 5411] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5411] setpgid(0, 0) = 0 [pid 5411] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5411] write(3, "1000", 4) = 4 [pid 5411] close(3) = 0 [pid 5411] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5411] memfd_create("syzkaller", 0) = 3 [pid 5411] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5411] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5401] <... sendfile resumed>) = 1048576 [pid 5401] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5401] exit_group(0) = ? [pid 5401] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5401, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5411] <... write resumed>) = 2097152 [pid 5411] munmap(0x7ff395729000, 2097152) = 0 [pid 5411] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5411] ioctl(4, LOOP_SET_FD, 3 [pid 5066] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5411] <... ioctl resumed>) = 0 [pid 5411] close(3) = 0 [pid 5411] mkdir("./file0", 0777 [pid 5066] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5411] <... mkdir resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5411] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./27/binderfs") = 0 [ 104.237109][ T5411] loop0: detected capacity change from 0 to 4096 [ 104.269731][ T5411] NILFS (loop0): invalid segment: Checksum error in segment payload [ 104.283540][ T5411] NILFS (loop0): trying rollback from an earlier position [ 104.331058][ T5411] NILFS (loop0): recovery complete [pid 5066] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5411] <... mount resumed>) = 0 [pid 5411] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5411] chdir("./file0") = 0 [pid 5411] ioctl(4, LOOP_CLR_FD) = 0 [pid 5411] close(4) = 0 [pid 5411] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5411] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5411] ftruncate(5, 33587195) = 0 [ 104.359978][ T5412] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5411] sendfile(4, 5, NULL, 281474978811909 [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./27/file0") = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./27") = 0 [pid 5066] mkdir("./28", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5413 ./strace-static-x86_64: Process 5413 attached [pid 5413] chdir("./28") = 0 [pid 5413] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5413] setpgid(0, 0) = 0 [pid 5413] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5413] write(3, "1000", 4) = 4 [pid 5413] close(3) = 0 [pid 5413] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5413] memfd_create("syzkaller", 0) = 3 [pid 5413] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5413] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5413] munmap(0x7ff395729000, 2097152) = 0 [pid 5413] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5413] ioctl(4, LOOP_SET_FD, 3 [pid 5402] <... sendfile resumed>) = 1048576 [pid 5402] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5402] exit_group(0) = ? [pid 5402] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5402, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5065] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./26/binderfs") = 0 [pid 5065] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5413] <... ioctl resumed>) = 0 [pid 5413] close(3) = 0 [pid 5413] mkdir("./file0", 0777) = 0 [ 104.694761][ T5413] loop4: detected capacity change from 0 to 4096 [pid 5413] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5404] <... sendfile resumed>) = 1048576 [pid 5404] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5404] exit_group(0) = ? [pid 5404] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5404, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5406] <... sendfile resumed>) = 1048576 [pid 5406] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5063] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5406] exit_group(0 [pid 5063] <... openat resumed>) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5406] <... exit_group resumed>) = ? [pid 5063] getdents64(3, [pid 5406] +++ exited with 0 +++ [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5406, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5063] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] unlink("./27/binderfs" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] <... unlink resumed>) = 0 [pid 5064] fstat(3, [pid 5063] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 104.785878][ T5413] NILFS (loop4): invalid segment: Checksum error in segment payload [ 104.811521][ T5413] NILFS (loop4): trying rollback from an earlier position [pid 5064] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./27/binderfs") = 0 [pid 5064] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5405] <... sendfile resumed>) = 1048576 [pid 5405] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5065] <... umount2 resumed>) = 0 [pid 5405] exit_group(0) = ? [pid 5405] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5405, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5067] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./27/binderfs") = 0 [ 104.890957][ T5413] NILFS (loop4): recovery complete [pid 5067] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5413] <... mount resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./26/file0", [pid 5413] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5413] chdir("./file0") = 0 [pid 5065] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5413] ioctl(4, LOOP_CLR_FD [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5413] <... ioctl resumed>) = 0 [pid 5413] close(4 [pid 5065] <... openat resumed>) = 4 [pid 5413] <... close resumed>) = 0 [pid 5413] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5065] fstat(4, [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5413] <... open resumed>) = 4 [pid 5065] close(4 [pid 5413] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5065] <... close resumed>) = 0 [pid 5413] <... open resumed>) = 5 [pid 5065] rmdir("./26/file0" [pid 5413] ftruncate(5, 33587195 [pid 5065] <... rmdir resumed>) = 0 [pid 5413] <... ftruncate resumed>) = 0 [pid 5065] getdents64(3, [pid 5413] sendfile(4, 5, NULL, 281474978811909 [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] fstat(4, [pid 5065] close(3) = 0 [pid 5065] rmdir("./26" [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5065] mkdir("./27", 0777 [pid 5064] getdents64(4, [pid 5065] <... mkdir resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5064] getdents64(4, [pid 5065] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [ 104.936181][ T5414] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] close(4 [pid 5065] close(3 [pid 5064] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] rmdir("./27/file0" [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5415 [pid 5064] rmdir("./27") = 0 [pid 5064] mkdir("./28", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 ./strace-static-x86_64: Process 5415 attached [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5415] chdir("./27") = 0 [pid 5064] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5416 [pid 5415] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5415] setpgid(0, 0./strace-static-x86_64: Process 5416 attached ) = 0 [pid 5415] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5416] chdir("./28" [pid 5415] <... openat resumed>) = 3 [pid 5415] write(3, "1000", 4 [pid 5416] <... chdir resumed>) = 0 [pid 5415] <... write resumed>) = 4 [pid 5416] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5415] close(3 [pid 5416] <... prctl resumed>) = 0 [pid 5415] <... close resumed>) = 0 [pid 5416] setpgid(0, 0 [pid 5415] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... umount2 resumed>) = 0 [pid 5416] <... setpgid resumed>) = 0 [pid 5416] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5415] <... symlink resumed>) = 0 [pid 5416] <... openat resumed>) = 3 [pid 5415] memfd_create("syzkaller", 0 [pid 5063] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5416] write(3, "1000", 4 [pid 5415] <... memfd_create resumed>) = 3 [pid 5416] <... write resumed>) = 4 [pid 5415] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5416] close(3) = 0 [pid 5416] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5416] memfd_create("syzkaller", 0) = 3 [pid 5415] <... mmap resumed>) = 0x7ff395729000 [pid 5416] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5063] lstat("./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5416] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] close(4 [pid 5415] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./27/file0") = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./27") = 0 [pid 5063] mkdir("./28", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5417 [pid 5067] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5417 attached [pid 5417] chdir("./28" [pid 5067] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5417] <... chdir resumed>) = 0 [pid 5415] <... write resumed>) = 2097152 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5415] munmap(0x7ff395729000, 2097152 [pid 5067] lstat("./27/file0", [pid 5415] <... munmap resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5415] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5067] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5415] <... openat resumed>) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5415] ioctl(4, LOOP_SET_FD, 3 [pid 5067] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5417] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5416] <... write resumed>) = 2097152 [pid 5417] <... prctl resumed>) = 0 [pid 5416] munmap(0x7ff395729000, 2097152 [pid 5417] setpgid(0, 0 [pid 5416] <... munmap resumed>) = 0 [pid 5067] <... openat resumed>) = 4 [pid 5417] <... setpgid resumed>) = 0 [pid 5415] <... ioctl resumed>) = 0 [pid 5067] fstat(4, [pid 5415] close(3 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5415] <... close resumed>) = 0 [pid 5067] getdents64(4, [pid 5415] mkdir("./file0", 0777 [pid 5067] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5415] <... mkdir resumed>) = 0 [pid 5067] getdents64(4, [pid 5415] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5067] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5417] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] close(4) = 0 [pid 5067] rmdir("./27/file0") = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./27") = 0 [pid 5067] mkdir("./28", 0777) = 0 [pid 5417] <... openat resumed>) = 3 [pid 5417] write(3, "1000", 4 [pid 5416] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5417] <... write resumed>) = 4 [pid 5416] <... openat resumed>) = 4 [pid 5417] close(3 [pid 5416] ioctl(4, LOOP_SET_FD, 3 [pid 5417] <... close resumed>) = 0 [pid 5417] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5417] memfd_create("syzkaller", 0) = 3 [pid 5417] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [ 105.221309][ T5415] loop3: detected capacity change from 0 to 4096 [pid 5067] <... openat resumed>) = 3 [pid 5416] <... ioctl resumed>) = 0 [pid 5416] close(3) = 0 [pid 5416] mkdir("./file0", 0777) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5416] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5417] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5411] <... sendfile resumed>) = 1048576 [pid 5067] close(3 [pid 5411] open(NULL, O_RDONLY [pid 5067] <... close resumed>) = 0 [ 105.261598][ T5416] loop2: detected capacity change from 0 to 4096 [ 105.270035][ T5415] NILFS (loop3): invalid segment: Checksum error in segment payload [ 105.278678][ T5415] NILFS (loop3): trying rollback from an earlier position [pid 5411] <... open resumed>) = -1 EFAULT (Bad address) [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5411] exit_group(0) = ? [pid 5411] +++ exited with 0 +++ [pid 5067] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5418 ./strace-static-x86_64: Process 5418 attached [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5411, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5062] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, [pid 5418] chdir("./28" [pid 5417] <... write resumed>) = 2097152 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5418] <... chdir resumed>) = 0 [pid 5417] munmap(0x7ff395729000, 2097152 [pid 5418] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5417] <... munmap resumed>) = 0 [pid 5418] <... prctl resumed>) = 0 [pid 5417] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5418] setpgid(0, 0 [pid 5417] <... openat resumed>) = 4 [pid 5418] <... setpgid resumed>) = 0 [pid 5417] ioctl(4, LOOP_SET_FD, 3 [pid 5418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5415] <... mount resumed>) = 0 [pid 5062] getdents64(3, [pid 5418] <... openat resumed>) = 3 [pid 5415] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5418] write(3, "1000", 4 [pid 5415] <... openat resumed>) = 3 [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5418] <... write resumed>) = 4 [pid 5415] chdir("./file0" [pid 5418] close(3 [pid 5415] <... chdir resumed>) = 0 [pid 5062] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5418] <... close resumed>) = 0 [pid 5415] ioctl(4, LOOP_CLR_FD [pid 5418] symlink("/dev/binderfs", "./binderfs" [ 105.333588][ T5415] NILFS (loop3): recovery complete [ 105.347786][ T5419] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.348753][ T5416] NILFS (loop2): invalid segment: Checksum error in segment payload [ 105.362437][ T5417] loop1: detected capacity change from 0 to 4096 [pid 5415] <... ioctl resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5418] <... symlink resumed>) = 0 [pid 5415] close(4 [pid 5418] memfd_create("syzkaller", 0 [pid 5415] <... close resumed>) = 0 [pid 5062] lstat("./27/binderfs", [pid 5418] <... memfd_create resumed>) = 3 [pid 5415] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5418] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5416] <... mount resumed>) = 0 [pid 5062] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5417] <... ioctl resumed>) = 0 [pid 5417] close(3) = 0 [pid 5417] mkdir("./file0", 0777) = 0 [pid 5417] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5416] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5415] <... open resumed>) = 4 [pid 5062] unlink("./27/binderfs" [pid 5418] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5416] chdir("./file0" [pid 5415] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] <... unlink resumed>) = 0 [pid 5416] <... chdir resumed>) = 0 [pid 5062] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5416] ioctl(4, LOOP_CLR_FD [pid 5415] <... open resumed>) = 5 [pid 5416] <... ioctl resumed>) = 0 [pid 5416] close(4) = 0 [ 105.380724][ T5416] NILFS (loop2): trying rollback from an earlier position [ 105.396430][ T5416] NILFS (loop2): recovery complete [ 105.405499][ T5420] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5415] ftruncate(5, 33587195 [pid 5416] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5415] <... ftruncate resumed>) = 0 [pid 5415] sendfile(4, 5, NULL, 281474978811909 [pid 5416] <... open resumed>) = 4 [pid 5416] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5416] ftruncate(5, 33587195) = 0 [ 105.464768][ T5417] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5416] sendfile(4, 5, NULL, 281474978811909 [pid 5418] <... write resumed>) = 2097152 [pid 5418] munmap(0x7ff395729000, 2097152) = 0 [pid 5418] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 105.511278][ T5417] NILFS (loop1): trying rollback from an earlier position [ 105.532655][ T5418] loop5: detected capacity change from 0 to 4096 [pid 5418] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5418] close(3) = 0 [pid 5418] mkdir("./file0", 0777) = 0 [ 105.562471][ T5417] NILFS (loop1): recovery complete [pid 5418] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5417] <... mount resumed>) = 0 [pid 5417] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5417] chdir("./file0") = 0 [ 105.594827][ T5421] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5417] ioctl(4, LOOP_CLR_FD) = 0 [pid 5417] close(4) = 0 [pid 5417] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] <... umount2 resumed>) = 0 [pid 5417] <... open resumed>) = 4 [pid 5062] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5417] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5417] <... open resumed>) = 5 [pid 5417] ftruncate(5, 33587195 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5417] <... ftruncate resumed>) = 0 [pid 5417] sendfile(4, 5, NULL, 281474978811909 [pid 5062] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./27/file0") = 0 [ 105.639280][ T5418] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5062] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./27") = 0 [pid 5062] mkdir("./28", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5422 ./strace-static-x86_64: Process 5422 attached [pid 5422] chdir("./28") = 0 [pid 5422] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 105.702659][ T5418] NILFS (loop5): trying rollback from an earlier position [pid 5422] setpgid(0, 0) = 0 [pid 5422] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5422] write(3, "1000", 4) = 4 [pid 5422] close(3) = 0 [pid 5422] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5413] <... sendfile resumed>) = 1048576 [pid 5422] memfd_create("syzkaller", 0 [pid 5413] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5413] exit_group(0) = ? [pid 5422] <... memfd_create resumed>) = 3 [pid 5422] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5413] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5413, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5066] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 105.796048][ T5418] NILFS (loop5): recovery complete [pid 5418] <... mount resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5418] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] <... openat resumed>) = 3 [pid 5418] <... openat resumed>) = 3 [pid 5066] fstat(3, [pid 5418] chdir("./file0" [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5418] <... chdir resumed>) = 0 [pid 5066] getdents64(3, [pid 5418] ioctl(4, LOOP_CLR_FD) = 0 [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5418] close(4 [pid 5066] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5418] <... close resumed>) = 0 [pid 5418] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5418] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5418] <... open resumed>) = 5 [pid 5066] lstat("./28/binderfs", [pid 5418] ftruncate(5, 33587195 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5418] <... ftruncate resumed>) = 0 [pid 5066] unlink("./28/binderfs" [pid 5418] sendfile(4, 5, NULL, 281474978811909 [pid 5066] <... unlink resumed>) = 0 [ 105.822278][ T5423] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5066] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5422] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5422] munmap(0x7ff395729000, 2097152) = 0 [pid 5422] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5422] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5422] close(3) = 0 [pid 5422] mkdir("./file0", 0777) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5422] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5066] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 105.999551][ T5422] loop0: detected capacity change from 0 to 4096 [pid 5066] lstat("./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./28/file0") = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./28") = 0 [pid 5066] mkdir("./29", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5424 ./strace-static-x86_64: Process 5424 attached [ 106.081230][ T5422] NILFS (loop0): invalid segment: Checksum error in segment payload [ 106.089286][ T5422] NILFS (loop0): trying rollback from an earlier position [pid 5424] chdir("./29") = 0 [pid 5424] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5424] setpgid(0, 0) = 0 [pid 5424] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5424] write(3, "1000", 4) = 4 [pid 5424] close(3) = 0 [pid 5424] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5424] memfd_create("syzkaller", 0) = 3 [pid 5424] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5422] <... mount resumed>) = 0 [pid 5422] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5424] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5422] <... openat resumed>) = 3 [pid 5422] chdir("./file0") = 0 [pid 5422] ioctl(4, LOOP_CLR_FD [pid 5415] <... sendfile resumed>) = 1048576 [pid 5422] <... ioctl resumed>) = 0 [pid 5415] open(NULL, O_RDONLY [pid 5422] close(4 [pid 5415] <... open resumed>) = -1 EFAULT (Bad address) [ 106.212421][ T5422] NILFS (loop0): recovery complete [ 106.226236][ T5425] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5422] <... close resumed>) = 0 [pid 5422] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5415] exit_group(0 [pid 5422] <... open resumed>) = 4 [pid 5415] <... exit_group resumed>) = ? [pid 5422] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5415] +++ exited with 0 +++ [pid 5422] <... open resumed>) = 5 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5415, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5422] ftruncate(5, 33587195 [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5422] <... ftruncate resumed>) = 0 [pid 5065] <... restart_syscall resumed>) = 0 [pid 5424] <... write resumed>) = 2097152 [pid 5422] sendfile(4, 5, NULL, 281474978811909 [pid 5065] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./27/binderfs") = 0 [pid 5065] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5424] munmap(0x7ff395729000, 2097152) = 0 [pid 5424] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5424] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5424] close(3) = 0 [pid 5424] mkdir("./file0", 0777) = 0 [ 106.355350][ T5424] loop4: detected capacity change from 0 to 4096 [pid 5424] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5416] <... sendfile resumed>) = 1048576 [pid 5416] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5416] exit_group(0) = ? [pid 5416] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5416, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5064] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./28/binderfs") = 0 [pid 5064] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5417] <... sendfile resumed>) = 1048576 [pid 5065] <... umount2 resumed>) = 0 [pid 5417] open(NULL, O_RDONLY [pid 5065] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5417] <... open resumed>) = -1 EFAULT (Bad address) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5417] exit_group(0) = ? [pid 5065] lstat("./27/file0", [ 106.442808][ T5424] NILFS (loop4): invalid segment: Checksum error in segment payload [ 106.481206][ T5424] NILFS (loop4): trying rollback from an earlier position [pid 5417] +++ exited with 0 +++ [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5417, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5065] <... openat resumed>) = 4 [pid 5063] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] fstat(4, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, [pid 5063] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, [pid 5063] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] fstat(3, [pid 5065] close(4) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] rmdir("./27/file0" [pid 5063] getdents64(3, [pid 5065] <... rmdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] getdents64(3, [pid 5063] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] close(3 [pid 5063] lstat("./28/binderfs", [pid 5065] <... close resumed>) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] rmdir("./27" [pid 5063] unlink("./28/binderfs" [pid 5065] <... rmdir resumed>) = 0 [pid 5065] mkdir("./28", 0777 [pid 5063] <... unlink resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5063] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5426 ./strace-static-x86_64: Process 5426 attached [pid 5426] chdir("./28") = 0 [pid 5426] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5426] setpgid(0, 0) = 0 [ 106.565210][ T5424] NILFS (loop4): recovery complete [pid 5426] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5424] <... mount resumed>) = 0 [pid 5426] <... openat resumed>) = 3 [pid 5424] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5426] write(3, "1000", 4 [pid 5424] <... openat resumed>) = 3 [pid 5426] <... write resumed>) = 4 [pid 5424] chdir("./file0" [pid 5426] close(3 [pid 5424] <... chdir resumed>) = 0 [pid 5426] <... close resumed>) = 0 [pid 5424] ioctl(4, LOOP_CLR_FD [pid 5426] symlink("/dev/binderfs", "./binderfs" [pid 5424] <... ioctl resumed>) = 0 [pid 5426] <... symlink resumed>) = 0 [pid 5424] close(4 [pid 5426] memfd_create("syzkaller", 0 [pid 5424] <... close resumed>) = 0 [pid 5426] <... memfd_create resumed>) = 3 [pid 5424] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5426] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5424] <... open resumed>) = 4 [pid 5426] <... mmap resumed>) = 0x7ff395729000 [pid 5424] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5424] ftruncate(5, 33587195) = 0 [ 106.614117][ T5427] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5424] sendfile(4, 5, NULL, 281474978811909 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./28/file0") = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5426] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] rmdir("./28") = 0 [pid 5064] mkdir("./29", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5428 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./28/file0", ./strace-static-x86_64: Process 5428 attached [pid 5426] <... write resumed>) = 2097152 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5428] chdir("./29" [pid 5426] munmap(0x7ff395729000, 2097152 [pid 5063] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5428] <... chdir resumed>) = 0 [pid 5426] <... munmap resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5428] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5426] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5428] <... prctl resumed>) = 0 [pid 5426] <... openat resumed>) = 4 [pid 5063] <... openat resumed>) = 4 [pid 5428] setpgid(0, 0 [pid 5426] ioctl(4, LOOP_SET_FD, 3 [pid 5063] fstat(4, [pid 5428] <... setpgid resumed>) = 0 [pid 5418] <... sendfile resumed>) = 1048576 [pid 5418] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5418] exit_group(0) = ? [pid 5418] +++ exited with 0 +++ [pid 5426] <... ioctl resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5418, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5428] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] getdents64(4, [pid 5428] write(3, "1000", 4) = 4 [pid 5426] close(3 [pid 5063] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5428] close(3 [pid 5063] getdents64(4, [pid 5426] <... close resumed>) = 0 [pid 5426] mkdir("./file0", 0777 [pid 5428] <... close resumed>) = 0 [pid 5067] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5428] symlink("/dev/binderfs", "./binderfs" [pid 5426] <... mkdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] close(4 [pid 5428] <... symlink resumed>) = 0 [pid 5426] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5067] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5428] memfd_create("syzkaller", 0 [pid 5067] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5428] <... memfd_create resumed>) = 3 [pid 5067] fstat(3, [pid 5063] rmdir("./28/file0" [pid 5428] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5428] <... mmap resumed>) = 0x7ff395729000 [pid 5067] getdents64(3, [pid 5063] getdents64(3, [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... close resumed>) = 0 [pid 5067] lstat("./28/binderfs", [pid 5063] rmdir("./28" [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5067] unlink("./28/binderfs" [ 106.792641][ T5426] loop3: detected capacity change from 0 to 4096 [pid 5063] mkdir("./29", 0777 [pid 5067] <... unlink resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5067] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3 [pid 5428] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5429 ./strace-static-x86_64: Process 5429 attached [pid 5429] chdir("./29") = 0 [pid 5429] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5429] setpgid(0, 0) = 0 [pid 5429] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 106.853127][ T5426] NILFS (loop3): invalid segment: Checksum error in segment payload [ 106.873596][ T5426] NILFS (loop3): trying rollback from an earlier position [pid 5429] write(3, "1000", 4) = 4 [pid 5429] close(3) = 0 [pid 5429] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5429] memfd_create("syzkaller", 0 [pid 5428] <... write resumed>) = 2097152 [pid 5429] <... memfd_create resumed>) = 3 [pid 5428] munmap(0x7ff395729000, 2097152 [pid 5429] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5428] <... munmap resumed>) = 0 [ 106.906164][ T5426] NILFS (loop3): recovery complete [pid 5428] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5428] ioctl(4, LOOP_SET_FD, 3 [pid 5429] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5428] <... ioctl resumed>) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5426] <... mount resumed>) = 0 [pid 5428] close(3 [pid 5067] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5428] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5428] mkdir("./file0", 0777 [pid 5426] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] lstat("./28/file0", [pid 5428] <... mkdir resumed>) = 0 [pid 5426] <... openat resumed>) = 3 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5428] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [ 106.952234][ T5428] loop2: detected capacity change from 0 to 4096 [ 106.953324][ T5430] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5067] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5426] chdir("./file0" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5426] <... chdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, [pid 5426] ioctl(4, LOOP_CLR_FD [pid 5067] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5426] <... ioctl resumed>) = 0 [pid 5067] close(4 [pid 5426] close(4 [pid 5067] <... close resumed>) = 0 [pid 5426] <... close resumed>) = 0 [pid 5067] rmdir("./28/file0") = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./28") = 0 [pid 5067] mkdir("./29", 0777 [pid 5426] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5067] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5426] <... open resumed>) = 4 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5426] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5426] <... open resumed>) = 5 [pid 5067] close(3 [pid 5426] ftruncate(5, 33587195 [pid 5067] <... close resumed>) = 0 [pid 5426] <... ftruncate resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5429] <... write resumed>) = 2097152 [pid 5067] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5431 [pid 5429] munmap(0x7ff395729000, 2097152./strace-static-x86_64: Process 5431 attached [pid 5431] chdir("./29" [pid 5429] <... munmap resumed>) = 0 [pid 5426] sendfile(4, 5, NULL, 281474978811909 [pid 5431] <... chdir resumed>) = 0 [pid 5429] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5431] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5429] <... openat resumed>) = 4 [pid 5431] <... prctl resumed>) = 0 [pid 5429] ioctl(4, LOOP_SET_FD, 3 [pid 5431] setpgid(0, 0) = 0 [pid 5431] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5431] write(3, "1000", 4) = 4 [pid 5431] close(3) = 0 [pid 5431] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5431] memfd_create("syzkaller", 0) = 3 [pid 5431] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5429] <... ioctl resumed>) = 0 [pid 5429] close(3) = 0 [pid 5429] mkdir("./file0", 0777) = 0 [ 107.035330][ T5428] NILFS (loop2): invalid segment: Checksum error in segment payload [ 107.048802][ T5429] loop1: detected capacity change from 0 to 4096 [ 107.065101][ T5428] NILFS (loop2): trying rollback from an earlier position [pid 5429] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5428] <... mount resumed>) = 0 [pid 5431] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 107.119810][ T5429] NILFS (loop1): invalid segment: Checksum error in segment payload [ 107.128515][ T5428] NILFS (loop2): recovery complete [ 107.154550][ T5432] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5428] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5428] chdir("./file0") = 0 [pid 5428] ioctl(4, LOOP_CLR_FD [pid 5422] <... sendfile resumed>) = 1048576 [pid 5428] <... ioctl resumed>) = 0 [pid 5422] open(NULL, O_RDONLY [pid 5428] close(4 [pid 5422] <... open resumed>) = -1 EFAULT (Bad address) [pid 5428] <... close resumed>) = 0 [pid 5428] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5422] exit_group(0) = ? [pid 5428] <... open resumed>) = 4 [pid 5428] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5422] +++ exited with 0 +++ [pid 5429] <... mount resumed>) = 0 [pid 5428] <... open resumed>) = 5 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5422, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5429] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5428] ftruncate(5, 33587195 [pid 5429] <... openat resumed>) = 3 [pid 5428] <... ftruncate resumed>) = 0 [pid 5429] chdir("./file0" [pid 5428] sendfile(4, 5, NULL, 281474978811909 [pid 5062] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5429] <... chdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5429] ioctl(4, LOOP_CLR_FD [pid 5062] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5429] <... ioctl resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5429] close(4 [pid 5062] fstat(3, [pid 5429] <... close resumed>) = 0 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5429] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] getdents64(3, [pid 5429] <... open resumed>) = 4 [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [ 107.165804][ T5429] NILFS (loop1): trying rollback from an earlier position [ 107.183208][ T5429] NILFS (loop1): recovery complete [ 107.208367][ T5433] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5429] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5431] <... write resumed>) = 2097152 [pid 5429] <... open resumed>) = 5 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5431] munmap(0x7ff395729000, 2097152 [pid 5429] ftruncate(5, 33587195 [pid 5062] lstat("./28/binderfs", [pid 5431] <... munmap resumed>) = 0 [pid 5429] <... ftruncate resumed>) = 0 [pid 5062] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5429] sendfile(4, 5, NULL, 281474978811909 [pid 5062] unlink("./28/binderfs" [pid 5431] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5062] <... unlink resumed>) = 0 [pid 5431] <... openat resumed>) = 4 [pid 5062] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5431] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5431] close(3) = 0 [pid 5431] mkdir("./file0", 0777) = 0 [ 107.270206][ T5431] loop5: detected capacity change from 0 to 4096 [ 107.310577][ T5431] NILFS (loop5): invalid segment: Checksum error in segment payload [ 107.329871][ T5431] NILFS (loop5): trying rollback from an earlier position [ 107.395585][ T5431] NILFS (loop5): recovery complete [pid 5431] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "") = 0 [pid 5431] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] <... umount2 resumed>) = 0 [pid 5431] chdir("./file0") = 0 [pid 5431] ioctl(4, LOOP_CLR_FD) = 0 [pid 5431] close(4 [pid 5062] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5431] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5431] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5431] <... open resumed>) = 4 [pid 5062] getdents64(4, [pid 5431] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5431] <... open resumed>) = 5 [pid 5062] getdents64(4, [pid 5431] ftruncate(5, 33587195 [pid 5062] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5431] <... ftruncate resumed>) = 0 [pid 5062] close(4 [pid 5431] sendfile(4, 5, NULL, 281474978811909 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./28/file0") = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [ 107.458041][ T5434] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5062] rmdir("./28") = 0 [pid 5062] mkdir("./29", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5435 ./strace-static-x86_64: Process 5435 attached [pid 5435] chdir("./29") = 0 [pid 5435] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5435] setpgid(0, 0) = 0 [pid 5424] <... sendfile resumed>) = 1048576 [pid 5424] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5435] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5424] exit_group(0 [pid 5435] <... openat resumed>) = 3 [pid 5424] <... exit_group resumed>) = ? [pid 5435] write(3, "1000", 4 [pid 5424] +++ exited with 0 +++ [pid 5435] <... write resumed>) = 4 [pid 5435] close(3 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5424, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5435] <... close resumed>) = 0 [pid 5066] restart_syscall(<... resuming interrupted clone ...> [pid 5435] symlink("/dev/binderfs", "./binderfs" [pid 5066] <... restart_syscall resumed>) = 0 [pid 5435] <... symlink resumed>) = 0 [pid 5066] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5435] memfd_create("syzkaller", 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5435] <... memfd_create resumed>) = 3 [pid 5066] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5435] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] <... openat resumed>) = 3 [pid 5435] <... mmap resumed>) = 0x7ff395729000 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./29/binderfs") = 0 [pid 5066] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5435] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5435] munmap(0x7ff395729000, 2097152) = 0 [pid 5435] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5435] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5435] close(3) = 0 [pid 5435] mkdir("./file0", 0777) = 0 [ 107.753588][ T5435] loop0: detected capacity change from 0 to 4096 [pid 5435] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 107.818545][ T5435] NILFS (loop0): invalid segment: Checksum error in segment payload [ 107.828921][ T5435] NILFS (loop0): trying rollback from an earlier position [pid 5066] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./29/file0") = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./29") = 0 [pid 5066] mkdir("./30", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5437 ./strace-static-x86_64: Process 5437 attached [pid 5435] <... mount resumed>) = 0 [pid 5435] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5435] chdir("./file0" [pid 5437] chdir("./30" [pid 5435] <... chdir resumed>) = 0 [pid 5437] <... chdir resumed>) = 0 [pid 5435] ioctl(4, LOOP_CLR_FD [pid 5437] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5435] <... ioctl resumed>) = 0 [pid 5437] <... prctl resumed>) = 0 [pid 5435] close(4 [pid 5437] setpgid(0, 0 [pid 5435] <... close resumed>) = 0 [ 107.911264][ T5435] NILFS (loop0): recovery complete [ 107.925725][ T5436] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5437] <... setpgid resumed>) = 0 [pid 5435] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5437] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5435] <... open resumed>) = 4 [pid 5437] <... openat resumed>) = 3 [pid 5435] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5437] write(3, "1000", 4 [pid 5435] <... open resumed>) = 5 [pid 5437] <... write resumed>) = 4 [pid 5435] ftruncate(5, 33587195 [pid 5437] close(3 [pid 5435] <... ftruncate resumed>) = 0 [pid 5437] <... close resumed>) = 0 [pid 5435] sendfile(4, 5, NULL, 281474978811909 [pid 5437] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5426] <... sendfile resumed>) = 1048576 [pid 5437] memfd_create("syzkaller", 0 [pid 5426] open(NULL, O_RDONLY [pid 5437] <... memfd_create resumed>) = 3 [pid 5437] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5426] <... open resumed>) = -1 EFAULT (Bad address) [pid 5437] <... mmap resumed>) = 0x7ff395729000 [pid 5426] exit_group(0) = ? [pid 5426] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5426, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 5065] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./28/binderfs") = 0 [pid 5065] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5437] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5437] munmap(0x7ff395729000, 2097152) = 0 [pid 5437] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5437] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... umount2 resumed>) = 0 [pid 5437] <... ioctl resumed>) = 0 [pid 5429] <... sendfile resumed>) = 1048576 [pid 5428] <... sendfile resumed>) = 1048576 [pid 5437] close(3 [pid 5429] open(NULL, O_RDONLY [pid 5428] open(NULL, O_RDONLY [pid 5065] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5437] <... close resumed>) = 0 [pid 5429] <... open resumed>) = -1 EFAULT (Bad address) [pid 5428] <... open resumed>) = -1 EFAULT (Bad address) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5437] mkdir("./file0", 0777 [pid 5429] exit_group(0 [pid 5428] exit_group(0 [pid 5065] lstat("./28/file0", [pid 5437] <... mkdir resumed>) = 0 [pid 5429] <... exit_group resumed>) = ? [pid 5428] <... exit_group resumed>) = ? [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5437] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5429] +++ exited with 0 +++ [pid 5428] +++ exited with 0 +++ [pid 5065] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5428, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 5065] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5429, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5065] <... openat resumed>) = 4 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5065] fstat(4, [pid 5063] <... restart_syscall resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(4, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] close(4 [pid 5063] <... openat resumed>) = 3 [pid 5065] <... close resumed>) = 0 [pid 5063] fstat(3, [pid 5065] rmdir("./28/file0" [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, [pid 5065] getdents64(3, [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] close(3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... close resumed>) = 0 [pid 5063] lstat("./29/binderfs", [pid 5065] rmdir("./28" [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5063] unlink("./29/binderfs" [pid 5065] mkdir("./29", 0777 [pid 5063] <... unlink resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5063] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 108.191232][ T5437] loop4: detected capacity change from 0 to 4096 [ 108.225974][ T5437] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5065] close(3) = 0 [pid 5064] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5438 [pid 5064] <... openat resumed>) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./29/binderfs"./strace-static-x86_64: Process 5438 attached [pid 5438] chdir("./29" [pid 5064] <... unlink resumed>) = 0 [pid 5438] <... chdir resumed>) = 0 [pid 5064] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5438] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5438] setpgid(0, 0) = 0 [pid 5438] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 108.248655][ T5437] NILFS (loop4): trying rollback from an earlier position [pid 5438] write(3, "1000", 4) = 4 [pid 5438] close(3) = 0 [pid 5438] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5438] memfd_create("syzkaller", 0) = 3 [pid 5438] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5431] <... sendfile resumed>) = 1048576 [pid 5431] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5431] exit_group(0) = ? [pid 5431] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5431, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [ 108.308453][ T5437] NILFS (loop4): recovery complete [pid 5438] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5437] <... mount resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5437] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... openat resumed>) = 3 [pid 5437] <... openat resumed>) = 3 [pid 5067] fstat(3, [pid 5437] chdir("./file0" [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5437] <... chdir resumed>) = 0 [pid 5067] getdents64(3, [pid 5437] ioctl(4, LOOP_CLR_FD [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5437] <... ioctl resumed>) = 0 [pid 5067] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5437] close(4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5437] <... close resumed>) = 0 [pid 5067] lstat("./29/binderfs", [pid 5438] <... write resumed>) = 2097152 [pid 5437] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./29/binderfs" [pid 5437] <... open resumed>) = 4 [pid 5067] <... unlink resumed>) = 0 [ 108.354291][ T5439] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5437] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5067] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5437] <... open resumed>) = 5 [pid 5437] ftruncate(5, 33587195) = 0 [pid 5438] munmap(0x7ff395729000, 2097152 [pid 5437] sendfile(4, 5, NULL, 281474978811909 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5063] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5438] <... munmap resumed>) = 0 [pid 5063] rmdir("./29/file0") = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./29") = 0 [pid 5063] mkdir("./30", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5438] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] close(3 [pid 5438] <... openat resumed>) = 4 [pid 5063] <... close resumed>) = 0 [pid 5064] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5438] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./29/file0", [pid 5063] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5440 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5440 attached [pid 5064] getdents64(4, [pid 5440] chdir("./30") = 0 [pid 5064] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5440] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] getdents64(4, [pid 5440] <... prctl resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5440] setpgid(0, 0 [pid 5064] close(4 [pid 5440] <... setpgid resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5440] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] rmdir("./29/file0" [pid 5440] <... openat resumed>) = 3 [pid 5064] <... rmdir resumed>) = 0 [pid 5440] write(3, "1000", 4 [pid 5064] getdents64(3, [pid 5440] <... write resumed>) = 4 [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5440] close(3 [pid 5064] close(3 [pid 5440] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5440] symlink("/dev/binderfs", "./binderfs" [pid 5064] rmdir("./29" [pid 5440] <... symlink resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5440] memfd_create("syzkaller", 0 [pid 5064] mkdir("./30", 0777 [pid 5440] <... memfd_create resumed>) = 3 [pid 5438] <... ioctl resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5440] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5438] close(3 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5440] <... mmap resumed>) = 0x7ff395729000 [pid 5064] <... openat resumed>) = 3 [pid 5438] <... close resumed>) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5438] mkdir("./file0", 0777 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] close(3 [pid 5438] <... mkdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5438] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5064] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5441 ./strace-static-x86_64: Process 5441 attached [ 108.467136][ T5438] loop3: detected capacity change from 0 to 4096 [pid 5441] chdir("./30") = 0 [pid 5440] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5441] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5441] setpgid(0, 0) = 0 [pid 5441] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5441] write(3, "1000", 4) = 4 [pid 5441] close(3) = 0 [pid 5441] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5441] memfd_create("syzkaller", 0) = 3 [pid 5441] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5441] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] <... umount2 resumed>) = 0 [pid 5440] <... write resumed>) = 2097152 [pid 5441] <... write resumed>) = 2097152 [ 108.569070][ T5438] NILFS (loop3): invalid segment: Checksum error in segment payload [ 108.608141][ T5438] NILFS (loop3): trying rollback from an earlier position [pid 5067] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5440] munmap(0x7ff395729000, 2097152 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./29/file0", [pid 5440] <... munmap resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5440] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5440] ioctl(4, LOOP_SET_FD, 3 [pid 5067] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, [pid 5440] <... ioctl resumed>) = 0 [pid 5440] close(3) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5440] mkdir("./file0", 0777 [pid 5067] rmdir("./29/file0") = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./29") = 0 [pid 5067] mkdir("./30", 0777 [pid 5440] <... mkdir resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3 [pid 5441] munmap(0x7ff395729000, 2097152) = 0 [pid 5067] <... close resumed>) = 0 [pid 5440] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5441] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 5442 attached ) = 4 [pid 5067] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5442 [pid 5442] chdir("./30" [ 108.655642][ T5440] loop1: detected capacity change from 0 to 4096 [ 108.690495][ T5438] NILFS (loop3): recovery complete [pid 5441] ioctl(4, LOOP_SET_FD, 3 [pid 5442] <... chdir resumed>) = 0 [pid 5442] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5442] setpgid(0, 0) = 0 [pid 5441] <... ioctl resumed>) = 0 [pid 5442] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5442] write(3, "1000", 4) = 4 [pid 5438] <... mount resumed>) = 0 [pid 5441] close(3 [pid 5438] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5442] close(3 [pid 5438] <... openat resumed>) = 3 [pid 5442] <... close resumed>) = 0 [pid 5438] chdir("./file0" [pid 5442] symlink("/dev/binderfs", "./binderfs" [pid 5438] <... chdir resumed>) = 0 [pid 5442] <... symlink resumed>) = 0 [pid 5438] ioctl(4, LOOP_CLR_FD) = 0 [pid 5442] memfd_create("syzkaller", 0 [pid 5438] close(4 [pid 5442] <... memfd_create resumed>) = 3 [pid 5441] <... close resumed>) = 0 [pid 5438] <... close resumed>) = 0 [pid 5441] mkdir("./file0", 0777) = 0 [pid 5441] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5442] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5438] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5442] <... mmap resumed>) = 0x7ff395729000 [ 108.709876][ T5441] loop2: detected capacity change from 0 to 4096 [ 108.721958][ T5440] NILFS (loop1): invalid segment: Checksum error in segment payload [ 108.739928][ T5443] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5438] <... open resumed>) = 4 [pid 5438] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5438] ftruncate(5, 33587195) = 0 [pid 5438] sendfile(4, 5, NULL, 281474978811909 [pid 5435] <... sendfile resumed>) = 1048576 [pid 5435] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5435] exit_group(0) = ? [pid 5435] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5435, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [ 108.789819][ T5440] NILFS (loop1): trying rollback from an earlier position [ 108.797586][ T5441] NILFS (loop2): invalid segment: Checksum error in segment payload [ 108.806222][ T5441] NILFS (loop2): trying rollback from an earlier position [ 108.829466][ T5440] NILFS (loop1): recovery complete [pid 5062] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5442] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5440] <... mount resumed>) = 0 [pid 5440] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5440] chdir("./file0") = 0 [pid 5440] ioctl(4, LOOP_CLR_FD) = 0 [pid 5440] close(4) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5440] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5440] <... open resumed>) = 4 [pid 5062] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5440] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5440] <... open resumed>) = 5 [pid 5440] ftruncate(5, 33587195 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5440] <... ftruncate resumed>) = 0 [pid 5062] lstat("./29/binderfs", [ 108.849608][ T5441] NILFS (loop2): recovery complete [pid 5440] sendfile(4, 5, NULL, 281474978811909 [pid 5062] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5442] <... write resumed>) = 2097152 [pid 5441] <... mount resumed>) = 0 [pid 5062] unlink("./29/binderfs" [pid 5442] munmap(0x7ff395729000, 2097152 [pid 5441] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... unlink resumed>) = 0 [pid 5442] <... munmap resumed>) = 0 [pid 5441] <... openat resumed>) = 3 [pid 5062] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5442] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5441] chdir("./file0" [pid 5442] <... openat resumed>) = 4 [pid 5442] ioctl(4, LOOP_SET_FD, 3 [pid 5441] <... chdir resumed>) = 0 [pid 5441] ioctl(4, LOOP_CLR_FD) = 0 [pid 5442] <... ioctl resumed>) = 0 [pid 5442] close(3 [pid 5441] close(4) = 0 [pid 5442] <... close resumed>) = 0 [pid 5442] mkdir("./file0", 0777) = 0 [pid 5441] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5442] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5441] <... open resumed>) = 4 [pid 5441] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5441] ftruncate(5, 33587195) = 0 [ 108.898016][ T5445] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.905255][ T5444] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.931260][ T5442] loop5: detected capacity change from 0 to 4096 [ 109.013075][ T5442] NILFS (loop5): invalid segment: Checksum error in segment payload [ 109.063442][ T5442] NILFS (loop5): trying rollback from an earlier position [pid 5441] sendfile(4, 5, NULL, 281474978811909 [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./29/file0") = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [ 109.157210][ T5442] NILFS (loop5): recovery complete [pid 5062] rmdir("./29") = 0 [pid 5062] mkdir("./30", 0777) = 0 [pid 5442] <... mount resumed>) = 0 [pid 5442] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5442] <... openat resumed>) = 3 [pid 5062] <... openat resumed>) = 3 [pid 5442] chdir("./file0" [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5442] <... chdir resumed>) = 0 [pid 5062] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5442] ioctl(4, LOOP_CLR_FD [pid 5062] close(3 [pid 5442] <... ioctl resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5442] close(4 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5442] <... close resumed>) = 0 [pid 5442] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5447 [pid 5442] <... open resumed>) = 4 [pid 5442] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5442] ftruncate(5, 33587195) = 0 [pid 5442] sendfile(4, 5, NULL, 281474978811909./strace-static-x86_64: Process 5447 attached [ 109.208056][ T5446] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5447] chdir("./30") = 0 [pid 5447] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5447] setpgid(0, 0) = 0 [pid 5447] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5447] write(3, "1000", 4) = 4 [pid 5447] close(3) = 0 [pid 5447] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5447] memfd_create("syzkaller", 0) = 3 [pid 5447] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5437] <... sendfile resumed>) = 1048576 [pid 5437] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5437] exit_group(0) = ? [pid 5437] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5437, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5447] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./30/binderfs") = 0 [pid 5066] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5447] <... write resumed>) = 2097152 [pid 5447] munmap(0x7ff395729000, 2097152) = 0 [pid 5447] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5447] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5447] close(3) = 0 [pid 5447] mkdir("./file0", 0777) = 0 [ 109.490025][ T5447] loop0: detected capacity change from 0 to 4096 [pid 5447] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 109.532939][ T5447] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5066] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./30/file0") = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./30") = 0 [pid 5066] mkdir("./31", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5448 ./strace-static-x86_64: Process 5448 attached [pid 5448] chdir("./31") = 0 [pid 5448] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5448] setpgid(0, 0) = 0 [ 109.633987][ T5447] NILFS (loop0): trying rollback from an earlier position [pid 5448] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5448] write(3, "1000", 4) = 4 [pid 5448] close(3) = 0 [pid 5448] symlink("/dev/binderfs", "./binderfs" [pid 5438] <... sendfile resumed>) = 1048576 [pid 5448] <... symlink resumed>) = 0 [pid 5438] open(NULL, O_RDONLY [pid 5448] memfd_create("syzkaller", 0 [pid 5438] <... open resumed>) = -1 EFAULT (Bad address) [pid 5448] <... memfd_create resumed>) = 3 [pid 5438] exit_group(0 [pid 5448] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5441] <... sendfile resumed>) = 1048576 [pid 5440] <... sendfile resumed>) = 1048576 [pid 5438] <... exit_group resumed>) = ? [pid 5448] <... mmap resumed>) = 0x7ff395729000 [pid 5441] open(NULL, O_RDONLY [pid 5440] open(NULL, O_RDONLY [pid 5438] +++ exited with 0 +++ [pid 5441] <... open resumed>) = -1 EFAULT (Bad address) [pid 5440] <... open resumed>) = -1 EFAULT (Bad address) [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5438, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=19 /* 0.19 s */} --- [pid 5441] exit_group(0 [pid 5440] exit_group(0 [pid 5441] <... exit_group resumed>) = ? [pid 5440] <... exit_group resumed>) = ? [pid 5441] +++ exited with 0 +++ [pid 5440] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5441, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5065] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5440, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5065] <... openat resumed>) = 3 [pid 5064] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] fstat(3, [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 109.740979][ T5447] NILFS (loop0): recovery complete [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] getdents64(3, [pid 5064] <... openat resumed>) = 3 [pid 5448] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5447] <... mount resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] fstat(3, [pid 5063] <... openat resumed>) = 3 [pid 5065] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] fstat(3, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] getdents64(3, [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] lstat("./29/binderfs", [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] getdents64(3, [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] unlink("./29/binderfs" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... unlink resumed>) = 0 [pid 5064] lstat("./30/binderfs", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] lstat("./30/binderfs", [pid 5064] unlink("./30/binderfs" [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5063] unlink("./30/binderfs" [pid 5064] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... unlink resumed>) = 0 [pid 5447] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5447] <... openat resumed>) = 3 [pid 5447] chdir("./file0") = 0 [pid 5447] ioctl(4, LOOP_CLR_FD) = 0 [ 109.762636][ T5449] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5447] close(4) = 0 [pid 5447] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5447] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5447] ftruncate(5, 33587195) = 0 [pid 5448] <... write resumed>) = 2097152 [pid 5447] sendfile(4, 5, NULL, 281474978811909 [pid 5448] munmap(0x7ff395729000, 2097152) = 0 [pid 5448] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5448] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5448] close(3) = 0 [pid 5448] mkdir("./file0", 0777) = 0 [ 109.869940][ T5448] loop4: detected capacity change from 0 to 4096 [ 109.924202][ T5448] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5448] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5063] <... umount2 resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] fstat(4, [pid 5063] lstat("./30/file0", [pid 5065] lstat("./29/file0", [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, [pid 5063] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] getdents64(4, [pid 5063] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5065] <... openat resumed>) = 4 [pid 5064] close(4 [pid 5063] fstat(4, [pid 5065] fstat(4, [pid 5064] <... close resumed>) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] rmdir("./30/file0" [pid 5063] getdents64(4, [pid 5065] getdents64(4, [pid 5064] <... rmdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5065] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(3, [pid 5063] getdents64(4, [pid 5065] getdents64(4, [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5065] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] close(3 [pid 5063] close(4 [pid 5065] close(4 [pid 5064] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [ 109.970216][ T5448] NILFS (loop4): trying rollback from an earlier position [pid 5064] rmdir("./30" [pid 5063] rmdir("./30/file0" [pid 5065] rmdir("./29/file0" [pid 5064] <... rmdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] mkdir("./31", 0777 [pid 5063] getdents64(3, [pid 5065] getdents64(3, [pid 5064] <... mkdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] close(3 [pid 5065] close(3 [pid 5064] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] rmdir("./30" [pid 5065] rmdir("./29" [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] <... rmdir resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] close(3 [pid 5063] mkdir("./31", 0777 [pid 5065] mkdir("./30", 0777 [pid 5064] <... close resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5442] <... sendfile resumed>) = 1048576 [pid 5065] <... mkdir resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5442] open(NULL, O_RDONLY [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... openat resumed>) = 3 [pid 5442] <... open resumed>) = -1 EFAULT (Bad address) [pid 5065] <... openat resumed>) = 3 [pid 5064] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5450 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5442] exit_group(0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5442] <... exit_group resumed>) = ? [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] close(3 [pid 5442] +++ exited with 0 +++ [pid 5065] close(3 [pid 5063] <... close resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5442, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 5065] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5452 attached ./strace-static-x86_64: Process 5451 attached [pid 5063] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5451 [pid 5067] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5452 ./strace-static-x86_64: Process 5450 attached [pid 5450] chdir("./31" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5451] chdir("./31" [pid 5450] <... chdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5451] <... chdir resumed>) = 0 [pid 5450] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5450] setpgid(0, 0 [pid 5451] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5450] <... setpgid resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5451] <... prctl resumed>) = 0 [pid 5450] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] fstat(3, [pid 5451] setpgid(0, 0 [pid 5450] <... openat resumed>) = 3 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5451] <... setpgid resumed>) = 0 [pid 5450] write(3, "1000", 4 [pid 5067] getdents64(3, [pid 5450] <... write resumed>) = 4 [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5451] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5450] close(3 [pid 5067] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5450] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5452] chdir("./30" [pid 5451] <... openat resumed>) = 3 [ 110.060736][ T5448] NILFS (loop4): recovery complete [pid 5450] symlink("/dev/binderfs", "./binderfs" [pid 5067] lstat("./30/binderfs", [pid 5452] <... chdir resumed>) = 0 [pid 5451] write(3, "1000", 4 [pid 5450] <... symlink resumed>) = 0 [pid 5448] <... mount resumed>) = 0 [pid 5450] memfd_create("syzkaller", 0 [pid 5448] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5450] <... memfd_create resumed>) = 3 [pid 5448] <... openat resumed>) = 3 [pid 5450] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5448] chdir("./file0" [pid 5450] <... mmap resumed>) = 0x7ff395729000 [pid 5448] <... chdir resumed>) = 0 [pid 5452] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5451] <... write resumed>) = 4 [pid 5448] ioctl(4, LOOP_CLR_FD [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5452] <... prctl resumed>) = 0 [pid 5451] close(3 [pid 5448] <... ioctl resumed>) = 0 [pid 5448] close(4) = 0 [pid 5448] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5448] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5448] ftruncate(5, 33587195) = 0 [pid 5067] unlink("./30/binderfs" [pid 5452] setpgid(0, 0 [pid 5451] <... close resumed>) = 0 [pid 5448] sendfile(4, 5, NULL, 281474978811909 [pid 5452] <... setpgid resumed>) = 0 [pid 5451] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... unlink resumed>) = 0 [pid 5452] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5451] <... symlink resumed>) = 0 [pid 5450] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5452] <... openat resumed>) = 3 [pid 5451] memfd_create("syzkaller", 0 [pid 5452] write(3, "1000", 4 [pid 5451] <... memfd_create resumed>) = 3 [pid 5452] <... write resumed>) = 4 [ 110.085795][ T5453] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5451] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5452] close(3 [pid 5451] <... mmap resumed>) = 0x7ff395729000 [pid 5452] <... close resumed>) = 0 [pid 5452] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5452] memfd_create("syzkaller", 0) = 3 [pid 5452] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5452] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5451] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5450] <... write resumed>) = 2097152 [pid 5450] munmap(0x7ff395729000, 2097152) = 0 [pid 5450] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5450] ioctl(4, LOOP_SET_FD, 3 [pid 5452] <... write resumed>) = 2097152 [pid 5451] <... write resumed>) = 2097152 [pid 5450] <... ioctl resumed>) = 0 [pid 5450] close(3) = 0 [pid 5450] mkdir("./file0", 0777) = 0 [pid 5450] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5452] munmap(0x7ff395729000, 2097152) = 0 [pid 5451] munmap(0x7ff395729000, 2097152) = 0 [pid 5452] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5451] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 110.221621][ T5450] loop2: detected capacity change from 0 to 4096 [pid 5452] ioctl(4, LOOP_SET_FD, 3 [pid 5451] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5452] <... ioctl resumed>) = 0 [pid 5451] <... ioctl resumed>) = 0 [pid 5451] close(3) = 0 [pid 5451] mkdir("./file0", 0777) = 0 [pid 5451] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5067] lstat("./30/file0", [pid 5452] close(3 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./30/file0") = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./30") = 0 [pid 5067] mkdir("./31", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3 [pid 5452] <... close resumed>) = 0 [pid 5452] mkdir("./file0", 0777 [pid 5067] <... close resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5452] <... mkdir resumed>) = 0 [pid 5452] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5067] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5454 ./strace-static-x86_64: Process 5454 attached [pid 5454] chdir("./31") = 0 [pid 5454] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5454] setpgid(0, 0) = 0 [pid 5454] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 110.268219][ T5452] loop3: detected capacity change from 0 to 4096 [ 110.295770][ T5451] loop1: detected capacity change from 0 to 4096 [ 110.296461][ T5450] NILFS (loop2): invalid segment: Checksum error in segment payload [ 110.311004][ T5450] NILFS (loop2): trying rollback from an earlier position [pid 5454] write(3, "1000", 4) = 4 [pid 5454] close(3) = 0 [pid 5454] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5454] memfd_create("syzkaller", 0) = 3 [pid 5454] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [ 110.349634][ T5451] NILFS (loop1): invalid segment: Checksum error in segment payload [ 110.354875][ T5452] NILFS (loop3): invalid segment: Checksum error in segment payload [ 110.366422][ T5452] NILFS (loop3): trying rollback from an earlier position [pid 5454] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5452] <... mount resumed>) = 0 [pid 5452] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5452] chdir("./file0") = 0 [pid 5452] ioctl(4, LOOP_CLR_FD) = 0 [ 110.403355][ T5451] NILFS (loop1): trying rollback from an earlier position [ 110.414441][ T5452] NILFS (loop3): recovery complete [ 110.423195][ T5450] NILFS (loop2): recovery complete [ 110.432344][ T5455] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5452] close(4 [pid 5454] <... write resumed>) = 2097152 [pid 5452] <... close resumed>) = 0 [pid 5452] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5454] munmap(0x7ff395729000, 2097152) = 0 [pid 5454] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5454] ioctl(4, LOOP_SET_FD, 3 [pid 5452] <... open resumed>) = 4 [pid 5452] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5450] <... mount resumed>) = 0 [pid 5454] <... ioctl resumed>) = 0 [pid 5454] close(3) = 0 [pid 5454] mkdir("./file0", 0777) = 0 [pid 5454] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5452] <... open resumed>) = 5 [ 110.466569][ T5451] NILFS (loop1): recovery complete [ 110.469838][ T5454] loop5: detected capacity change from 0 to 4096 [ 110.487882][ T5456] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5450] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5452] ftruncate(5, 33587195 [pid 5451] <... mount resumed>) = 0 [pid 5450] <... openat resumed>) = 3 [pid 5452] <... ftruncate resumed>) = 0 [pid 5451] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5452] sendfile(4, 5, NULL, 281474978811909 [pid 5450] chdir("./file0") = 0 [pid 5451] <... openat resumed>) = 3 [pid 5450] ioctl(4, LOOP_CLR_FD [pid 5451] chdir("./file0" [pid 5450] <... ioctl resumed>) = 0 [pid 5450] close(4 [pid 5451] <... chdir resumed>) = 0 [pid 5451] ioctl(4, LOOP_CLR_FD [pid 5450] <... close resumed>) = 0 [pid 5451] <... ioctl resumed>) = 0 [pid 5450] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5451] close(4 [pid 5450] <... open resumed>) = 4 [pid 5451] <... close resumed>) = 0 [pid 5450] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5451] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5450] <... open resumed>) = 5 [pid 5451] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5450] ftruncate(5, 33587195) = 0 [pid 5451] <... open resumed>) = 5 [pid 5450] sendfile(4, 5, NULL, 281474978811909 [pid 5451] ftruncate(5, 33587195) = 0 [ 110.507426][ T5457] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.529212][ T5454] NILFS (loop5): invalid segment: Checksum error in segment payload [ 110.586756][ T5454] NILFS (loop5): trying rollback from an earlier position [ 110.701369][ T5454] NILFS (loop5): recovery complete [pid 5451] sendfile(4, 5, NULL, 281474978811909 [pid 5454] <... mount resumed>) = 0 [pid 5447] <... sendfile resumed>) = 1048576 [pid 5454] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5447] open(NULL, O_RDONLY [pid 5454] <... openat resumed>) = 3 [pid 5447] <... open resumed>) = -1 EFAULT (Bad address) [pid 5454] chdir("./file0") = 0 [pid 5447] exit_group(0 [pid 5454] ioctl(4, LOOP_CLR_FD [pid 5447] <... exit_group resumed>) = ? [pid 5454] <... ioctl resumed>) = 0 [pid 5454] close(4) = 0 [pid 5447] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5447, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5062] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] unlink("./30/binderfs") = 0 [pid 5062] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5454] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5454] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5454] ftruncate(5, 33587195) = 0 [ 110.744284][ T5458] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5454] sendfile(4, 5, NULL, 281474978811909 [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5448] <... sendfile resumed>) = 1048576 [pid 5062] close(4 [pid 5448] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5448] exit_group(0 [pid 5062] <... close resumed>) = 0 [pid 5448] <... exit_group resumed>) = ? [pid 5062] rmdir("./30/file0" [pid 5448] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5448, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, [pid 5066] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] close(3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] <... close resumed>) = 0 [pid 5066] getdents64(3, [pid 5062] rmdir("./30" [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5066] unlink("./31/binderfs" [pid 5062] mkdir("./31", 0777 [pid 5066] <... unlink resumed>) = 0 [pid 5066] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5459 ./strace-static-x86_64: Process 5459 attached [pid 5459] chdir("./31") = 0 [pid 5459] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5459] setpgid(0, 0) = 0 [pid 5459] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5459] write(3, "1000", 4) = 4 [pid 5459] close(3) = 0 [pid 5459] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5459] memfd_create("syzkaller", 0) = 3 [pid 5459] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5459] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./31/file0") = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./31") = 0 [pid 5066] mkdir("./32", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5460 ./strace-static-x86_64: Process 5460 attached [pid 5460] chdir("./32" [pid 5459] <... write resumed>) = 2097152 [pid 5460] <... chdir resumed>) = 0 [pid 5459] munmap(0x7ff395729000, 2097152 [pid 5460] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5459] <... munmap resumed>) = 0 [pid 5460] <... prctl resumed>) = 0 [pid 5460] setpgid(0, 0 [pid 5459] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5460] <... setpgid resumed>) = 0 [pid 5459] <... openat resumed>) = 4 [pid 5460] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5459] ioctl(4, LOOP_SET_FD, 3 [pid 5460] <... openat resumed>) = 3 [pid 5459] <... ioctl resumed>) = 0 [pid 5460] write(3, "1000", 4) = 4 [pid 5460] close(3) = 0 [pid 5460] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5460] memfd_create("syzkaller", 0) = 3 [pid 5460] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5459] close(3 [pid 5460] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5459] <... close resumed>) = 0 [pid 5459] mkdir("./file0", 0777) = 0 [ 111.270385][ T5459] loop0: detected capacity change from 0 to 4096 [pid 5459] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5452] <... sendfile resumed>) = 1048576 [pid 5452] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5452] exit_group(0) = ? [ 111.338642][ T5459] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5452] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5452, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5065] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./30/binderfs") = 0 [pid 5065] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5460] <... write resumed>) = 2097152 [pid 5460] munmap(0x7ff395729000, 2097152) = 0 [pid 5460] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5460] ioctl(4, LOOP_SET_FD, 3) = 0 [ 111.381055][ T5459] NILFS (loop0): trying rollback from an earlier position [ 111.404002][ T5460] loop4: detected capacity change from 0 to 4096 [pid 5460] close(3) = 0 [pid 5460] mkdir("./file0", 0777) = 0 [pid 5450] <... sendfile resumed>) = 1048576 [pid 5460] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5450] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5450] exit_group(0) = ? [pid 5450] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5450, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [ 111.458585][ T5459] NILFS (loop0): recovery complete [ 111.474000][ T5460] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5064] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5459] <... mount resumed>) = 0 [pid 5451] <... sendfile resumed>) = 1048576 [pid 5459] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5451] open(NULL, O_RDONLY [pid 5459] <... openat resumed>) = 3 [pid 5451] <... open resumed>) = -1 EFAULT (Bad address) [pid 5459] chdir("./file0" [pid 5451] exit_group(0 [pid 5459] <... chdir resumed>) = 0 [pid 5451] <... exit_group resumed>) = ? [pid 5459] ioctl(4, LOOP_CLR_FD [pid 5451] +++ exited with 0 +++ [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5459] <... ioctl resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5451, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5459] close(4 [pid 5065] <... umount2 resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] fstat(3, [pid 5065] lstat("./30/file0", [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, [pid 5065] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 111.500975][ T5461] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.511810][ T5460] NILFS (loop4): trying rollback from an earlier position [ 111.530994][ T5460] NILFS (loop4): recovery complete [pid 5064] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5460] <... mount resumed>) = 0 [pid 5459] <... close resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... openat resumed>) = 4 [pid 5064] lstat("./31/binderfs", [pid 5065] fstat(4, [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] unlink("./31/binderfs" [pid 5065] getdents64(4, [pid 5064] <... unlink resumed>) = 0 [pid 5460] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5459] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5065] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] getdents64(4, [pid 5460] <... openat resumed>) = 3 [pid 5459] <... open resumed>) = 4 [pid 5065] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5460] chdir("./file0" [pid 5459] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5065] close(4) = 0 [pid 5065] rmdir("./30/file0") = 0 [pid 5065] getdents64(3, [pid 5063] <... openat resumed>) = 3 [pid 5460] <... chdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5459] <... open resumed>) = 5 [pid 5065] close(3 [pid 5460] ioctl(4, LOOP_CLR_FD [pid 5063] fstat(3, [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./30") = 0 [pid 5460] <... ioctl resumed>) = 0 [ 111.545783][ T5462] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5459] ftruncate(5, 33587195 [pid 5065] mkdir("./31", 0777 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5460] close(4 [pid 5459] <... ftruncate resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5460] <... close resumed>) = 0 [pid 5459] sendfile(4, 5, NULL, 281474978811909 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] getdents64(3, [pid 5065] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5463 [pid 5460] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 5463 attached [pid 5463] chdir("./31") = 0 [pid 5463] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5463] setpgid(0, 0) = 0 [pid 5463] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5463] write(3, "1000", 4) = 4 [pid 5463] close(3 [pid 5063] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5463] <... close resumed>) = 0 [pid 5463] symlink("/dev/binderfs", "./binderfs" [pid 5063] lstat("./31/binderfs", [pid 5463] <... symlink resumed>) = 0 [pid 5460] <... open resumed>) = 4 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5463] memfd_create("syzkaller", 0 [pid 5460] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5063] unlink("./31/binderfs" [pid 5463] <... memfd_create resumed>) = 3 [pid 5460] <... open resumed>) = 5 [pid 5064] <... umount2 resumed>) = 0 [pid 5463] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5460] ftruncate(5, 33587195 [pid 5063] <... unlink resumed>) = 0 [pid 5460] <... ftruncate resumed>) = 0 [pid 5063] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5460] sendfile(4, 5, NULL, 281474978811909 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5463] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] rmdir("./31/file0" [pid 5454] <... sendfile resumed>) = 1048576 [pid 5454] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5454] exit_group(0 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5454] <... exit_group resumed>) = ? [pid 5454] +++ exited with 0 +++ [pid 5064] close(3 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5454, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5064] <... close resumed>) = 0 [pid 5067] <... restart_syscall resumed>) = 0 [pid 5064] rmdir("./31" [pid 5067] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] <... rmdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] mkdir("./32", 0777 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./31/binderfs") = 0 [pid 5067] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] <... umount2 resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5464 ./strace-static-x86_64: Process 5464 attached [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5464] chdir("./32" [pid 5063] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5464] <... chdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5464] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5464] <... prctl resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5063] fstat(4, [pid 5464] setpgid(0, 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, [pid 5464] <... setpgid resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5464] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] getdents64(4, [pid 5464] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5464] write(3, "1000", 4 [pid 5063] <... close resumed>) = 0 [pid 5464] <... write resumed>) = 4 [pid 5063] rmdir("./31/file0") = 0 [pid 5464] close(3 [pid 5063] getdents64(3, [pid 5464] <... close resumed>) = 0 [pid 5464] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5464] <... symlink resumed>) = 0 [pid 5063] close(3) = 0 [pid 5464] memfd_create("syzkaller", 0 [pid 5063] rmdir("./31" [pid 5464] <... memfd_create resumed>) = 3 [pid 5464] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] mkdir("./32", 0777 [pid 5464] <... mmap resumed>) = 0x7ff395729000 [pid 5463] <... write resumed>) = 2097152 [pid 5063] <... mkdir resumed>) = 0 [pid 5463] munmap(0x7ff395729000, 2097152) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5463] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5463] ioctl(4, LOOP_SET_FD, 3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5465 ./strace-static-x86_64: Process 5465 attached [pid 5465] chdir("./32") = 0 [pid 5465] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5465] setpgid(0, 0) = 0 [pid 5465] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5465] write(3, "1000", 4) = 4 [pid 5465] close(3) = 0 [pid 5465] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5465] memfd_create("syzkaller", 0) = 3 [pid 5465] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5463] <... ioctl resumed>) = 0 [pid 5463] close(3) = 0 [pid 5463] mkdir("./file0", 0777) = 0 [pid 5464] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 111.837224][ T5463] loop3: detected capacity change from 0 to 4096 [pid 5463] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5464] <... write resumed>) = 2097152 [pid 5465] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5464] munmap(0x7ff395729000, 2097152) = 0 [pid 5464] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5464] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, [pid 5464] <... ioctl resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./31/file0") = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5464] close(3 [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./31") = 0 [pid 5464] <... close resumed>) = 0 [pid 5067] mkdir("./32", 0777 [pid 5464] mkdir("./file0", 0777 [pid 5067] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [ 111.933392][ T5463] NILFS (loop3): invalid segment: Checksum error in segment payload [ 111.955281][ T5464] loop2: detected capacity change from 0 to 4096 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5464] <... mkdir resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5466 [pid 5464] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, ""./strace-static-x86_64: Process 5466 attached [pid 5466] chdir("./32") = 0 [pid 5466] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5466] setpgid(0, 0) = 0 [pid 5466] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5466] write(3, "1000", 4) = 4 [pid 5466] close(3) = 0 [pid 5466] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5466] memfd_create("syzkaller", 0) = 3 [pid 5466] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5465] <... write resumed>) = 2097152 [pid 5465] munmap(0x7ff395729000, 2097152) = 0 [pid 5465] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 111.985912][ T5463] NILFS (loop3): trying rollback from an earlier position [ 112.026091][ T5465] loop1: detected capacity change from 0 to 4096 [pid 5465] ioctl(4, LOOP_SET_FD, 3 [pid 5466] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5465] <... ioctl resumed>) = 0 [pid 5465] close(3) = 0 [pid 5465] mkdir("./file0", 0777) = 0 [pid 5465] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5463] <... mount resumed>) = 0 [pid 5463] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5463] chdir("./file0") = 0 [pid 5463] ioctl(4, LOOP_CLR_FD) = 0 [pid 5463] close(4) = 0 [ 112.031411][ T5464] NILFS (loop2): invalid segment: Checksum error in segment payload [ 112.036126][ T5463] NILFS (loop3): recovery complete [ 112.070009][ T5467] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5463] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5463] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5463] ftruncate(5, 33587195) = 0 [pid 5463] sendfile(4, 5, NULL, 281474978811909 [pid 5466] <... write resumed>) = 2097152 [ 112.101044][ T5465] NILFS (loop1): invalid segment: Checksum error in segment payload [ 112.109225][ T5465] NILFS (loop1): trying rollback from an earlier position [ 112.109830][ T5464] NILFS (loop2): trying rollback from an earlier position [pid 5466] munmap(0x7ff395729000, 2097152) = 0 [pid 5466] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5466] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5466] close(3) = 0 [pid 5466] mkdir("./file0", 0777) = 0 [ 112.176433][ T5466] loop5: detected capacity change from 0 to 4096 [ 112.188480][ T5465] NILFS (loop1): recovery complete [pid 5466] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5465] <... mount resumed>) = 0 [pid 5465] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5465] chdir("./file0") = 0 [pid 5465] ioctl(4, LOOP_CLR_FD) = 0 [pid 5465] close(4) = 0 [ 112.217407][ T5468] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.230060][ T5464] NILFS (loop2): recovery complete [ 112.242611][ T5466] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5465] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5464] <... mount resumed>) = 0 [pid 5465] <... open resumed>) = 4 [pid 5464] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5465] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5464] <... openat resumed>) = 3 [pid 5465] ftruncate(5, 33587195) = 0 [pid 5464] chdir("./file0" [pid 5465] sendfile(4, 5, NULL, 281474978811909 [pid 5464] <... chdir resumed>) = 0 [pid 5464] ioctl(4, LOOP_CLR_FD) = 0 [pid 5464] close(4) = 0 [pid 5464] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5464] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [ 112.270882][ T5466] NILFS (loop5): trying rollback from an earlier position [ 112.280987][ T5469] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5464] ftruncate(5, 33587195) = 0 [ 112.352234][ T5466] NILFS (loop5): recovery complete [pid 5464] sendfile(4, 5, NULL, 281474978811909 [pid 5466] <... mount resumed>) = 0 [pid 5466] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5466] chdir("./file0") = 0 [pid 5466] ioctl(4, LOOP_CLR_FD) = 0 [pid 5466] close(4) = 0 [pid 5466] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5466] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5466] ftruncate(5, 33587195) = 0 [ 112.389658][ T5470] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5466] sendfile(4, 5, NULL, 281474978811909 [pid 5459] <... sendfile resumed>) = 1048576 [pid 5459] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5459] exit_group(0) = ? [pid 5459] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5459, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5062] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] unlink("./31/binderfs") = 0 [pid 5062] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5460] <... sendfile resumed>) = 1048576 [pid 5460] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5460] exit_group(0) = ? [pid 5460] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5460, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5066] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./32/binderfs") = 0 [pid 5066] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./31/file0") = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./31") = 0 [pid 5062] mkdir("./32", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5471 ./strace-static-x86_64: Process 5471 attached [pid 5471] chdir("./32") = 0 [pid 5471] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5471] setpgid(0, 0) = 0 [pid 5471] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5471] write(3, "1000", 4) = 4 [pid 5471] close(3) = 0 [pid 5471] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5471] memfd_create("syzkaller", 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5471] <... memfd_create resumed>) = 3 [pid 5471] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, [pid 5471] <... mmap resumed>) = 0x7ff395729000 [pid 5066] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./32/file0") = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./32") = 0 [pid 5066] mkdir("./33", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5472 ./strace-static-x86_64: Process 5472 attached [pid 5472] chdir("./33") = 0 [pid 5472] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5472] setpgid(0, 0) = 0 [pid 5472] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5472] write(3, "1000", 4) = 4 [pid 5472] close(3) = 0 [pid 5472] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5472] memfd_create("syzkaller", 0) = 3 [pid 5472] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5471] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5463] <... sendfile resumed>) = 1048576 [pid 5463] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5463] exit_group(0) = ? [pid 5463] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5463, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5472] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./31/binderfs") = 0 [pid 5065] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5471] <... write resumed>) = 2097152 [pid 5471] munmap(0x7ff395729000, 2097152 [pid 5464] <... sendfile resumed>) = 1048576 [pid 5471] <... munmap resumed>) = 0 [pid 5464] open(NULL, O_RDONLY [pid 5471] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5464] <... open resumed>) = -1 EFAULT (Bad address) [pid 5464] exit_group(0) = ? [pid 5464] +++ exited with 0 +++ [pid 5471] <... openat resumed>) = 4 [pid 5471] ioctl(4, LOOP_SET_FD, 3 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5464, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5471] <... ioctl resumed>) = 0 [pid 5471] close(3 [pid 5064] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5471] <... close resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5471] mkdir("./file0", 0777 [pid 5472] <... write resumed>) = 2097152 [pid 5472] munmap(0x7ff395729000, 2097152) = 0 [pid 5064] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5471] <... mkdir resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5472] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] fstat(3, [pid 5472] <... openat resumed>) = 4 [pid 5472] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5471] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5064] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./32/binderfs") = 0 [pid 5472] <... ioctl resumed>) = 0 [ 113.114316][ T5471] loop0: detected capacity change from 0 to 4096 [ 113.131694][ T5472] loop4: detected capacity change from 0 to 4096 [pid 5064] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5472] close(3) = 0 [pid 5472] mkdir("./file0", 0777) = 0 [ 113.158966][ T5471] NILFS (loop0): invalid segment: Checksum error in segment payload [ 113.198431][ T5471] NILFS (loop0): trying rollback from an earlier position [pid 5472] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5065] <... umount2 resumed>) = 0 [ 113.210995][ T5472] NILFS (loop4): invalid segment: Checksum error in segment payload [ 113.220366][ T5472] NILFS (loop4): trying rollback from an earlier position [pid 5465] <... sendfile resumed>) = 1048576 [pid 5465] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5465] exit_group(0) = ? [pid 5065] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./31/file0", [pid 5465] +++ exited with 0 +++ [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5465, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5065] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] fstat(4, [pid 5063] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5065] getdents64(4, [pid 5063] fstat(3, [pid 5065] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, [pid 5063] getdents64(3, [pid 5472] <... mount resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] close(4 [pid 5063] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] rmdir("./31/file0" [pid 5063] lstat("./32/binderfs", [pid 5472] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... rmdir resumed>) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5472] <... openat resumed>) = 3 [pid 5065] getdents64(3, [pid 5063] unlink("./32/binderfs" [pid 5472] chdir("./file0" [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5065] close(3 [pid 5063] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./31" [pid 5472] <... chdir resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5472] ioctl(4, LOOP_CLR_FD [pid 5065] mkdir("./32", 0777 [pid 5472] <... ioctl resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5472] close(4 [pid 5065] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5472] <... close resumed>) = 0 [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5475 [pid 5472] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5466] <... sendfile resumed>) = 1048576 [pid 5466] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5466] exit_group(0 [pid 5472] <... open resumed>) = 4 [pid 5466] <... exit_group resumed>) = ? [pid 5466] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5466, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5067] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./32/binderfs") = 0 [pid 5067] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 113.264397][ T5472] NILFS (loop4): recovery complete [ 113.283943][ T5471] NILFS (loop0): recovery complete [ 113.287504][ T5473] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5472] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 ./strace-static-x86_64: Process 5475 attached [pid 5472] ftruncate(5, 33587195 [pid 5471] <... mount resumed>) = 0 [pid 5472] <... ftruncate resumed>) = 0 [pid 5471] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5472] sendfile(4, 5, NULL, 281474978811909 [pid 5471] <... openat resumed>) = 3 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5471] chdir("./file0" [pid 5475] chdir("./32" [pid 5471] <... chdir resumed>) = 0 [pid 5475] <... chdir resumed>) = 0 [pid 5471] ioctl(4, LOOP_CLR_FD) = 0 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 5475] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5471] close(4 [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./32/file0") = 0 [pid 5471] <... close resumed>) = 0 [pid 5064] getdents64(3, [pid 5471] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./32" [pid 5471] <... open resumed>) = 4 [pid 5064] <... rmdir resumed>) = 0 [pid 5471] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5475] <... prctl resumed>) = 0 [pid 5471] <... open resumed>) = 5 [pid 5064] mkdir("./33", 0777 [pid 5475] setpgid(0, 0 [pid 5471] ftruncate(5, 33587195 [pid 5064] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5475] <... setpgid resumed>) = 0 [pid 5471] <... ftruncate resumed>) = 0 [pid 5471] sendfile(4, 5, NULL, 281474978811909 [pid 5475] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5476 ./strace-static-x86_64: Process 5476 attached [pid 5476] chdir("./33" [pid 5475] <... openat resumed>) = 3 [ 113.340823][ T5474] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5475] write(3, "1000", 4) = 4 [pid 5475] close(3 [pid 5476] <... chdir resumed>) = 0 [pid 5475] <... close resumed>) = 0 [pid 5476] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5475] symlink("/dev/binderfs", "./binderfs" [pid 5476] setpgid(0, 0 [pid 5475] <... symlink resumed>) = 0 [pid 5476] <... setpgid resumed>) = 0 [pid 5476] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5475] memfd_create("syzkaller", 0 [pid 5476] write(3, "1000", 4) = 4 [pid 5475] <... memfd_create resumed>) = 3 [pid 5476] close(3) = 0 [pid 5475] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5476] symlink("/dev/binderfs", "./binderfs" [pid 5475] <... mmap resumed>) = 0x7ff395729000 [pid 5476] <... symlink resumed>) = 0 [pid 5476] memfd_create("syzkaller", 0) = 3 [pid 5476] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5475] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5476] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, [pid 5475] <... write resumed>) = 2097152 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, [pid 5067] <... umount2 resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5067] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] close(4 [pid 5067] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] <... close resumed>) = 0 [pid 5067] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] close(4 [pid 5063] rmdir("./32/file0" [pid 5067] <... close resumed>) = 0 [pid 5067] rmdir("./32/file0") = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5067] getdents64(3, [pid 5063] getdents64(3, [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] <... close resumed>) = 0 [pid 5063] close(3 [pid 5067] rmdir("./32") = 0 [pid 5063] <... close resumed>) = 0 [pid 5067] mkdir("./33", 0777 [pid 5063] rmdir("./32" [pid 5475] munmap(0x7ff395729000, 2097152 [pid 5067] <... mkdir resumed>) = 0 [pid 5476] <... write resumed>) = 2097152 [pid 5475] <... munmap resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5063] <... rmdir resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5063] mkdir("./33", 0777 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] <... mkdir resumed>) = 0 [pid 5475] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5067] close(3 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5067] <... close resumed>) = 0 [pid 5476] munmap(0x7ff395729000, 2097152 [pid 5475] <... openat resumed>) = 4 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... openat resumed>) = 3 [pid 5475] ioctl(4, LOOP_SET_FD, 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5067] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5477 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5476] <... munmap resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5478 [pid 5476] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5476] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5478 attached [pid 5478] chdir("./33") = 0 [pid 5478] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5478] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5477 attached [pid 5478] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5476] <... ioctl resumed>) = 0 [pid 5475] <... ioctl resumed>) = 0 [pid 5478] <... openat resumed>) = 3 [pid 5475] close(3 [pid 5478] write(3, "1000", 4) = 4 [pid 5478] close(3) = 0 [pid 5478] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5475] <... close resumed>) = 0 [pid 5478] memfd_create("syzkaller", 0 [pid 5477] chdir("./33" [pid 5476] close(3 [pid 5478] <... memfd_create resumed>) = 3 [pid 5478] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5478] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5477] <... chdir resumed>) = 0 [pid 5476] <... close resumed>) = 0 [ 113.609341][ T5475] loop3: detected capacity change from 0 to 4096 [ 113.626300][ T5476] loop2: detected capacity change from 0 to 4096 [pid 5475] mkdir("./file0", 0777) = 0 [pid 5477] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5476] mkdir("./file0", 0777 [pid 5475] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5477] setpgid(0, 0 [pid 5476] <... mkdir resumed>) = 0 [pid 5477] <... setpgid resumed>) = 0 [pid 5477] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5476] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5477] <... openat resumed>) = 3 [pid 5477] write(3, "1000", 4) = 4 [pid 5477] close(3) = 0 [pid 5477] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5477] memfd_create("syzkaller", 0) = 3 [pid 5477] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5478] <... write resumed>) = 2097152 [pid 5478] munmap(0x7ff395729000, 2097152) = 0 [pid 5478] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 113.717006][ T5476] NILFS (loop2): invalid segment: Checksum error in segment payload [ 113.725639][ T5475] NILFS (loop3): invalid segment: Checksum error in segment payload [ 113.738086][ T5475] NILFS (loop3): trying rollback from an earlier position [ 113.746430][ T5476] NILFS (loop2): trying rollback from an earlier position [pid 5478] ioctl(4, LOOP_SET_FD, 3 [pid 5477] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5478] <... ioctl resumed>) = 0 [pid 5478] close(3) = 0 [pid 5478] mkdir("./file0", 0777) = 0 [pid 5478] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5475] <... mount resumed>) = 0 [pid 5475] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 113.761236][ T5478] loop1: detected capacity change from 0 to 4096 [ 113.778176][ T5475] NILFS (loop3): recovery complete [ 113.783637][ T5476] NILFS (loop2): recovery complete [ 113.794428][ T5478] NILFS (loop1): invalid segment: Checksum error in segment payload [ 113.805787][ T5480] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5476] <... mount resumed>) = 0 [pid 5475] chdir("./file0" [pid 5476] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5475] <... chdir resumed>) = 0 [pid 5476] <... openat resumed>) = 3 [pid 5475] ioctl(4, LOOP_CLR_FD [pid 5476] chdir("./file0" [pid 5475] <... ioctl resumed>) = 0 [pid 5476] <... chdir resumed>) = 0 [pid 5475] close(4 [pid 5476] ioctl(4, LOOP_CLR_FD [pid 5475] <... close resumed>) = 0 [pid 5476] <... ioctl resumed>) = 0 [pid 5475] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5476] close(4) = 0 [pid 5475] <... open resumed>) = 4 [pid 5476] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5475] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5476] <... open resumed>) = 4 [pid 5476] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5475] <... open resumed>) = 5 [pid 5476] <... open resumed>) = 5 [pid 5475] ftruncate(5, 33587195 [pid 5476] ftruncate(5, 33587195 [pid 5475] <... ftruncate resumed>) = 0 [pid 5476] <... ftruncate resumed>) = 0 [pid 5475] sendfile(4, 5, NULL, 281474978811909 [pid 5476] sendfile(4, 5, NULL, 281474978811909 [pid 5477] <... write resumed>) = 2097152 [pid 5477] munmap(0x7ff395729000, 2097152) = 0 [pid 5477] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 113.827935][ T5479] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.865096][ T5478] NILFS (loop1): trying rollback from an earlier position [pid 5477] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5477] close(3) = 0 [pid 5477] mkdir("./file0", 0777) = 0 [ 113.894423][ T5477] loop5: detected capacity change from 0 to 4096 [ 113.924699][ T5478] NILFS (loop1): recovery complete [pid 5477] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5478] <... mount resumed>) = 0 [pid 5478] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5478] chdir("./file0") = 0 [pid 5478] ioctl(4, LOOP_CLR_FD) = 0 [pid 5478] close(4) = 0 [pid 5478] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5478] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5478] ftruncate(5, 33587195) = 0 [ 113.946701][ T5477] NILFS (loop5): invalid segment: Checksum error in segment payload [ 113.956647][ T5477] NILFS (loop5): trying rollback from an earlier position [ 113.992914][ T5481] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.071775][ T5477] NILFS (loop5): recovery complete [pid 5478] sendfile(4, 5, NULL, 281474978811909 [pid 5477] <... mount resumed>) = 0 [pid 5477] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5477] chdir("./file0") = 0 [pid 5477] ioctl(4, LOOP_CLR_FD) = 0 [pid 5477] close(4) = 0 [pid 5477] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5477] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5477] ftruncate(5, 33587195) = 0 [ 114.113253][ T5482] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5477] sendfile(4, 5, NULL, 281474978811909 [pid 5472] <... sendfile resumed>) = 1048576 [pid 5472] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5472] exit_group(0) = ? [pid 5472] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5472, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=14 /* 0.14 s */} --- [pid 5066] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5471] <... sendfile resumed>) = 1048576 [pid 5471] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5471] exit_group(0) = ? [pid 5471] +++ exited with 0 +++ [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5471, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5066] unlink("./33/binderfs" [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 5066] <... unlink resumed>) = 0 [pid 5062] <... restart_syscall resumed>) = 0 [pid 5066] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] unlink("./32/binderfs") = 0 [pid 5062] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5062] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] close(4) = 0 [pid 5066] lstat("./33/file0", [pid 5062] rmdir("./32/file0") = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./32" [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5066] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] mkdir("./33", 0777 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5066] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] <... openat resumed>) = 4 [pid 5062] close(3 [pid 5066] fstat(4, [pid 5062] <... close resumed>) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5483 [pid 5066] getdents64(4, ./strace-static-x86_64: Process 5483 attached 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5483] chdir("./33" [pid 5066] close(4 [pid 5483] <... chdir resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5483] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5066] rmdir("./33/file0" [pid 5483] <... prctl resumed>) = 0 [pid 5483] setpgid(0, 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5483] <... setpgid resumed>) = 0 [pid 5066] getdents64(3, [pid 5483] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5483] <... openat resumed>) = 3 [pid 5066] close(3 [pid 5483] write(3, "1000", 4 [pid 5066] <... close resumed>) = 0 [pid 5483] <... write resumed>) = 4 [pid 5066] rmdir("./33" [pid 5483] close(3) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5483] symlink("/dev/binderfs", "./binderfs" [pid 5066] mkdir("./34", 0777 [pid 5483] <... symlink resumed>) = 0 [pid 5483] memfd_create("syzkaller", 0 [pid 5066] <... mkdir resumed>) = 0 [pid 5483] <... memfd_create resumed>) = 3 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5483] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] <... openat resumed>) = 3 [pid 5483] <... mmap resumed>) = 0x7ff395729000 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5475] <... sendfile resumed>) = 1048576 [pid 5475] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5475] exit_group(0) = ? [pid 5066] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5484 ./strace-static-x86_64: Process 5484 attached [pid 5475] +++ exited with 0 +++ [pid 5484] chdir("./34" [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5475, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5484] <... chdir resumed>) = 0 [pid 5484] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5065] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5484] setpgid(0, 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5484] <... setpgid resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5484] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... openat resumed>) = 3 [pid 5484] <... openat resumed>) = 3 [pid 5065] fstat(3, [pid 5484] write(3, "1000", 4 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5484] <... write resumed>) = 4 [pid 5065] getdents64(3, [pid 5484] close(3 [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5484] <... close resumed>) = 0 [pid 5065] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5484] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5484] <... symlink resumed>) = 0 [pid 5065] lstat("./32/binderfs", [pid 5484] memfd_create("syzkaller", 0 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./32/binderfs" [pid 5484] <... memfd_create resumed>) = 3 [pid 5065] <... unlink resumed>) = 0 [pid 5484] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5484] <... mmap resumed>) = 0x7ff395729000 [pid 5483] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5484] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5476] <... sendfile resumed>) = 1048576 [pid 5483] <... write resumed>) = 2097152 [pid 5476] open(NULL, O_RDONLY [pid 5483] munmap(0x7ff395729000, 2097152 [pid 5476] <... open resumed>) = -1 EFAULT (Bad address) [pid 5483] <... munmap resumed>) = 0 [pid 5476] exit_group(0 [pid 5483] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5476] <... exit_group resumed>) = ? [pid 5484] <... write resumed>) = 2097152 [pid 5483] <... openat resumed>) = 4 [pid 5483] ioctl(4, LOOP_SET_FD, 3 [pid 5476] +++ exited with 0 +++ [pid 5484] munmap(0x7ff395729000, 2097152 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5476, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./33/binderfs", [pid 5483] <... ioctl resumed>) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5484] <... munmap resumed>) = 0 [pid 5483] close(3 [pid 5064] unlink("./33/binderfs" [pid 5484] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5483] <... close resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5484] <... openat resumed>) = 4 [pid 5483] mkdir("./file0", 0777 [pid 5064] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5484] ioctl(4, LOOP_SET_FD, 3 [pid 5483] <... mkdir resumed>) = 0 [ 114.832398][ T5483] loop0: detected capacity change from 0 to 4096 [ 114.865305][ T5484] loop4: detected capacity change from 0 to 4096 [pid 5483] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5484] <... ioctl resumed>) = 0 [pid 5478] <... sendfile resumed>) = 1048576 [pid 5478] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5478] exit_group(0) = ? [pid 5478] +++ exited with 0 +++ [pid 5484] close(3) = 0 [pid 5484] mkdir("./file0", 0777 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5478, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5484] <... mkdir resumed>) = 0 [pid 5063] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5484] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./33/binderfs") = 0 [pid 5063] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 114.886369][ T5483] NILFS (loop0): invalid segment: Checksum error in segment payload [ 114.914365][ T5483] NILFS (loop0): trying rollback from an earlier position [ 114.924219][ T5484] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5065] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./32/file0") = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./32") = 0 [pid 5065] mkdir("./33", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3 [pid 5064] <... umount2 resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5485 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5485 attached [pid 5485] chdir("./33") = 0 [pid 5485] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5485] setpgid(0, 0) = 0 [pid 5064] lstat("./33/file0", [pid 5485] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 114.970519][ T5484] NILFS (loop4): trying rollback from an earlier position [ 115.003288][ T5484] NILFS (loop4): recovery complete [pid 5064] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5485] <... openat resumed>) = 3 [pid 5485] write(3, "1000", 4 [pid 5064] <... openat resumed>) = 4 [pid 5485] <... write resumed>) = 4 [pid 5485] close(3 [pid 5064] fstat(4, [pid 5485] <... close resumed>) = 0 [pid 5485] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5485] <... symlink resumed>) = 0 [pid 5064] getdents64(4, [pid 5485] memfd_create("syzkaller", 0) = 3 [pid 5064] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5485] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] getdents64(4, [pid 5485] <... mmap resumed>) = 0x7ff395729000 [pid 5064] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [ 115.023582][ T5483] NILFS (loop0): recovery complete [pid 5064] rmdir("./33/file0" [pid 5485] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5484] <... mount resumed>) = 0 [pid 5483] <... mount resumed>) = 0 [pid 5484] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5483] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5484] <... openat resumed>) = 3 [pid 5483] <... openat resumed>) = 3 [pid 5484] chdir("./file0" [pid 5483] chdir("./file0" [pid 5477] <... sendfile resumed>) = 1048576 [pid 5064] getdents64(3, [pid 5063] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5484] <... chdir resumed>) = 0 [pid 5483] <... chdir resumed>) = 0 [pid 5484] ioctl(4, LOOP_CLR_FD [pid 5483] ioctl(4, LOOP_CLR_FD [pid 5484] <... ioctl resumed>) = 0 [pid 5483] <... ioctl resumed>) = 0 [pid 5484] close(4 [pid 5483] close(4 [pid 5485] <... write resumed>) = 2097152 [pid 5484] <... close resumed>) = 0 [pid 5477] open(NULL, O_RDONLY [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5485] munmap(0x7ff395729000, 2097152 [pid 5484] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5483] <... close resumed>) = 0 [pid 5477] <... open resumed>) = -1 EFAULT (Bad address) [pid 5064] close(3 [pid 5063] lstat("./33/file0", [pid 5485] <... munmap resumed>) = 0 [pid 5484] <... open resumed>) = 4 [pid 5483] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5477] exit_group(0 [pid 5485] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5484] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5483] <... open resumed>) = 4 [pid 5064] <... close resumed>) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5485] <... openat resumed>) = 4 [pid 5484] <... open resumed>) = 5 [pid 5483] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5477] <... exit_group resumed>) = ? [ 115.047732][ T5486] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.070372][ T5487] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] rmdir("./33" [pid 5063] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5485] ioctl(4, LOOP_SET_FD, 3 [pid 5484] ftruncate(5, 33587195 [pid 5483] <... open resumed>) = 5 [pid 5477] +++ exited with 0 +++ [pid 5484] <... ftruncate resumed>) = 0 [pid 5483] ftruncate(5, 33587195 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5477, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5064] <... rmdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5484] sendfile(4, 5, NULL, 281474978811909 [pid 5483] <... ftruncate resumed>) = 0 [pid 5485] <... ioctl resumed>) = 0 [pid 5483] sendfile(4, 5, NULL, 281474978811909 [pid 5064] mkdir("./34", 0777 [pid 5063] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5485] close(3 [pid 5067] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./33/binderfs") = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5067] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5485] <... close resumed>) = 0 [pid 5063] fstat(4, [pid 5485] mkdir("./file0", 0777 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5485] <... mkdir resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5063] getdents64(4, [ 115.121712][ T5485] loop3: detected capacity change from 0 to 4096 [pid 5485] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] getdents64(4, [pid 5064] close(3 [pid 5063] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] close(4 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./33/file0") = 0 [pid 5064] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5488 [pid 5063] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./33") = 0 [pid 5063] mkdir("./34", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5489 [pid 5067] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./33/file0") = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./33") = 0 [pid 5067] mkdir("./34", 0777) = 0 [ 115.177248][ T5485] NILFS (loop3): invalid segment: Checksum error in segment payload [ 115.212485][ T5485] NILFS (loop3): trying rollback from an earlier position [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR./strace-static-x86_64: Process 5488 attached ) = 3 ./strace-static-x86_64: Process 5489 attached [pid 5488] chdir("./34" [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5489] chdir("./34" [pid 5488] <... chdir resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5489] <... chdir resumed>) = 0 [pid 5488] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] close(3 [pid 5489] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5488] <... prctl resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5489] <... prctl resumed>) = 0 [pid 5488] setpgid(0, 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5489] setpgid(0, 0 [pid 5488] <... setpgid resumed>) = 0 [pid 5489] <... setpgid resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5490 [pid 5489] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5488] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5489] <... openat resumed>) = 3 [pid 5489] write(3, "1000", 4 [pid 5488] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5490 attached [pid 5489] <... write resumed>) = 4 [pid 5488] write(3, "1000", 4 [pid 5490] chdir("./34" [pid 5489] close(3 [pid 5488] <... write resumed>) = 4 [pid 5490] <... chdir resumed>) = 0 [pid 5489] <... close resumed>) = 0 [pid 5488] close(3 [pid 5490] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5489] symlink("/dev/binderfs", "./binderfs" [pid 5488] <... close resumed>) = 0 [pid 5490] <... prctl resumed>) = 0 [pid 5489] <... symlink resumed>) = 0 [pid 5488] symlink("/dev/binderfs", "./binderfs" [pid 5490] setpgid(0, 0 [pid 5489] memfd_create("syzkaller", 0 [pid 5490] <... setpgid resumed>) = 0 [pid 5489] <... memfd_create resumed>) = 3 [pid 5488] <... symlink resumed>) = 0 [pid 5490] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5489] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5490] <... openat resumed>) = 3 [pid 5489] <... mmap resumed>) = 0x7ff395729000 [pid 5488] memfd_create("syzkaller", 0 [pid 5490] write(3, "1000", 4 [pid 5488] <... memfd_create resumed>) = 3 [pid 5490] <... write resumed>) = 4 [pid 5488] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5490] close(3 [pid 5488] <... mmap resumed>) = 0x7ff395729000 [pid 5490] <... close resumed>) = 0 [pid 5490] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5490] memfd_create("syzkaller", 0) = 3 [pid 5490] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [ 115.278770][ T5485] NILFS (loop3): recovery complete [pid 5485] <... mount resumed>) = 0 [pid 5485] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5485] chdir("./file0") = 0 [pid 5485] ioctl(4, LOOP_CLR_FD) = 0 [pid 5485] close(4 [pid 5488] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5485] <... close resumed>) = 0 [pid 5485] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5489] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5485] <... open resumed>) = 4 [pid 5485] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5485] ftruncate(5, 33587195) = 0 [pid 5485] sendfile(4, 5, NULL, 281474978811909 [ 115.321449][ T5491] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5490] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5489] <... write resumed>) = 2097152 [pid 5489] munmap(0x7ff395729000, 2097152) = 0 [pid 5489] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5489] ioctl(4, LOOP_SET_FD, 3 [pid 5488] <... write resumed>) = 2097152 [pid 5488] munmap(0x7ff395729000, 2097152 [pid 5489] <... ioctl resumed>) = 0 [pid 5489] close(3) = 0 [pid 5489] mkdir("./file0", 0777 [pid 5488] <... munmap resumed>) = 0 [pid 5488] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5490] munmap(0x7ff395729000, 2097152 [pid 5489] <... mkdir resumed>) = 0 [pid 5488] ioctl(4, LOOP_SET_FD, 3 [pid 5489] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5490] <... munmap resumed>) = 0 [pid 5488] <... ioctl resumed>) = 0 [pid 5490] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5488] close(3 [pid 5490] <... openat resumed>) = 4 [pid 5488] <... close resumed>) = 0 [pid 5490] ioctl(4, LOOP_SET_FD, 3 [ 115.448669][ T5489] loop1: detected capacity change from 0 to 4096 [ 115.485022][ T5488] loop2: detected capacity change from 0 to 4096 [pid 5488] mkdir("./file0", 0777 [pid 5490] <... ioctl resumed>) = 0 [pid 5488] <... mkdir resumed>) = 0 [pid 5488] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5490] close(3) = 0 [pid 5490] mkdir("./file0", 0777) = 0 [ 115.514040][ T5490] loop5: detected capacity change from 0 to 4096 [ 115.543270][ T5488] NILFS (loop2): invalid segment: Checksum error in segment payload [ 115.545448][ T5489] NILFS (loop1): invalid segment: Checksum error in segment payload [ 115.558357][ T5488] NILFS (loop2): trying rollback from an earlier position [ 115.577205][ T5490] NILFS (loop5): invalid segment: Checksum error in segment payload [ 115.588704][ T5489] NILFS (loop1): trying rollback from an earlier position [ 115.596631][ T5490] NILFS (loop5): trying rollback from an earlier position [ 115.605664][ T5488] NILFS (loop2): recovery complete [pid 5490] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "") = 0 [pid 5490] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5490] chdir("./file0") = 0 [pid 5490] ioctl(4, LOOP_CLR_FD) = 0 [pid 5490] close(4) = 0 [pid 5490] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5488] <... mount resumed>) = 0 [pid 5490] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5488] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5490] <... open resumed>) = 5 [pid 5488] <... openat resumed>) = 3 [pid 5488] chdir("./file0" [pid 5490] ftruncate(5, 33587195) = 0 [pid 5488] <... chdir resumed>) = 0 [pid 5490] sendfile(4, 5, NULL, 281474978811909 [pid 5488] ioctl(4, LOOP_CLR_FD) = 0 [ 115.633178][ T5489] NILFS (loop1): recovery complete [ 115.633198][ T5490] NILFS (loop5): recovery complete [ 115.641014][ T5492] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.672180][ T5493] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5488] close(4 [pid 5489] <... mount resumed>) = 0 [pid 5488] <... close resumed>) = 0 [pid 5488] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5489] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5488] <... open resumed>) = 4 [pid 5489] <... openat resumed>) = 3 [pid 5488] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5489] chdir("./file0" [pid 5488] ftruncate(5, 33587195 [pid 5489] <... chdir resumed>) = 0 [pid 5489] ioctl(4, LOOP_CLR_FD [pid 5488] <... ftruncate resumed>) = 0 [pid 5488] sendfile(4, 5, NULL, 281474978811909 [pid 5489] <... ioctl resumed>) = 0 [pid 5489] close(4) = 0 [pid 5489] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5489] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5489] ftruncate(5, 33587195) = 0 [ 115.714338][ T5494] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5489] sendfile(4, 5, NULL, 281474978811909 [pid 5484] <... sendfile resumed>) = 1048576 [pid 5484] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5484] exit_group(0) = ? [pid 5484] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5484, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5066] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./34/binderfs") = 0 [pid 5066] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5483] <... sendfile resumed>) = 1048576 [pid 5483] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5483] exit_group(0) = ? [pid 5483] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5483, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=23 /* 0.23 s */} --- [pid 5062] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] unlink("./33/binderfs") = 0 [pid 5062] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5485] <... sendfile resumed>) = 1048576 [pid 5066] getdents64(4, [pid 5485] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5066] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5485] exit_group(0 [pid 5066] getdents64(4, [pid 5485] <... exit_group resumed>) = ? [pid 5066] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] close(4 [pid 5485] +++ exited with 0 +++ [pid 5066] <... close resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5485, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5066] rmdir("./34/file0" [pid 5065] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] <... rmdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] getdents64(3, [pid 5065] <... openat resumed>) = 3 [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5065] fstat(3, [pid 5066] close(3 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... close resumed>) = 0 [pid 5065] getdents64(3, [pid 5066] rmdir("./34" [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./33/binderfs", [pid 5066] <... rmdir resumed>) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] mkdir("./35", 0777 [pid 5065] unlink("./33/binderfs") = 0 [pid 5065] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... mkdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] fstat(4, [pid 5066] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5495 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./33/file0") = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./33"./strace-static-x86_64: Process 5495 attached ) = 0 [pid 5495] chdir("./35") = 0 [pid 5495] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5495] setpgid(0, 0) = 0 [pid 5495] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5495] write(3, "1000", 4 [pid 5062] mkdir("./34", 0777 [pid 5495] <... write resumed>) = 4 [pid 5495] close(3 [pid 5062] <... mkdir resumed>) = 0 [pid 5495] <... close resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5495] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5062] <... openat resumed>) = 3 [pid 5495] memfd_create("syzkaller", 0) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5495] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5062] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5496 ./strace-static-x86_64: Process 5496 attached [pid 5496] chdir("./34") = 0 [pid 5496] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5496] setpgid(0, 0) = 0 [pid 5495] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5496] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5496] write(3, "1000", 4) = 4 [pid 5496] close(3) = 0 [pid 5496] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5496] memfd_create("syzkaller", 0) = 3 [pid 5496] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5065] <... umount2 resumed>) = 0 [pid 5496] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5495] <... write resumed>) = 2097152 [pid 5065] close(4) = 0 [pid 5065] rmdir("./33/file0" [pid 5495] munmap(0x7ff395729000, 2097152 [pid 5065] <... rmdir resumed>) = 0 [pid 5495] <... munmap resumed>) = 0 [pid 5065] getdents64(3, [pid 5495] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5495] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./33") = 0 [pid 5065] mkdir("./34", 0777) = 0 [pid 5496] <... write resumed>) = 2097152 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5495] <... ioctl resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5497 [pid 5495] close(3) = 0 [pid 5495] mkdir("./file0", 0777) = 0 [pid 5495] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, ""./strace-static-x86_64: Process 5497 attached [ 116.498834][ T5495] loop4: detected capacity change from 0 to 4096 [pid 5497] chdir("./34") = 0 [pid 5497] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5497] setpgid(0, 0) = 0 [pid 5496] munmap(0x7ff395729000, 2097152 [pid 5497] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5497] write(3, "1000", 4) = 4 [pid 5497] close(3 [pid 5496] <... munmap resumed>) = 0 [pid 5497] <... close resumed>) = 0 [pid 5497] symlink("/dev/binderfs", "./binderfs" [pid 5490] <... sendfile resumed>) = 1048576 [pid 5497] <... symlink resumed>) = 0 [pid 5496] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5490] open(NULL, O_RDONLY [pid 5497] memfd_create("syzkaller", 0 [pid 5496] <... openat resumed>) = 4 [pid 5490] <... open resumed>) = -1 EFAULT (Bad address) [pid 5497] <... memfd_create resumed>) = 3 [pid 5496] ioctl(4, LOOP_SET_FD, 3 [ 116.565589][ T5495] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5490] exit_group(0 [pid 5497] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5490] <... exit_group resumed>) = ? [pid 5497] <... mmap resumed>) = 0x7ff395729000 [pid 5490] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5490, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5067] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5496] <... ioctl resumed>) = 0 [pid 5067] lstat("./34/binderfs", [pid 5496] close(3 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5496] <... close resumed>) = 0 [pid 5067] unlink("./34/binderfs" [pid 5496] mkdir("./file0", 0777 [pid 5067] <... unlink resumed>) = 0 [pid 5497] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5496] <... mkdir resumed>) = 0 [pid 5067] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 116.606543][ T5496] loop0: detected capacity change from 0 to 4096 [ 116.645383][ T5495] NILFS (loop4): trying rollback from an earlier position [pid 5496] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5488] <... sendfile resumed>) = 1048576 [pid 5488] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5497] <... write resumed>) = 2097152 [ 116.670690][ T5496] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5497] munmap(0x7ff395729000, 2097152 [pid 5488] exit_group(0 [pid 5497] <... munmap resumed>) = 0 [pid 5488] <... exit_group resumed>) = ? [pid 5497] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5488] +++ exited with 0 +++ [pid 5497] <... openat resumed>) = 4 [pid 5497] ioctl(4, LOOP_SET_FD, 3 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5488, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5497] <... ioctl resumed>) = 0 [pid 5064] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5497] close(3 [pid 5489] <... sendfile resumed>) = 1048576 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5497] <... close resumed>) = 0 [ 116.712880][ T5496] NILFS (loop0): trying rollback from an earlier position [ 116.724047][ T5495] NILFS (loop4): recovery complete [ 116.739094][ T5497] loop3: detected capacity change from 0 to 4096 [pid 5489] open(NULL, O_RDONLY [pid 5064] lstat("./34/binderfs", [pid 5497] mkdir("./file0", 0777 [pid 5489] <... open resumed>) = -1 EFAULT (Bad address) [pid 5067] <... umount2 resumed>) = 0 [pid 5489] exit_group(0) = ? [pid 5497] <... mkdir resumed>) = 0 [pid 5495] <... mount resumed>) = 0 [pid 5489] +++ exited with 0 +++ [pid 5067] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5497] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5495] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] unlink("./34/binderfs" [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5489, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5496] <... mount resumed>) = 0 [pid 5495] <... openat resumed>) = 3 [pid 5067] lstat("./34/file0", [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5495] chdir("./file0" [pid 5063] <... restart_syscall resumed>) = 0 [pid 5495] <... chdir resumed>) = 0 [pid 5495] ioctl(4, LOOP_CLR_FD) = 0 [pid 5063] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5495] close(4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5496] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5495] <... close resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5496] <... openat resumed>) = 3 [pid 5495] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5067] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5496] chdir("./file0" [pid 5495] <... open resumed>) = 4 [pid 5063] fstat(3, [pid 5495] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5496] <... chdir resumed>) = 0 [pid 5495] <... open resumed>) = 5 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(3, [pid 5496] ioctl(4, LOOP_CLR_FD [pid 5495] ftruncate(5, 33587195 [pid 5067] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5496] <... ioctl resumed>) = 0 [pid 5495] <... ftruncate resumed>) = 0 [pid 5067] <... openat resumed>) = 4 [pid 5063] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5496] close(4 [pid 5495] sendfile(4, 5, NULL, 281474978811909 [pid 5067] fstat(4, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5496] <... close resumed>) = 0 [ 116.767439][ T5498] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.776681][ T5496] NILFS (loop0): recovery complete [ 116.789757][ T5499] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.795954][ T5497] NILFS (loop3): invalid segment: Checksum error in segment payload [ 116.808958][ T5497] NILFS (loop3): trying rollback from an earlier position [pid 5063] lstat("./34/binderfs", [pid 5496] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./34/binderfs" [pid 5067] getdents64(4, [pid 5063] <... unlink resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5496] <... open resumed>) = 4 [pid 5067] getdents64(4, [pid 5496] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5067] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5496] <... open resumed>) = 5 [pid 5496] ftruncate(5, 33587195 [pid 5067] rmdir("./34/file0") = 0 [pid 5496] <... ftruncate resumed>) = 0 [pid 5067] getdents64(3, [pid 5496] sendfile(4, 5, NULL, 281474978811909 [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./34") = 0 [pid 5067] mkdir("./35", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5500 ./strace-static-x86_64: Process 5500 attached [pid 5500] chdir("./35") = 0 [pid 5500] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5497] <... mount resumed>) = 0 [ 116.882776][ T5497] NILFS (loop3): recovery complete [pid 5500] <... prctl resumed>) = 0 [pid 5500] setpgid(0, 0 [pid 5497] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5500] <... setpgid resumed>) = 0 [pid 5497] <... openat resumed>) = 3 [pid 5500] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5497] chdir("./file0" [pid 5500] <... openat resumed>) = 3 [pid 5497] <... chdir resumed>) = 0 [pid 5500] write(3, "1000", 4 [pid 5497] ioctl(4, LOOP_CLR_FD [pid 5500] <... write resumed>) = 4 [pid 5497] <... ioctl resumed>) = 0 [pid 5500] close(3 [pid 5497] close(4 [pid 5500] <... close resumed>) = 0 [pid 5497] <... close resumed>) = 0 [pid 5500] symlink("/dev/binderfs", "./binderfs" [pid 5497] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5500] <... symlink resumed>) = 0 [pid 5497] <... open resumed>) = 4 [pid 5500] memfd_create("syzkaller", 0 [pid 5497] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5500] <... memfd_create resumed>) = 3 [pid 5500] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5497] <... open resumed>) = 5 [pid 5500] <... mmap resumed>) = 0x7ff395729000 [pid 5497] ftruncate(5, 33587195) = 0 [ 116.909154][ T5501] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5497] sendfile(4, 5, NULL, 281474978811909 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5500] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] rmdir("./34/file0") = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./34") = 0 [pid 5064] mkdir("./35", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] <... umount2 resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... close resumed>) = 0 [pid 5063] lstat("./34/file0", [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5502 [pid 5063] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, ./strace-static-x86_64: Process 5502 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5502] chdir("./35" [pid 5063] getdents64(4, [pid 5502] <... chdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5502] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] getdents64(4, [pid 5502] <... prctl resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5502] setpgid(0, 0 [pid 5063] close(4 [pid 5502] <... setpgid resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5502] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] rmdir("./34/file0" [pid 5502] <... openat resumed>) = 3 [pid 5502] write(3, "1000", 4 [pid 5063] <... rmdir resumed>) = 0 [pid 5502] <... write resumed>) = 4 [pid 5063] getdents64(3, [pid 5502] close(3 [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5502] <... close resumed>) = 0 [pid 5063] close(3 [pid 5502] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... close resumed>) = 0 [pid 5502] <... symlink resumed>) = 0 [pid 5063] rmdir("./34" [pid 5502] memfd_create("syzkaller", 0 [pid 5500] <... write resumed>) = 2097152 [pid 5502] <... memfd_create resumed>) = 3 [pid 5063] <... rmdir resumed>) = 0 [pid 5502] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] mkdir("./35", 0777 [pid 5502] <... mmap resumed>) = 0x7ff395729000 [pid 5500] munmap(0x7ff395729000, 2097152 [pid 5063] <... mkdir resumed>) = 0 [pid 5500] <... munmap resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5500] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5063] <... openat resumed>) = 3 [pid 5500] <... openat resumed>) = 4 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5502] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5500] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5500] <... ioctl resumed>) = 0 [pid 5063] close(3 [pid 5500] close(3 [pid 5063] <... close resumed>) = 0 [pid 5500] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5500] mkdir("./file0", 0777 [pid 5063] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5503 [pid 5500] <... mkdir resumed>) = 0 [pid 5500] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, ""./strace-static-x86_64: Process 5503 attached [pid 5503] chdir("./35") = 0 [pid 5503] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5503] setpgid(0, 0) = 0 [pid 5503] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5503] write(3, "1000", 4) = 4 [ 117.152366][ T5500] loop5: detected capacity change from 0 to 4096 [pid 5503] close(3) = 0 [pid 5503] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5503] memfd_create("syzkaller", 0) = 3 [pid 5503] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5502] <... write resumed>) = 2097152 [pid 5502] munmap(0x7ff395729000, 2097152) = 0 [pid 5502] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 117.214099][ T5500] NILFS (loop5): invalid segment: Checksum error in segment payload [ 117.245053][ T5502] loop2: detected capacity change from 0 to 4096 [pid 5502] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5502] close(3) = 0 [pid 5502] mkdir("./file0", 0777) = 0 [pid 5502] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [ 117.258788][ T5500] NILFS (loop5): trying rollback from an earlier position [pid 5503] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5503] munmap(0x7ff395729000, 2097152) = 0 [pid 5503] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 117.330003][ T5502] NILFS (loop2): invalid segment: Checksum error in segment payload [ 117.353590][ T5502] NILFS (loop2): trying rollback from an earlier position [ 117.374922][ T5500] NILFS (loop5): recovery complete [pid 5503] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5503] close(3) = 0 [pid 5503] mkdir("./file0", 0777) = 0 [pid 5503] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5500] <... mount resumed>) = 0 [pid 5500] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5500] chdir("./file0") = 0 [ 117.380965][ T5503] loop1: detected capacity change from 0 to 4096 [ 117.397018][ T5502] NILFS (loop2): recovery complete [ 117.411410][ T5504] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.422755][ T5503] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5500] ioctl(4, LOOP_CLR_FD) = 0 [pid 5500] close(4) = 0 [pid 5500] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5502] <... mount resumed>) = 0 [pid 5500] <... open resumed>) = 4 [pid 5502] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5500] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5502] <... openat resumed>) = 3 [pid 5500] <... open resumed>) = 5 [pid 5502] chdir("./file0" [pid 5500] ftruncate(5, 33587195 [pid 5502] <... chdir resumed>) = 0 [pid 5500] <... ftruncate resumed>) = 0 [pid 5502] ioctl(4, LOOP_CLR_FD [ 117.442258][ T5505] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.462260][ T5503] NILFS (loop1): trying rollback from an earlier position [pid 5500] sendfile(4, 5, NULL, 281474978811909 [pid 5502] <... ioctl resumed>) = 0 [pid 5502] close(4) = 0 [pid 5502] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [ 117.498390][ T5503] NILFS (loop1): recovery complete [pid 5502] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5502] ftruncate(5, 33587195) = 0 [pid 5502] sendfile(4, 5, NULL, 281474978811909 [pid 5503] <... mount resumed>) = 0 [pid 5503] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5503] chdir("./file0") = 0 [pid 5503] ioctl(4, LOOP_CLR_FD) = 0 [pid 5503] close(4) = 0 [pid 5503] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5503] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5503] ftruncate(5, 33587195) = 0 [ 117.552826][ T5506] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5503] sendfile(4, 5, NULL, 281474978811909 [pid 5495] <... sendfile resumed>) = 1048576 [pid 5495] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5495] exit_group(0) = ? [pid 5495] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5495, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5066] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./35/binderfs") = 0 [pid 5066] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5497] <... sendfile resumed>) = 1048576 [pid 5497] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5497] exit_group(0) = ? [pid 5497] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5497, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5065] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5496] <... sendfile resumed>) = 1048576 [pid 5065] unlink("./34/binderfs" [pid 5496] open(NULL, O_RDONLY [pid 5065] <... unlink resumed>) = 0 [pid 5496] <... open resumed>) = -1 EFAULT (Bad address) [pid 5065] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5496] exit_group(0) = ? [pid 5496] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5496, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5062] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./34/binderfs", [pid 5066] <... umount2 resumed>) = 0 [pid 5062] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] unlink("./34/binderfs" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... unlink resumed>) = 0 [pid 5066] lstat("./35/file0", [pid 5062] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./35/file0") = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./35") = 0 [pid 5066] mkdir("./36", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5507 ./strace-static-x86_64: Process 5507 attached [pid 5507] chdir("./36") = 0 [pid 5507] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5507] setpgid(0, 0) = 0 [pid 5507] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5507] write(3, "1000", 4) = 4 [pid 5507] close(3) = 0 [pid 5507] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5507] memfd_create("syzkaller", 0) = 3 [pid 5507] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5507] <... mmap resumed>) = 0x7ff395729000 [pid 5065] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./34/file0") = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./34") = 0 [pid 5065] mkdir("./35", 0777) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3 [pid 5507] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... close resumed>) = 0 [pid 5062] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5508 [pid 5062] lstat("./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5508 attached ) = 4 [pid 5508] chdir("./35") = 0 [pid 5062] fstat(4, [pid 5508] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5508] setpgid(0, 0) = 0 [pid 5062] getdents64(4, [pid 5508] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5062] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5508] write(3, "1000", 4 [pid 5062] getdents64(4, [pid 5508] <... write resumed>) = 4 [pid 5508] close(3 [pid 5062] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5508] <... close resumed>) = 0 [pid 5508] symlink("/dev/binderfs", "./binderfs" [pid 5062] close(4 [pid 5508] <... symlink resumed>) = 0 [pid 5508] memfd_create("syzkaller", 0 [pid 5062] <... close resumed>) = 0 [pid 5508] <... memfd_create resumed>) = 3 [pid 5062] rmdir("./34/file0" [pid 5508] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./34") = 0 [pid 5062] mkdir("./35", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5507] <... write resumed>) = 2097152 [pid 5062] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5062] close(3) = 0 [pid 5508] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5507] munmap(0x7ff395729000, 2097152 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5507] <... munmap resumed>) = 0 [pid 5507] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5062] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5509 [pid 5507] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5509 attached ) = 0 [pid 5509] chdir("./35" [pid 5507] close(3) = 0 [pid 5509] <... chdir resumed>) = 0 [pid 5507] mkdir("./file0", 0777 [pid 5509] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5507] <... mkdir resumed>) = 0 [pid 5509] <... prctl resumed>) = 0 [pid 5507] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5509] setpgid(0, 0) = 0 [pid 5509] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 118.318231][ T5507] loop4: detected capacity change from 0 to 4096 [pid 5509] write(3, "1000", 4) = 4 [pid 5509] close(3 [pid 5502] <... sendfile resumed>) = 1048576 [pid 5500] <... sendfile resumed>) = 1048576 [pid 5509] <... close resumed>) = 0 [pid 5502] open(NULL, O_RDONLY [pid 5500] open(NULL, O_RDONLY [pid 5509] symlink("/dev/binderfs", "./binderfs" [pid 5502] <... open resumed>) = -1 EFAULT (Bad address) [pid 5500] <... open resumed>) = -1 EFAULT (Bad address) [pid 5509] <... symlink resumed>) = 0 [pid 5502] exit_group(0 [pid 5509] memfd_create("syzkaller", 0 [pid 5502] <... exit_group resumed>) = ? [pid 5500] exit_group(0 [pid 5509] <... memfd_create resumed>) = 3 [pid 5508] <... write resumed>) = 2097152 [pid 5509] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5502] +++ exited with 0 +++ [pid 5500] <... exit_group resumed>) = ? [pid 5509] <... mmap resumed>) = 0x7ff395729000 [pid 5508] munmap(0x7ff395729000, 2097152) = 0 [pid 5500] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5502, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 5508] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5500, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 5508] <... openat resumed>) = 4 [pid 5064] <... restart_syscall resumed>) = 0 [ 118.373732][ T5507] NILFS (loop4): invalid segment: Checksum error in segment payload [ 118.389547][ T5507] NILFS (loop4): trying rollback from an earlier position [pid 5508] ioctl(4, LOOP_SET_FD, 3 [pid 5067] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... openat resumed>) = 3 [pid 5064] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] fstat(3, [pid 5064] <... openat resumed>) = 3 [pid 5509] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5508] <... ioctl resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] fstat(3, [pid 5508] close(3 [pid 5067] getdents64(3, [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5507] <... mount resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] getdents64(3, [pid 5508] <... close resumed>) = 0 [pid 5507] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5508] mkdir("./file0", 0777 [pid 5507] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5508] <... mkdir resumed>) = 0 [pid 5507] chdir("./file0" [pid 5067] lstat("./35/binderfs", [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5509] <... write resumed>) = 2097152 [pid 5508] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5507] <... chdir resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 118.417278][ T5508] loop3: detected capacity change from 0 to 4096 [ 118.432474][ T5507] NILFS (loop4): recovery complete [ 118.451780][ T5510] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] lstat("./35/binderfs", [pid 5509] munmap(0x7ff395729000, 2097152 [pid 5507] ioctl(4, LOOP_CLR_FD [pid 5067] unlink("./35/binderfs" [pid 5509] <... munmap resumed>) = 0 [pid 5507] <... ioctl resumed>) = 0 [pid 5509] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5509] <... openat resumed>) = 4 [pid 5509] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... unlink resumed>) = 0 [pid 5509] <... ioctl resumed>) = 0 [pid 5507] close(4 [pid 5067] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] unlink("./35/binderfs" [pid 5507] <... close resumed>) = 0 [pid 5509] close(3) = 0 [pid 5509] mkdir("./file0", 0777) = 0 [pid 5509] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5507] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5064] <... unlink resumed>) = 0 [pid 5064] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5507] <... open resumed>) = 4 [pid 5507] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5507] ftruncate(5, 33587195) = 0 [ 118.475301][ T5509] loop0: detected capacity change from 0 to 4096 [ 118.503182][ T5509] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5507] sendfile(4, 5, NULL, 281474978811909 [pid 5503] <... sendfile resumed>) = 1048576 [pid 5503] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5503] exit_group(0) = ? [pid 5503] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5503, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5063] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./35/binderfs") = 0 [ 118.533090][ T5508] NILFS (loop3): invalid segment: Checksum error in segment payload [ 118.548221][ T5509] NILFS (loop0): trying rollback from an earlier position [ 118.577895][ T5508] NILFS (loop3): trying rollback from an earlier position [pid 5063] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5509] <... mount resumed>) = 0 [pid 5509] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... umount2 resumed>) = 0 [pid 5509] <... openat resumed>) = 3 [pid 5509] chdir("./file0") = 0 [pid 5509] ioctl(4, LOOP_CLR_FD) = 0 [ 118.634986][ T5509] NILFS (loop0): recovery complete [ 118.651975][ T5511] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.679264][ T5508] NILFS (loop3): recovery complete [pid 5509] close(4 [pid 5067] <... umount2 resumed>) = 0 [pid 5509] <... close resumed>) = 0 [pid 5509] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5508] <... mount resumed>) = 0 [pid 5067] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5508] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5508] <... openat resumed>) = 3 [pid 5064] lstat("./35/file0", [pid 5508] chdir("./file0" [pid 5067] lstat("./35/file0", [pid 5508] <... chdir resumed>) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5508] ioctl(4, LOOP_CLR_FD [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5508] <... ioctl resumed>) = 0 [pid 5067] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5508] close(4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5508] <... close resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5508] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5067] <... openat resumed>) = 4 [pid 5064] <... openat resumed>) = 4 [pid 5067] fstat(4, [pid 5509] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5508] <... open resumed>) = 4 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] fstat(4, [pid 5063] <... umount2 resumed>) = 0 [pid 5508] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5067] getdents64(4, [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5508] <... open resumed>) = 5 [pid 5067] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5508] ftruncate(5, 33587195 [pid 5067] getdents64(4, [pid 5064] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [ 118.692736][ T5512] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] lstat("./35/file0", [pid 5509] <... open resumed>) = 5 [pid 5508] <... ftruncate resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] getdents64(4, [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5508] sendfile(4, 5, NULL, 281474978811909 [pid 5067] close(4 [pid 5064] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5509] ftruncate(5, 33587195 [pid 5067] <... close resumed>) = 0 [pid 5064] close(4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5509] <... ftruncate resumed>) = 0 [pid 5067] rmdir("./35/file0" [pid 5064] <... close resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5509] sendfile(4, 5, NULL, 281474978811909 [pid 5067] <... rmdir resumed>) = 0 [pid 5064] rmdir("./35/file0" [pid 5063] <... openat resumed>) = 4 [pid 5067] getdents64(3, [pid 5064] <... rmdir resumed>) = 0 [pid 5063] fstat(4, [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] getdents64(3, [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] close(3 [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(4, [pid 5067] <... close resumed>) = 0 [pid 5064] close(3 [pid 5063] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] rmdir("./35" [pid 5064] <... close resumed>) = 0 [pid 5063] getdents64(4, [pid 5067] <... rmdir resumed>) = 0 [pid 5064] rmdir("./35" [pid 5063] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] mkdir("./36", 0777 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] close(4 [pid 5067] <... mkdir resumed>) = 0 [pid 5064] mkdir("./36", 0777 [pid 5063] <... close resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5064] <... mkdir resumed>) = 0 [pid 5063] rmdir("./35/file0" [pid 5067] <... openat resumed>) = 3 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] <... rmdir resumed>) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5064] <... openat resumed>) = 3 [pid 5063] getdents64(3, [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] close(3 [pid 5067] <... close resumed>) = 0 [pid 5064] close(3 [pid 5063] <... close resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... close resumed>) = 0 [pid 5063] rmdir("./35" [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... rmdir resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5513 [pid 5063] mkdir("./36", 0777 [pid 5064] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5514 [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 5513 attached ) = 3 [pid 5513] chdir("./36" [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5513] <... chdir resumed>) = 0 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5513] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] close(3 [pid 5513] <... prctl resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5513] setpgid(0, 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5513] <... setpgid resumed>) = 0 [pid 5513] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5515 [pid 5513] <... openat resumed>) = 3 [pid 5513] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 5515 attached [pid 5513] close(3) = 0 [pid 5515] chdir("./36" [pid 5513] symlink("/dev/binderfs", "./binderfs" [pid 5515] <... chdir resumed>) = 0 [pid 5513] <... symlink resumed>) = 0 [pid 5515] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5513] memfd_create("syzkaller", 0 [pid 5515] <... prctl resumed>) = 0 [pid 5513] <... memfd_create resumed>) = 3 [pid 5515] setpgid(0, 0 [pid 5513] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5515] <... setpgid resumed>) = 0 [pid 5513] <... mmap resumed>) = 0x7ff395729000 [pid 5515] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 5514 attached [pid 5515] write(3, "1000", 4) = 4 [pid 5515] close(3) = 0 [pid 5514] chdir("./36" [pid 5515] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5514] <... chdir resumed>) = 0 [pid 5515] memfd_create("syzkaller", 0) = 3 [pid 5515] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5514] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5514] setpgid(0, 0) = 0 [pid 5514] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5513] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5514] write(3, "1000", 4) = 4 [pid 5514] close(3 [pid 5515] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5514] <... close resumed>) = 0 [pid 5514] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5514] memfd_create("syzkaller", 0) = 3 [pid 5514] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5514] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5513] <... write resumed>) = 2097152 [pid 5513] munmap(0x7ff395729000, 2097152) = 0 [pid 5513] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5515] <... write resumed>) = 2097152 [pid 5513] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5514] <... write resumed>) = 2097152 [pid 5514] munmap(0x7ff395729000, 2097152 [pid 5515] munmap(0x7ff395729000, 2097152 [pid 5514] <... munmap resumed>) = 0 [pid 5515] <... munmap resumed>) = 0 [pid 5514] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5515] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5515] ioctl(4, LOOP_SET_FD, 3 [pid 5514] <... openat resumed>) = 4 [pid 5514] ioctl(4, LOOP_SET_FD, 3 [pid 5513] close(3) = 0 [pid 5513] mkdir("./file0", 0777) = 0 [ 119.031109][ T5513] loop5: detected capacity change from 0 to 4096 [ 119.055615][ T5515] loop1: detected capacity change from 0 to 4096 [ 119.063404][ T5514] loop2: detected capacity change from 0 to 4096 [pid 5513] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5515] <... ioctl resumed>) = 0 [pid 5515] close(3) = 0 [pid 5515] mkdir("./file0", 0777) = 0 [pid 5515] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5514] <... ioctl resumed>) = 0 [pid 5514] close(3) = 0 [pid 5514] mkdir("./file0", 0777) = 0 [ 119.079852][ T5513] NILFS (loop5): invalid segment: Checksum error in segment payload [ 119.114537][ T5514] NILFS (loop2): invalid segment: Checksum error in segment payload [ 119.129675][ T5515] NILFS (loop1): invalid segment: Checksum error in segment payload [ 119.139723][ T5513] NILFS (loop5): trying rollback from an earlier position [ 119.147195][ T5514] NILFS (loop2): trying rollback from an earlier position [ 119.156164][ T5515] NILFS (loop1): trying rollback from an earlier position [ 119.214063][ T5513] NILFS (loop5): recovery complete [pid 5514] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5513] <... mount resumed>) = 0 [pid 5513] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5513] chdir("./file0") = 0 [pid 5513] ioctl(4, LOOP_CLR_FD) = 0 [pid 5513] close(4) = 0 [pid 5513] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5513] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5513] ftruncate(5, 33587195) = 0 [ 119.240047][ T5515] NILFS (loop1): recovery complete [ 119.249581][ T5514] NILFS (loop2): recovery complete [ 119.249676][ T5516] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5513] sendfile(4, 5, NULL, 281474978811909 [pid 5515] <... mount resumed>) = 0 [pid 5515] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5515] chdir("./file0") = 0 [pid 5515] ioctl(4, LOOP_CLR_FD) = 0 [pid 5515] close(4) = 0 [pid 5515] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5514] <... mount resumed>) = 0 [pid 5515] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5514] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5515] <... open resumed>) = 5 [pid 5514] <... openat resumed>) = 3 [pid 5515] ftruncate(5, 33587195) = 0 [pid 5515] sendfile(4, 5, NULL, 281474978811909 [pid 5514] chdir("./file0") = 0 [pid 5514] ioctl(4, LOOP_CLR_FD) = 0 [pid 5514] close(4) = 0 [ 119.289289][ T5517] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.314284][ T5518] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5514] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5514] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5514] ftruncate(5, 33587195) = 0 [pid 5514] sendfile(4, 5, NULL, 281474978811909 [pid 5507] <... sendfile resumed>) = 1048576 [pid 5507] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5507] exit_group(0) = ? [pid 5507] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5507, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5066] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./36/binderfs") = 0 [pid 5066] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5509] <... sendfile resumed>) = 1048576 [pid 5509] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5509] exit_group(0) = ? [pid 5509] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5509, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5062] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] unlink("./35/binderfs") = 0 [pid 5062] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5508] <... sendfile resumed>) = 1048576 [pid 5508] open(NULL, O_RDONLY [pid 5066] getdents64(4, [pid 5508] <... open resumed>) = -1 EFAULT (Bad address) [pid 5508] exit_group(0) = ? [pid 5066] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5508] +++ exited with 0 +++ [pid 5066] getdents64(4, [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5508, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=23 /* 0.23 s */} --- [pid 5066] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./36/file0" [pid 5065] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, [pid 5066] <... rmdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./35/binderfs", [pid 5066] getdents64(3, [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./35/binderfs") = 0 [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5065] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(3) = 0 [pid 5066] rmdir("./36") = 0 [pid 5066] mkdir("./37", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5519 ./strace-static-x86_64: Process 5519 attached [pid 5519] chdir("./37" [pid 5062] <... umount2 resumed>) = 0 [pid 5519] <... chdir resumed>) = 0 [pid 5519] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5519] setpgid(0, 0) = 0 [pid 5519] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5519] write(3, "1000", 4) = 4 [pid 5519] close(3) = 0 [pid 5519] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5519] memfd_create("syzkaller", 0) = 3 [pid 5519] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5062] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./35/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./35/file0") = 0 [pid 5062] getdents64(3, [pid 5519] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5062] close(3 [pid 5065] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] rmdir("./35" [pid 5065] lstat("./35/file0", [pid 5062] <... rmdir resumed>) = 0 [pid 5062] mkdir("./36", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5065] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5520 [pid 5065] <... openat resumed>) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, ./strace-static-x86_64: Process 5520 attached 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, [pid 5520] chdir("./36" [pid 5065] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5520] <... chdir resumed>) = 0 [pid 5065] close(4 [pid 5520] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./35/file0" [pid 5520] <... prctl resumed>) = 0 [pid 5520] setpgid(0, 0 [pid 5519] <... write resumed>) = 2097152 [pid 5065] <... rmdir resumed>) = 0 [pid 5520] <... setpgid resumed>) = 0 [pid 5519] munmap(0x7ff395729000, 2097152 [pid 5065] getdents64(3, [pid 5520] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5519] <... munmap resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5520] <... openat resumed>) = 3 [pid 5519] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] close(3 [pid 5520] write(3, "1000", 4 [pid 5519] <... openat resumed>) = 4 [pid 5065] <... close resumed>) = 0 [pid 5520] <... write resumed>) = 4 [pid 5519] ioctl(4, LOOP_SET_FD, 3 [pid 5065] rmdir("./35" [pid 5520] close(3) = 0 [pid 5520] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... rmdir resumed>) = 0 [pid 5520] <... symlink resumed>) = 0 [pid 5065] mkdir("./36", 0777 [pid 5520] memfd_create("syzkaller", 0) = 3 [pid 5065] <... mkdir resumed>) = 0 [pid 5520] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5519] <... ioctl resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5519] close(3) = 0 [pid 5519] mkdir("./file0", 0777) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5521 [pid 5519] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [ 119.986705][ T5519] loop4: detected capacity change from 0 to 4096 [pid 5520] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5521 attached [pid 5521] chdir("./36") = 0 [pid 5521] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5521] setpgid(0, 0) = 0 [pid 5521] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5521] write(3, "1000", 4) = 4 [pid 5521] close(3) = 0 [pid 5521] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5521] memfd_create("syzkaller", 0) = 3 [pid 5520] <... write resumed>) = 2097152 [pid 5521] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5520] munmap(0x7ff395729000, 2097152) = 0 [pid 5520] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 120.062320][ T5519] NILFS (loop4): invalid segment: Checksum error in segment payload [ 120.086383][ T5519] NILFS (loop4): trying rollback from an earlier position [pid 5520] ioctl(4, LOOP_SET_FD, 3 [pid 5521] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5519] <... mount resumed>) = 0 [pid 5519] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5519] chdir("./file0") = 0 [pid 5520] <... ioctl resumed>) = 0 [pid 5520] close(3 [pid 5519] ioctl(4, LOOP_CLR_FD) = 0 [pid 5519] close(4) = 0 [pid 5520] <... close resumed>) = 0 [pid 5519] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5520] mkdir("./file0", 0777) = 0 [pid 5519] <... open resumed>) = 4 [pid 5520] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [ 120.120423][ T5519] NILFS (loop4): recovery complete [ 120.120510][ T5520] loop0: detected capacity change from 0 to 4096 [ 120.153225][ T5522] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5519] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5513] <... sendfile resumed>) = 1048576 [pid 5519] <... open resumed>) = 5 [pid 5513] open(NULL, O_RDONLY [pid 5519] ftruncate(5, 33587195 [pid 5513] <... open resumed>) = -1 EFAULT (Bad address) [pid 5519] <... ftruncate resumed>) = 0 [pid 5513] exit_group(0 [pid 5519] sendfile(4, 5, NULL, 281474978811909 [pid 5513] <... exit_group resumed>) = ? [pid 5513] +++ exited with 0 +++ [pid 5521] <... write resumed>) = 2097152 [pid 5514] <... sendfile resumed>) = 1048576 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5513, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5521] munmap(0x7ff395729000, 2097152 [pid 5514] open(NULL, O_RDONLY [pid 5067] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5521] <... munmap resumed>) = 0 [pid 5514] <... open resumed>) = -1 EFAULT (Bad address) [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5521] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5515] <... sendfile resumed>) = 1048576 [pid 5514] exit_group(0 [pid 5067] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5521] <... openat resumed>) = 4 [pid 5515] open(NULL, O_RDONLY [pid 5514] <... exit_group resumed>) = ? [pid 5067] <... openat resumed>) = 3 [pid 5521] ioctl(4, LOOP_SET_FD, 3 [pid 5515] <... open resumed>) = -1 EFAULT (Bad address) [pid 5514] +++ exited with 0 +++ [pid 5067] fstat(3, [pid 5515] exit_group(0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5514, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5515] <... exit_group resumed>) = ? [pid 5067] getdents64(3, [pid 5515] +++ exited with 0 +++ [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5515, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] unlink("./36/binderfs" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... unlink resumed>) = 0 [pid 5064] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 3 [pid 5064] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] fstat(3, [pid 5064] <... openat resumed>) = 3 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] fstat(3, [pid 5063] getdents64(3, [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] getdents64(3, [pid 5063] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5521] <... ioctl resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5521] close(3 [pid 5064] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] lstat("./36/binderfs", [pid 5521] <... close resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5521] mkdir("./file0", 0777 [pid 5064] lstat("./36/binderfs", [pid 5063] unlink("./36/binderfs" [pid 5521] <... mkdir resumed>) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] <... unlink resumed>) = 0 [ 120.244293][ T5520] NILFS (loop0): invalid segment: Checksum error in segment payload [ 120.252971][ T5520] NILFS (loop0): trying rollback from an earlier position [ 120.256498][ T5521] loop3: detected capacity change from 0 to 4096 [pid 5521] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5064] unlink("./36/binderfs" [pid 5063] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... unlink resumed>) = 0 [pid 5064] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5520] <... mount resumed>) = 0 [pid 5520] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5520] chdir("./file0") = 0 [pid 5520] ioctl(4, LOOP_CLR_FD) = 0 [pid 5520] close(4) = 0 [pid 5520] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5520] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5520] ftruncate(5, 33587195) = 0 [ 120.317679][ T5520] NILFS (loop0): recovery complete [ 120.322214][ T5521] NILFS (loop3): invalid segment: Checksum error in segment payload [ 120.339911][ T5523] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.365995][ T5521] NILFS (loop3): trying rollback from an earlier position [pid 5520] sendfile(4, 5, NULL, 281474978811909 [pid 5064] <... umount2 resumed>) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./36/file0") = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./36") = 0 [pid 5067] <... openat resumed>) = 4 [pid 5064] mkdir("./37", 0777) = 0 [pid 5067] fstat(4, [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 120.470728][ T5521] NILFS (loop3): recovery complete [pid 5067] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] <... umount2 resumed>) = 0 [pid 5067] getdents64(4, [pid 5063] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] close(4 [pid 5063] lstat("./36/file0", [pid 5067] <... close resumed>) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] rmdir("./36/file0" [pid 5063] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5521] <... mount resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5525 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] getdents64(3, [pid 5063] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5521] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5521] <... openat resumed>) = 3 [pid 5067] close(3 [pid 5063] fstat(4, [pid 5521] chdir("./file0" [pid 5067] <... close resumed>) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] rmdir("./36" [pid 5063] getdents64(4, [pid 5067] <... rmdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5521] <... chdir resumed>) = 0 [pid 5067] mkdir("./37", 0777 [pid 5063] getdents64(4, ./strace-static-x86_64: Process 5525 attached [pid 5521] ioctl(4, LOOP_CLR_FD [pid 5067] <... mkdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5525] chdir("./37" [pid 5521] <... ioctl resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5063] close(4 [pid 5525] <... chdir resumed>) = 0 [pid 5521] close(4 [pid 5067] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5525] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5521] <... close resumed>) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5063] rmdir("./36/file0" [pid 5525] <... prctl resumed>) = 0 [pid 5521] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] <... rmdir resumed>) = 0 [pid 5525] setpgid(0, 0 [pid 5067] close(3 [pid 5063] getdents64(3, [pid 5525] <... setpgid resumed>) = 0 [pid 5521] <... open resumed>) = 4 [pid 5067] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [ 120.503901][ T5524] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5525] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5521] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] close(3 [pid 5525] <... openat resumed>) = 3 [pid 5521] <... open resumed>) = 5 [pid 5063] <... close resumed>) = 0 [pid 5525] write(3, "1000", 4 [pid 5521] ftruncate(5, 33587195 [pid 5067] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5526 [pid 5063] rmdir("./36" [pid 5525] <... write resumed>) = 4 [pid 5521] <... ftruncate resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5525] close(3 [pid 5521] sendfile(4, 5, NULL, 281474978811909 [pid 5063] mkdir("./37", 0777 [pid 5525] <... close resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5526 attached [pid 5525] symlink("/dev/binderfs", "./binderfs" [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5526] chdir("./37" [pid 5525] <... symlink resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5526] <... chdir resumed>) = 0 [pid 5525] memfd_create("syzkaller", 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5526] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5526] <... prctl resumed>) = 0 [pid 5063] close(3 [pid 5526] setpgid(0, 0 [pid 5525] <... memfd_create resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5526] <... setpgid resumed>) = 0 [pid 5525] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5526] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5525] <... mmap resumed>) = 0x7ff395729000 [pid 5526] <... openat resumed>) = 3 [pid 5063] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5527 [pid 5526] write(3, "1000", 4) = 4 [pid 5526] close(3) = 0 [pid 5526] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 5527 attached [pid 5526] memfd_create("syzkaller", 0 [pid 5527] chdir("./37" [pid 5526] <... memfd_create resumed>) = 3 [pid 5527] <... chdir resumed>) = 0 [pid 5526] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5527] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5526] <... mmap resumed>) = 0x7ff395729000 [pid 5527] <... prctl resumed>) = 0 [pid 5527] setpgid(0, 0) = 0 [pid 5527] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5525] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5527] write(3, "1000", 4) = 4 [pid 5527] close(3) = 0 [pid 5527] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5527] memfd_create("syzkaller", 0 [pid 5526] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5527] <... memfd_create resumed>) = 3 [pid 5527] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5527] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5526] <... write resumed>) = 2097152 [pid 5525] <... write resumed>) = 2097152 [pid 5525] munmap(0x7ff395729000, 2097152 [pid 5526] munmap(0x7ff395729000, 2097152) = 0 [pid 5525] <... munmap resumed>) = 0 [pid 5526] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5525] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5526] <... openat resumed>) = 4 [pid 5525] <... openat resumed>) = 4 [pid 5526] ioctl(4, LOOP_SET_FD, 3 [pid 5525] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5527] <... write resumed>) = 2097152 [pid 5525] close(3 [pid 5527] munmap(0x7ff395729000, 2097152) = 0 [pid 5527] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5527] ioctl(4, LOOP_SET_FD, 3 [pid 5525] <... close resumed>) = 0 [pid 5526] <... ioctl resumed>) = 0 [pid 5525] mkdir("./file0", 0777 [pid 5526] close(3) = 0 [pid 5525] <... mkdir resumed>) = 0 [pid 5526] mkdir("./file0", 0777 [pid 5525] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5526] <... mkdir resumed>) = 0 [pid 5526] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5527] <... ioctl resumed>) = 0 [pid 5527] close(3) = 0 [pid 5527] mkdir("./file0", 0777) = 0 [ 120.767454][ T5526] loop5: detected capacity change from 0 to 4096 [ 120.774592][ T5525] loop2: detected capacity change from 0 to 4096 [ 120.797826][ T5527] loop1: detected capacity change from 0 to 4096 [ 120.851038][ T5526] NILFS (loop5): invalid segment: Checksum error in segment payload [ 120.861590][ T5526] NILFS (loop5): trying rollback from an earlier position [ 120.868780][ T5527] NILFS (loop1): invalid segment: Checksum error in segment payload [ 120.877360][ T5525] NILFS (loop2): invalid segment: Checksum error in segment payload [ 120.878374][ T5527] NILFS (loop1): trying rollback from an earlier position [ 120.903722][ T5525] NILFS (loop2): trying rollback from an earlier position [ 120.935322][ T5527] NILFS (loop1): recovery complete [ 120.942821][ T5526] NILFS (loop5): recovery complete [pid 5527] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5526] <... mount resumed>) = 0 [pid 5526] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5526] chdir("./file0") = 0 [pid 5526] ioctl(4, LOOP_CLR_FD) = 0 [pid 5526] close(4) = 0 [pid 5526] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5526] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5526] ftruncate(5, 33587195) = 0 [ 120.951292][ T5528] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5526] sendfile(4, 5, NULL, 281474978811909 [pid 5527] <... mount resumed>) = 0 [pid 5527] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5527] chdir("./file0") = 0 [pid 5527] ioctl(4, LOOP_CLR_FD) = 0 [pid 5527] close(4) = 0 [pid 5527] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5525] <... mount resumed>) = 0 [pid 5527] <... open resumed>) = 4 [pid 5525] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5527] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5525] <... openat resumed>) = 3 [pid 5527] <... open resumed>) = 5 [pid 5525] chdir("./file0" [pid 5527] ftruncate(5, 33587195 [pid 5525] <... chdir resumed>) = 0 [pid 5527] <... ftruncate resumed>) = 0 [pid 5525] ioctl(4, LOOP_CLR_FD [pid 5527] sendfile(4, 5, NULL, 281474978811909 [pid 5525] <... ioctl resumed>) = 0 [pid 5525] close(4) = 0 [ 121.003098][ T5525] NILFS (loop2): recovery complete [ 121.011690][ T5529] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.033234][ T5530] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5525] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5525] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5525] ftruncate(5, 33587195) = 0 [pid 5525] sendfile(4, 5, NULL, 281474978811909 [pid 5519] <... sendfile resumed>) = 1048576 [pid 5519] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5519] exit_group(0) = ? [pid 5519] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5519, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5066] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./37/binderfs") = 0 [pid 5066] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5520] <... sendfile resumed>) = 1048576 [pid 5520] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5520] exit_group(0) = ? [pid 5520] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5520, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5062] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] unlink("./36/binderfs") = 0 [pid 5062] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./37/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./37/file0") = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./37") = 0 [pid 5066] mkdir("./38", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5531 ./strace-static-x86_64: Process 5531 attached [pid 5531] chdir("./38") = 0 [pid 5531] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5531] setpgid(0, 0) = 0 [pid 5531] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5531] write(3, "1000", 4) = 4 [pid 5531] close(3) = 0 [pid 5531] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5531] memfd_create("syzkaller", 0) = 3 [pid 5531] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5521] <... sendfile resumed>) = 1048576 [pid 5521] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5521] exit_group(0) = ? [pid 5521] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5521, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5065] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, [pid 5062] <... umount2 resumed>) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, [pid 5062] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5531] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./36/binderfs", [pid 5062] lstat("./36/file0", [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] unlink("./36/binderfs" [pid 5062] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... unlink resumed>) = 0 [pid 5065] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5531] <... write resumed>) = 2097152 [pid 5062] rmdir("./36/file0") = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./36") = 0 [pid 5062] mkdir("./37", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5532 [pid 5531] munmap(0x7ff395729000, 2097152) = 0 ./strace-static-x86_64: Process 5532 attached [pid 5531] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5532] chdir("./37") = 0 [pid 5531] <... openat resumed>) = 4 [pid 5532] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5531] ioctl(4, LOOP_SET_FD, 3 [pid 5532] <... prctl resumed>) = 0 [pid 5532] setpgid(0, 0) = 0 [pid 5532] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5532] write(3, "1000", 4) = 4 [pid 5532] close(3) = 0 [pid 5532] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5532] memfd_create("syzkaller", 0) = 3 [pid 5532] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5531] <... ioctl resumed>) = 0 [pid 5531] close(3) = 0 [pid 5531] mkdir("./file0", 0777) = 0 [ 121.727608][ T5531] loop4: detected capacity change from 0 to 4096 [pid 5531] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5532] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5532] <... write resumed>) = 2097152 [pid 5532] munmap(0x7ff395729000, 2097152 [pid 5526] <... sendfile resumed>) = 1048576 [pid 5065] fstat(4, [pid 5532] <... munmap resumed>) = 0 [pid 5526] open(NULL, O_RDONLY [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5532] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5526] <... open resumed>) = -1 EFAULT (Bad address) [pid 5065] getdents64(4, [pid 5532] <... openat resumed>) = 4 [pid 5526] exit_group(0) = ? [pid 5532] ioctl(4, LOOP_SET_FD, 3 [pid 5526] +++ exited with 0 +++ [ 121.783014][ T5531] NILFS (loop4): invalid segment: Checksum error in segment payload [ 121.822961][ T5531] NILFS (loop4): trying rollback from an earlier position [pid 5065] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5526, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5065] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5532] <... ioctl resumed>) = 0 [pid 5532] close(3) = 0 [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5065] close(4 [pid 5067] <... restart_syscall resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5531] <... mount resumed>) = 0 [pid 5065] rmdir("./36/file0" [pid 5532] mkdir("./file0", 0777 [pid 5531] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... rmdir resumed>) = 0 [pid 5531] <... openat resumed>) = 3 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] getdents64(3, [pid 5532] <... mkdir resumed>) = 0 [pid 5531] chdir("./file0" [pid 5067] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5532] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5531] <... chdir resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5531] ioctl(4, LOOP_CLR_FD [pid 5067] fstat(3, [pid 5065] close(3 [pid 5531] <... ioctl resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] <... close resumed>) = 0 [pid 5531] close(4 [pid 5067] getdents64(3, [pid 5065] rmdir("./36" [pid 5531] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] <... rmdir resumed>) = 0 [pid 5531] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5067] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] mkdir("./37", 0777 [pid 5531] <... open resumed>) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... mkdir resumed>) = 0 [pid 5531] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5067] lstat("./37/binderfs", [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5531] <... open resumed>) = 5 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5531] ftruncate(5, 33587195 [pid 5067] unlink("./37/binderfs" [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5531] <... ftruncate resumed>) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 121.847930][ T5532] loop0: detected capacity change from 0 to 4096 [ 121.861870][ T5531] NILFS (loop4): recovery complete [ 121.871554][ T5533] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5531] sendfile(4, 5, NULL, 281474978811909 [pid 5067] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5534 ./strace-static-x86_64: Process 5534 attached [pid 5534] chdir("./37") = 0 [pid 5534] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5534] setpgid(0, 0) = 0 [pid 5534] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5534] write(3, "1000", 4 [pid 5525] <... sendfile resumed>) = 1048576 [pid 5534] <... write resumed>) = 4 [pid 5534] close(3) = 0 [pid 5534] symlink("/dev/binderfs", "./binderfs") = 0 [ 121.921375][ T5532] NILFS (loop0): invalid segment: Checksum error in segment payload [ 121.932641][ T5532] NILFS (loop0): trying rollback from an earlier position [pid 5534] memfd_create("syzkaller", 0 [pid 5525] open(NULL, O_RDONLY [pid 5534] <... memfd_create resumed>) = 3 [pid 5534] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5525] <... open resumed>) = -1 EFAULT (Bad address) [pid 5525] exit_group(0) = ? [pid 5527] <... sendfile resumed>) = 1048576 [pid 5525] +++ exited with 0 +++ [pid 5527] open(NULL, O_RDONLY [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5525, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=19 /* 0.19 s */} --- [pid 5064] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, [pid 5527] <... open resumed>) = -1 EFAULT (Bad address) [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./37/binderfs") = 0 [pid 5527] exit_group(0 [pid 5064] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5527] <... exit_group resumed>) = ? [pid 5527] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5527, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5534] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./37/binderfs") = 0 [ 122.008921][ T5532] NILFS (loop0): recovery complete [pid 5063] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5532] <... mount resumed>) = 0 [pid 5532] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5532] chdir("./file0") = 0 [pid 5532] ioctl(4, LOOP_CLR_FD) = 0 [pid 5532] close(4) = 0 [pid 5532] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [ 122.059647][ T5535] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5532] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5064] <... umount2 resumed>) = 0 [pid 5534] <... write resumed>) = 2097152 [pid 5532] ftruncate(5, 33587195 [pid 5063] <... umount2 resumed>) = 0 [pid 5532] <... ftruncate resumed>) = 0 [pid 5532] sendfile(4, 5, NULL, 281474978811909 [pid 5534] munmap(0x7ff395729000, 2097152 [pid 5064] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./37/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5534] <... munmap resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5534] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5064] <... openat resumed>) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./37/file0") = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3 [pid 5067] <... umount2 resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./37" [pid 5063] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... rmdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./37/file0", [pid 5064] mkdir("./38", 0777 [pid 5534] <... openat resumed>) = 4 [pid 5067] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./37/file0", [pid 5064] <... mkdir resumed>) = 0 [pid 5063] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5534] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5063] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 4 [pid 5067] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] fstat(4, [pid 5067] <... openat resumed>) = 4 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] fstat(4, [pid 5063] getdents64(4, [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, [pid 5063] getdents64(4, [pid 5067] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] getdents64(4, [pid 5063] close(4 [pid 5067] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] <... close resumed>) = 0 [pid 5067] close(4 [pid 5063] rmdir("./37/file0" [pid 5067] <... close resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5067] rmdir("./37/file0" [pid 5063] getdents64(3, [pid 5067] <... rmdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] getdents64(3, [pid 5063] close(3 [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] <... close resumed>) = 0 [pid 5067] close(3 [pid 5064] <... openat resumed>) = 3 [pid 5063] rmdir("./37" [pid 5067] <... close resumed>) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] <... rmdir resumed>) = 0 [pid 5067] rmdir("./37" [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] mkdir("./38", 0777 [pid 5534] <... ioctl resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5064] close(3 [pid 5534] close(3 [pid 5064] <... close resumed>) = 0 [pid 5534] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5534] mkdir("./file0", 0777) = 0 [pid 5067] mkdir("./38", 0777 [pid 5064] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5536 [pid 5063] <... mkdir resumed>) = 0 [pid 5534] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5067] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 5536 attached [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5063] <... openat resumed>) = 3 [pid 5536] chdir("./38" [pid 5067] <... openat resumed>) = 3 [ 122.189755][ T5534] loop3: detected capacity change from 0 to 4096 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5536] <... chdir resumed>) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5536] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5536] <... prctl resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] close(3 [pid 5536] setpgid(0, 0 [pid 5067] close(3 [pid 5063] <... close resumed>) = 0 [pid 5536] <... setpgid resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5536] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5536] <... openat resumed>) = 3 [pid 5536] write(3, "1000", 4 [pid 5067] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5538 [pid 5063] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5537 [pid 5536] <... write resumed>) = 4 [ 122.237047][ T5534] NILFS (loop3): invalid segment: Checksum error in segment payload [ 122.246153][ T5534] NILFS (loop3): trying rollback from an earlier position [pid 5536] close(3) = 0 [pid 5536] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 5537 attached [pid 5536] memfd_create("syzkaller", 0 [pid 5537] chdir("./38" [pid 5536] <... memfd_create resumed>) = 3 [pid 5536] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5537] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5538 attached [pid 5537] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5538] chdir("./38" [pid 5537] <... prctl resumed>) = 0 [pid 5538] <... chdir resumed>) = 0 [pid 5537] setpgid(0, 0 [pid 5538] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5537] <... setpgid resumed>) = 0 [pid 5538] <... prctl resumed>) = 0 [pid 5537] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5538] setpgid(0, 0 [pid 5537] <... openat resumed>) = 3 [pid 5538] <... setpgid resumed>) = 0 [pid 5537] write(3, "1000", 4 [pid 5538] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5537] <... write resumed>) = 4 [pid 5538] <... openat resumed>) = 3 [pid 5537] close(3 [pid 5538] write(3, "1000", 4 [pid 5537] <... close resumed>) = 0 [pid 5538] <... write resumed>) = 4 [pid 5537] symlink("/dev/binderfs", "./binderfs" [pid 5538] close(3 [pid 5537] <... symlink resumed>) = 0 [pid 5538] <... close resumed>) = 0 [ 122.278023][ T5534] NILFS (loop3): recovery complete [pid 5537] memfd_create("syzkaller", 0 [pid 5538] symlink("/dev/binderfs", "./binderfs" [pid 5537] <... memfd_create resumed>) = 3 [pid 5538] <... symlink resumed>) = 0 [pid 5537] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5538] memfd_create("syzkaller", 0 [pid 5537] <... mmap resumed>) = 0x7ff395729000 [pid 5538] <... memfd_create resumed>) = 3 [pid 5534] <... mount resumed>) = 0 [pid 5538] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5536] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5534] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5538] <... mmap resumed>) = 0x7ff395729000 [pid 5534] <... openat resumed>) = 3 [pid 5534] chdir("./file0") = 0 [pid 5534] ioctl(4, LOOP_CLR_FD [pid 5537] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5534] <... ioctl resumed>) = 0 [pid 5534] close(4) = 0 [pid 5534] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5534] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5534] ftruncate(5, 33587195) = 0 [pid 5534] sendfile(4, 5, NULL, 281474978811909 [ 122.335561][ T5539] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5538] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5536] <... write resumed>) = 2097152 [pid 5536] munmap(0x7ff395729000, 2097152) = 0 [pid 5536] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5536] ioctl(4, LOOP_SET_FD, 3 [pid 5538] <... write resumed>) = 2097152 [pid 5537] <... write resumed>) = 2097152 [pid 5537] munmap(0x7ff395729000, 2097152) = 0 [pid 5537] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5538] munmap(0x7ff395729000, 2097152) = 0 [pid 5537] ioctl(4, LOOP_SET_FD, 3 [pid 5538] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5536] <... ioctl resumed>) = 0 [pid 5538] <... openat resumed>) = 4 [pid 5536] close(3 [pid 5538] ioctl(4, LOOP_SET_FD, 3 [pid 5536] <... close resumed>) = 0 [pid 5536] mkdir("./file0", 0777) = 0 [pid 5536] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5538] <... ioctl resumed>) = 0 [pid 5538] close(3) = 0 [pid 5538] mkdir("./file0", 0777) = 0 [pid 5538] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5537] <... ioctl resumed>) = 0 [pid 5537] close(3) = 0 [pid 5537] mkdir("./file0", 0777) = 0 [ 122.454813][ T5536] loop2: detected capacity change from 0 to 4096 [ 122.467836][ T5537] loop1: detected capacity change from 0 to 4096 [ 122.483650][ T5538] loop5: detected capacity change from 0 to 4096 [ 122.512679][ T5536] NILFS (loop2): invalid segment: Checksum error in segment payload [ 122.517932][ T5538] NILFS (loop5): invalid segment: Checksum error in segment payload [ 122.521538][ T5536] NILFS (loop2): trying rollback from an earlier position [ 122.536405][ T5538] NILFS (loop5): trying rollback from an earlier position [ 122.547006][ T5537] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5537] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5538] <... mount resumed>) = 0 [pid 5538] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [ 122.589306][ T5538] NILFS (loop5): recovery complete [ 122.599779][ T5537] NILFS (loop1): trying rollback from an earlier position [pid 5538] chdir("./file0") = 0 [pid 5537] <... mount resumed>) = 0 [pid 5537] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5537] chdir("./file0") = 0 [pid 5537] ioctl(4, LOOP_CLR_FD) = 0 [ 122.639150][ T5540] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.649067][ T5536] NILFS (loop2): recovery complete [ 122.667676][ T5537] NILFS (loop1): recovery complete [pid 5537] close(4 [pid 5538] ioctl(4, LOOP_CLR_FD [pid 5537] <... close resumed>) = 0 [pid 5538] <... ioctl resumed>) = 0 [pid 5537] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5538] close(4) = 0 [pid 5538] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5537] <... open resumed>) = 4 [pid 5536] <... mount resumed>) = 0 [pid 5538] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5537] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5536] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5537] <... open resumed>) = 5 [pid 5538] <... open resumed>) = 5 [pid 5536] chdir("./file0" [pid 5537] ftruncate(5, 33587195 [pid 5538] ftruncate(5, 33587195 [pid 5537] <... ftruncate resumed>) = 0 [pid 5536] <... chdir resumed>) = 0 [pid 5538] <... ftruncate resumed>) = 0 [pid 5537] sendfile(4, 5, NULL, 281474978811909 [pid 5536] ioctl(4, LOOP_CLR_FD) = 0 [pid 5536] close(4 [pid 5538] sendfile(4, 5, NULL, 281474978811909 [pid 5536] <... close resumed>) = 0 [pid 5536] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [ 122.688732][ T5541] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.706424][ T5542] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5536] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5536] ftruncate(5, 33587195) = 0 [pid 5536] sendfile(4, 5, NULL, 281474978811909 [pid 5531] <... sendfile resumed>) = 1048576 [pid 5531] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5531] exit_group(0) = ? [pid 5531] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5531, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5066] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./38/binderfs") = 0 [pid 5066] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5532] <... sendfile resumed>) = 1048576 [pid 5066] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5532] open(NULL, O_RDONLY [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5532] <... open resumed>) = -1 EFAULT (Bad address) [pid 5066] lstat("./38/file0", [pid 5532] exit_group(0) = ? [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5532] +++ exited with 0 +++ [pid 5066] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5532, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=21 /* 0.21 s */} --- [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5066] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, [pid 5062] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] getdents64(4, [pid 5062] <... openat resumed>) = 3 [pid 5066] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, [pid 5066] getdents64(4, [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] <... close resumed>) = 0 [pid 5062] lstat("./37/binderfs", [pid 5066] rmdir("./38/file0" [pid 5062] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5062] unlink("./37/binderfs" [pid 5066] getdents64(3, [pid 5062] <... unlink resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] close(3) = 0 [pid 5066] rmdir("./38") = 0 [pid 5066] mkdir("./39", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5543 ./strace-static-x86_64: Process 5543 attached [pid 5543] chdir("./39") = 0 [pid 5543] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5543] setpgid(0, 0) = 0 [pid 5543] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5543] write(3, "1000", 4 [pid 5534] <... sendfile resumed>) = 1048576 [pid 5543] <... write resumed>) = 4 [pid 5534] open(NULL, O_RDONLY [pid 5543] close(3 [pid 5534] <... open resumed>) = -1 EFAULT (Bad address) [pid 5543] <... close resumed>) = 0 [pid 5534] exit_group(0 [pid 5543] symlink("/dev/binderfs", "./binderfs" [pid 5534] <... exit_group resumed>) = ? [pid 5062] <... umount2 resumed>) = 0 [pid 5543] <... symlink resumed>) = 0 [pid 5534] +++ exited with 0 +++ [pid 5543] memfd_create("syzkaller", 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5534, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5543] <... memfd_create resumed>) = 3 [pid 5543] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5065] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, [pid 5062] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] lstat("./37/file0", [pid 5543] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] lstat("./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./37/binderfs") = 0 [pid 5065] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5543] <... write resumed>) = 2097152 [pid 5062] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5543] munmap(0x7ff395729000, 2097152 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5543] <... munmap resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5543] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5062] <... openat resumed>) = 4 [pid 5543] ioctl(4, LOOP_SET_FD, 3 [pid 5062] fstat(4, [pid 5543] <... ioctl resumed>) = 0 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, [pid 5543] close(3 [pid 5062] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5543] <... close resumed>) = 0 [pid 5062] close(4 [pid 5543] mkdir("./file0", 0777 [pid 5062] <... close resumed>) = 0 [pid 5543] <... mkdir resumed>) = 0 [pid 5062] rmdir("./37/file0" [pid 5543] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./37") = 0 [pid 5062] mkdir("./38", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5062] close(3) = 0 [ 123.401402][ T5543] loop4: detected capacity change from 0 to 4096 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5544 [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./37/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 ./strace-static-x86_64: Process 5544 attached [pid 5544] chdir("./38" [pid 5065] fstat(4, [pid 5544] <... chdir resumed>) = 0 [ 123.481246][ T5543] NILFS (loop4): invalid segment: Checksum error in segment payload [ 123.502002][ T5543] NILFS (loop4): trying rollback from an earlier position [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5065] close(4 [pid 5544] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... close resumed>) = 0 [pid 5544] <... prctl resumed>) = 0 [pid 5065] rmdir("./37/file0" [pid 5544] setpgid(0, 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./37" [pid 5537] <... sendfile resumed>) = 1048576 [pid 5065] <... rmdir resumed>) = 0 [pid 5544] <... setpgid resumed>) = 0 [pid 5543] <... mount resumed>) = 0 [pid 5537] open(NULL, O_RDONLY [pid 5544] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5544] write(3, "1000", 4) = 4 [pid 5544] close(3) = 0 [pid 5544] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5544] memfd_create("syzkaller", 0) = 3 [pid 5544] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5543] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] mkdir("./38", 0777 [pid 5543] <... openat resumed>) = 3 [pid 5543] chdir("./file0") = 0 [pid 5543] ioctl(4, LOOP_CLR_FD) = 0 [pid 5543] close(4) = 0 [pid 5537] <... open resumed>) = -1 EFAULT (Bad address) [pid 5065] <... mkdir resumed>) = 0 [pid 5543] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5543] <... open resumed>) = 4 [pid 5065] <... openat resumed>) = 3 [pid 5543] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5543] ftruncate(5, 33587195) = 0 [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5543] sendfile(4, 5, NULL, 281474978811909 [pid 5544] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5537] exit_group(0 [pid 5065] close(3 [pid 5537] <... exit_group resumed>) = ? [pid 5065] <... close resumed>) = 0 [ 123.535885][ T5543] NILFS (loop4): recovery complete [ 123.553219][ T5545] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5537] +++ exited with 0 +++ [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5546 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5537, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 ./strace-static-x86_64: Process 5546 attached [pid 5546] chdir("./38") = 0 [pid 5063] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5546] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5546] <... prctl resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5546] setpgid(0, 0 [pid 5063] <... openat resumed>) = 3 [pid 5546] <... setpgid resumed>) = 0 [pid 5063] fstat(3, [pid 5546] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5546] <... openat resumed>) = 3 [pid 5063] getdents64(3, [pid 5546] write(3, "1000", 4 [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5546] <... write resumed>) = 4 [pid 5063] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5546] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5546] <... close resumed>) = 0 [pid 5063] lstat("./38/binderfs", [pid 5546] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5546] <... symlink resumed>) = 0 [pid 5544] <... write resumed>) = 2097152 [pid 5536] <... sendfile resumed>) = 1048576 [pid 5063] unlink("./38/binderfs" [pid 5546] memfd_create("syzkaller", 0 [pid 5536] open(NULL, O_RDONLY [pid 5063] <... unlink resumed>) = 0 [pid 5546] <... memfd_create resumed>) = 3 [pid 5536] <... open resumed>) = -1 EFAULT (Bad address) [pid 5063] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5546] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5536] exit_group(0 [pid 5546] <... mmap resumed>) = 0x7ff395729000 [pid 5536] <... exit_group resumed>) = ? [pid 5544] munmap(0x7ff395729000, 2097152 [pid 5538] <... sendfile resumed>) = 1048576 [pid 5536] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5536, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=19 /* 0.19 s */} --- [pid 5544] <... munmap resumed>) = 0 [pid 5538] open(NULL, O_RDONLY [pid 5544] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5538] <... open resumed>) = -1 EFAULT (Bad address) [pid 5544] <... openat resumed>) = 4 [pid 5538] exit_group(0 [pid 5544] ioctl(4, LOOP_SET_FD, 3 [pid 5538] <... exit_group resumed>) = ? [pid 5064] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5546] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5538] +++ exited with 0 +++ [pid 5064] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5538, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5544] <... ioctl resumed>) = 0 [pid 5064] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5544] close(3 [pid 5067] <... restart_syscall resumed>) = 0 [pid 5064] lstat("./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./38/binderfs" [pid 5067] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... unlink resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5544] <... close resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5544] mkdir("./file0", 0777 [pid 5067] <... openat resumed>) = 3 [pid 5544] <... mkdir resumed>) = 0 [pid 5067] fstat(3, [pid 5544] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./38/binderfs") = 0 [ 123.727190][ T5544] loop0: detected capacity change from 0 to 4096 [pid 5067] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5546] <... write resumed>) = 2097152 [pid 5546] munmap(0x7ff395729000, 2097152) = 0 [pid 5546] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 123.781643][ T5544] NILFS (loop0): invalid segment: Checksum error in segment payload [ 123.811412][ T5546] loop3: detected capacity change from 0 to 4096 [pid 5546] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... umount2 resumed>) = 0 [pid 5546] <... ioctl resumed>) = 0 [pid 5546] close(3) = 0 [pid 5546] mkdir("./file0", 0777) = 0 [pid 5546] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5063] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./38/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./38/file0") = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./38") = 0 [ 123.836291][ T5544] NILFS (loop0): trying rollback from an earlier position [ 123.874188][ T5546] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5063] mkdir("./39", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5544] <... mount resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5544] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5544] <... openat resumed>) = 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5544] chdir("./file0" [pid 5064] lstat("./38/file0", [pid 5544] <... chdir resumed>) = 0 [pid 5544] ioctl(4, LOOP_CLR_FD [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5544] <... ioctl resumed>) = 0 [pid 5064] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5544] close(4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5544] <... close resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5548 [pid 5064] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5544] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5064] <... openat resumed>) = 4 [pid 5067] <... umount2 resumed>) = 0 [pid 5064] fstat(4, [pid 5544] <... open resumed>) = 4 [pid 5067] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5544] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] getdents64(4, [pid 5544] <... open resumed>) = 5 [pid 5067] lstat("./38/file0", [pid 5064] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, [pid 5544] ftruncate(5, 33587195 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5544] <... ftruncate resumed>) = 0 [pid 5067] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] close(4./strace-static-x86_64: Process 5548 attached [pid 5544] sendfile(4, 5, NULL, 281474978811909 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... close resumed>) = 0 [pid 5548] chdir("./39") = 0 [pid 5064] rmdir("./38/file0" [pid 5548] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... rmdir resumed>) = 0 [ 123.885001][ T5544] NILFS (loop0): recovery complete [ 123.890359][ T5546] NILFS (loop3): trying rollback from an earlier position [ 123.902732][ T5547] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5548] <... prctl resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] getdents64(3, [pid 5548] setpgid(0, 0 [pid 5067] <... openat resumed>) = 4 [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5548] <... setpgid resumed>) = 0 [pid 5067] fstat(4, [pid 5064] close(3 [pid 5548] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... close resumed>) = 0 [pid 5548] <... openat resumed>) = 3 [pid 5548] write(3, "1000", 4) = 4 [pid 5067] getdents64(4, [pid 5064] rmdir("./38" [pid 5548] close(3 [pid 5067] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5548] <... close resumed>) = 0 [pid 5067] getdents64(4, [pid 5064] <... rmdir resumed>) = 0 [pid 5548] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] mkdir("./39", 0777 [pid 5548] <... symlink resumed>) = 0 [pid 5067] close(4 [pid 5548] memfd_create("syzkaller", 0 [pid 5067] <... close resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5548] <... memfd_create resumed>) = 3 [pid 5067] rmdir("./38/file0" [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5548] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5548] <... mmap resumed>) = 0x7ff395729000 [pid 5067] getdents64(3, [pid 5064] <... openat resumed>) = 3 [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5067] close(3 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] <... close resumed>) = 0 [pid 5064] close(3 [pid 5067] rmdir("./38" [pid 5064] <... close resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5067] mkdir("./39", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5064] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5549 [pid 5067] <... openat resumed>) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5551 [ 123.988415][ T5546] NILFS (loop3): recovery complete [pid 5548] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5551 attached ./strace-static-x86_64: Process 5549 attached [pid 5551] chdir("./39") = 0 [pid 5549] chdir("./39" [pid 5551] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5546] <... mount resumed>) = 0 [pid 5551] <... prctl resumed>) = 0 [pid 5549] <... chdir resumed>) = 0 [pid 5546] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5551] setpgid(0, 0 [pid 5549] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5546] <... openat resumed>) = 3 [pid 5551] <... setpgid resumed>) = 0 [pid 5549] <... prctl resumed>) = 0 [pid 5546] chdir("./file0" [pid 5551] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5549] setpgid(0, 0 [pid 5546] <... chdir resumed>) = 0 [pid 5551] <... openat resumed>) = 3 [pid 5549] <... setpgid resumed>) = 0 [pid 5546] ioctl(4, LOOP_CLR_FD [pid 5551] write(3, "1000", 4 [pid 5549] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5546] <... ioctl resumed>) = 0 [pid 5551] <... write resumed>) = 4 [pid 5546] close(4 [pid 5551] close(3 [pid 5549] <... openat resumed>) = 3 [pid 5546] <... close resumed>) = 0 [pid 5551] <... close resumed>) = 0 [pid 5549] write(3, "1000", 4 [pid 5546] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5551] symlink("/dev/binderfs", "./binderfs" [pid 5549] <... write resumed>) = 4 [pid 5546] <... open resumed>) = 4 [pid 5551] <... symlink resumed>) = 0 [pid 5549] close(3 [pid 5546] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5551] memfd_create("syzkaller", 0 [pid 5549] <... close resumed>) = 0 [pid 5546] <... open resumed>) = 5 [pid 5551] <... memfd_create resumed>) = 3 [pid 5549] symlink("/dev/binderfs", "./binderfs" [pid 5546] ftruncate(5, 33587195 [pid 5551] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5549] <... symlink resumed>) = 0 [pid 5546] <... ftruncate resumed>) = 0 [ 124.046868][ T5550] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5551] <... mmap resumed>) = 0x7ff395729000 [pid 5549] memfd_create("syzkaller", 0 [pid 5546] sendfile(4, 5, NULL, 281474978811909 [pid 5549] <... memfd_create resumed>) = 3 [pid 5549] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5548] <... write resumed>) = 2097152 [pid 5551] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5548] munmap(0x7ff395729000, 2097152) = 0 [pid 5548] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5548] ioctl(4, LOOP_SET_FD, 3 [pid 5549] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5548] <... ioctl resumed>) = 0 [pid 5548] close(3) = 0 [pid 5548] mkdir("./file0", 0777) = 0 [ 124.157077][ T5548] loop1: detected capacity change from 0 to 4096 [pid 5548] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5551] <... write resumed>) = 2097152 [pid 5549] <... write resumed>) = 2097152 [pid 5551] munmap(0x7ff395729000, 2097152) = 0 [pid 5551] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5551] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5549] munmap(0x7ff395729000, 2097152) = 0 [pid 5549] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5549] ioctl(4, LOOP_SET_FD, 3 [pid 5551] close(3) = 0 [pid 5551] mkdir("./file0", 0777) = 0 [ 124.241395][ T5548] NILFS (loop1): invalid segment: Checksum error in segment payload [ 124.262166][ T5551] loop5: detected capacity change from 0 to 4096 [ 124.276299][ T5549] loop2: detected capacity change from 0 to 4096 [ 124.279201][ T5548] NILFS (loop1): trying rollback from an earlier position [pid 5551] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5549] <... ioctl resumed>) = 0 [pid 5549] close(3) = 0 [pid 5549] mkdir("./file0", 0777) = 0 [ 124.315341][ T5551] NILFS (loop5): invalid segment: Checksum error in segment payload [ 124.348410][ T5549] NILFS (loop2): invalid segment: Checksum error in segment payload [ 124.353652][ T5551] NILFS (loop5): trying rollback from an earlier position [pid 5549] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5548] <... mount resumed>) = 0 [pid 5548] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5548] chdir("./file0") = 0 [pid 5548] ioctl(4, LOOP_CLR_FD) = 0 [pid 5548] close(4) = 0 [pid 5548] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5548] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5548] ftruncate(5, 33587195) = 0 [ 124.366736][ T5548] NILFS (loop1): recovery complete [ 124.384422][ T5549] NILFS (loop2): trying rollback from an earlier position [ 124.398064][ T5552] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5548] sendfile(4, 5, NULL, 281474978811909 [pid 5543] <... sendfile resumed>) = 1048576 [pid 5543] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5543] exit_group(0) = ? [pid 5543] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5543, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5549] <... mount resumed>) = 0 [pid 5066] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5549] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5549] <... openat resumed>) = 3 [pid 5066] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5549] chdir("./file0" [pid 5066] <... openat resumed>) = 3 [pid 5549] <... chdir resumed>) = 0 [pid 5066] fstat(3, [ 124.467123][ T5549] NILFS (loop2): recovery complete [ 124.476786][ T5551] NILFS (loop5): recovery complete [ 124.480567][ T5553] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5549] ioctl(4, LOOP_CLR_FD [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5549] <... ioctl resumed>) = 0 [pid 5066] getdents64(3, [pid 5549] close(4 [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5549] <... close resumed>) = 0 [pid 5066] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5549] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./39/binderfs") = 0 [pid 5066] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5551] <... mount resumed>) = 0 [pid 5549] <... open resumed>) = 4 [pid 5551] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5549] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5551] chdir("./file0" [pid 5549] <... open resumed>) = 5 [pid 5551] <... chdir resumed>) = 0 [pid 5549] ftruncate(5, 33587195 [pid 5551] ioctl(4, LOOP_CLR_FD [pid 5549] <... ftruncate resumed>) = 0 [pid 5551] <... ioctl resumed>) = 0 [pid 5549] sendfile(4, 5, NULL, 281474978811909 [ 124.525379][ T5554] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5551] close(4) = 0 [pid 5551] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5551] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5551] ftruncate(5, 33587195) = 0 [pid 5551] sendfile(4, 5, NULL, 281474978811909 [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./39/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5544] <... sendfile resumed>) = 1048576 [pid 5066] getdents64(4, [pid 5544] open(NULL, O_RDONLY [pid 5066] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5544] <... open resumed>) = -1 EFAULT (Bad address) [pid 5066] close(4 [pid 5544] exit_group(0) = ? [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./39/file0" [pid 5544] +++ exited with 0 +++ [pid 5066] <... rmdir resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5544, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5066] getdents64(3, [pid 5062] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] close(3 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] <... close resumed>) = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] unlink("./38/binderfs") = 0 [pid 5062] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] rmdir("./39") = 0 [pid 5066] mkdir("./40", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5555 attached [pid 5555] chdir("./40" [pid 5066] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5555 [pid 5555] <... chdir resumed>) = 0 [pid 5546] <... sendfile resumed>) = 1048576 [pid 5555] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5555] setpgid(0, 0) = 0 [pid 5546] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5555] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5546] exit_group(0) = ? [pid 5555] write(3, "1000", 4) = 4 [pid 5555] close(3) = 0 [pid 5555] symlink("/dev/binderfs", "./binderfs" [pid 5546] +++ exited with 0 +++ [pid 5555] <... symlink resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5546, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5555] memfd_create("syzkaller", 0 [pid 5065] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5555] <... memfd_create resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5555] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5555] <... mmap resumed>) = 0x7ff395729000 [pid 5065] <... openat resumed>) = 3 [pid 5065] fstat(3, [pid 5555] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./38/binderfs") = 0 [pid 5065] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5555] <... write resumed>) = 2097152 [pid 5062] <... umount2 resumed>) = 0 [pid 5555] munmap(0x7ff395729000, 2097152 [pid 5062] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./38/file0", [pid 5555] <... munmap resumed>) = 0 [pid 5062] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5555] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5555] <... openat resumed>) = 4 [pid 5062] getdents64(4, [pid 5555] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./38/file0") = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./38") = 0 [pid 5062] mkdir("./39", 0777) = 0 [pid 5555] <... ioctl resumed>) = 0 [pid 5555] close(3 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5555] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5555] mkdir("./file0", 0777 [pid 5062] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5062] close(3 [pid 5555] <... mkdir resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5555] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5556 attached , child_tidptr=0x5555573f85d0) = 5556 [ 124.990263][ T5555] loop4: detected capacity change from 0 to 4096 [pid 5556] chdir("./39") = 0 [pid 5556] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5556] setpgid(0, 0) = 0 [pid 5556] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 125.035535][ T5555] NILFS (loop4): invalid segment: Checksum error in segment payload [ 125.051353][ T5555] NILFS (loop4): trying rollback from an earlier position [pid 5556] write(3, "1000", 4) = 4 [pid 5556] close(3) = 0 [pid 5556] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5556] memfd_create("syzkaller", 0) = 3 [pid 5556] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [ 125.086530][ T5555] NILFS (loop4): recovery complete [pid 5556] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5555] <... mount resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5555] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5555] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5555] chdir("./file0" [pid 5065] lstat("./38/file0", [pid 5555] <... chdir resumed>) = 0 [pid 5555] ioctl(4, LOOP_CLR_FD [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5555] <... ioctl resumed>) = 0 [pid 5065] umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 125.129389][ T5557] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5555] close(4 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5555] <... close resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5555] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5065] <... openat resumed>) = 4 [pid 5555] <... open resumed>) = 4 [pid 5065] fstat(4, [pid 5555] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5555] <... open resumed>) = 5 [pid 5065] getdents64(4, [pid 5555] ftruncate(5, 33587195 [pid 5065] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5555] <... ftruncate resumed>) = 0 [pid 5065] getdents64(4, [pid 5555] sendfile(4, 5, NULL, 281474978811909 [pid 5065] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5556] <... write resumed>) = 2097152 [pid 5065] close(4 [pid 5556] munmap(0x7ff395729000, 2097152 [pid 5065] <... close resumed>) = 0 [pid 5556] <... munmap resumed>) = 0 [pid 5065] rmdir("./38/file0" [pid 5556] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5548] <... sendfile resumed>) = 1048576 [pid 5065] <... rmdir resumed>) = 0 [pid 5548] open(NULL, O_RDONLY [pid 5065] getdents64(3, [pid 5548] <... open resumed>) = -1 EFAULT (Bad address) [pid 5548] exit_group(0 [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5548] <... exit_group resumed>) = ? [pid 5548] +++ exited with 0 +++ [pid 5065] close(3) = 0 [pid 5065] rmdir("./38") = 0 [pid 5065] mkdir("./39", 0777 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5548, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5063] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5556] <... openat resumed>) = 4 [pid 5065] <... openat resumed>) = 3 [pid 5556] ioctl(4, LOOP_SET_FD, 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] <... openat resumed>) = 3 [pid 5063] fstat(3, [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] close(3 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 5558 attached [pid 5556] <... ioctl resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5558 [pid 5063] unlink("./39/binderfs" [pid 5556] close(3 [pid 5063] <... unlink resumed>) = 0 [pid 5558] chdir("./39" [pid 5556] <... close resumed>) = 0 [pid 5063] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5558] <... chdir resumed>) = 0 [pid 5556] mkdir("./file0", 0777 [pid 5558] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5556] <... mkdir resumed>) = 0 [pid 5558] <... prctl resumed>) = 0 [pid 5556] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5558] setpgid(0, 0) = 0 [pid 5558] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5558] write(3, "1000", 4) = 4 [pid 5558] close(3) = 0 [pid 5558] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5558] memfd_create("syzkaller", 0) = 3 [pid 5558] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [ 125.280558][ T5556] loop0: detected capacity change from 0 to 4096 [ 125.340754][ T5556] NILFS (loop0): invalid segment: Checksum error in segment payload [ 125.348872][ T5556] NILFS (loop0): trying rollback from an earlier position [ 125.436544][ T5556] NILFS (loop0): recovery complete [pid 5558] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5558] munmap(0x7ff395729000, 2097152) = 0 [pid 5558] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5558] ioctl(4, LOOP_SET_FD, 3 [pid 5549] <... sendfile resumed>) = 1048576 [pid 5558] <... ioctl resumed>) = 0 [pid 5556] <... mount resumed>) = 0 [pid 5549] open(NULL, O_RDONLY [pid 5558] close(3 [pid 5556] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5549] <... open resumed>) = -1 EFAULT (Bad address) [pid 5558] <... close resumed>) = 0 [pid 5556] <... openat resumed>) = 3 [pid 5549] exit_group(0 [pid 5558] mkdir("./file0", 0777 [pid 5556] chdir("./file0" [pid 5549] <... exit_group resumed>) = ? [pid 5558] <... mkdir resumed>) = 0 [pid 5556] <... chdir resumed>) = 0 [pid 5558] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5556] ioctl(4, LOOP_CLR_FD [pid 5549] +++ exited with 0 +++ [pid 5556] <... ioctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5556] close(4 [pid 5551] <... sendfile resumed>) = 1048576 [pid 5063] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5556] <... close resumed>) = 0 [ 125.492120][ T5559] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.502151][ T5558] loop3: detected capacity change from 0 to 4096 [pid 5556] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5551] open(NULL, O_RDONLY [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5549, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5551] <... open resumed>) = -1 EFAULT (Bad address) [pid 5064] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5556] <... open resumed>) = 4 [pid 5551] exit_group(0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./39/file0", [pid 5556] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5551] <... exit_group resumed>) = ? [pid 5064] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5556] <... open resumed>) = 5 [pid 5551] +++ exited with 0 +++ [pid 5064] <... openat resumed>) = 3 [pid 5063] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5556] ftruncate(5, 33587195 [pid 5064] fstat(3, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5556] <... ftruncate resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5551, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5556] sendfile(4, 5, NULL, 281474978811909 [pid 5063] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] restart_syscall(<... resuming interrupted clone ...> [pid 5064] getdents64(3, [pid 5067] <... restart_syscall resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] fstat(4, [pid 5067] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(4, [pid 5067] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] lstat("./39/binderfs", [pid 5063] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] <... openat resumed>) = 3 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] getdents64(4, [pid 5067] fstat(3, [pid 5064] unlink("./39/binderfs" [pid 5063] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5067] getdents64(3, [pid 5064] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(4 [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] <... close resumed>) = 0 [pid 5067] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] rmdir("./39/file0" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 125.537570][ T5558] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5067] lstat("./39/binderfs", [pid 5063] <... rmdir resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] getdents64(3, [pid 5067] unlink("./39/binderfs" [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] <... unlink resumed>) = 0 [pid 5063] close(3 [pid 5067] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./39") = 0 [pid 5063] mkdir("./40", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [ 125.580401][ T5558] NILFS (loop3): trying rollback from an earlier position [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5560 ./strace-static-x86_64: Process 5560 attached [pid 5560] chdir("./40") = 0 [ 125.629752][ T5558] NILFS (loop3): recovery complete [pid 5560] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5560] setpgid(0, 0) = 0 [pid 5560] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5558] <... mount resumed>) = 0 [pid 5560] <... openat resumed>) = 3 [pid 5558] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5560] write(3, "1000", 4 [pid 5558] <... openat resumed>) = 3 [pid 5560] <... write resumed>) = 4 [pid 5558] chdir("./file0" [pid 5560] close(3) = 0 [pid 5558] <... chdir resumed>) = 0 [pid 5560] symlink("/dev/binderfs", "./binderfs" [pid 5558] ioctl(4, LOOP_CLR_FD [pid 5560] <... symlink resumed>) = 0 [pid 5558] <... ioctl resumed>) = 0 [pid 5560] memfd_create("syzkaller", 0 [pid 5558] close(4 [pid 5560] <... memfd_create resumed>) = 3 [pid 5558] <... close resumed>) = 0 [pid 5560] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5558] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [ 125.681004][ T5561] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5558] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5558] ftruncate(5, 33587195) = 0 [pid 5558] sendfile(4, 5, NULL, 281474978811909 [pid 5067] <... umount2 resumed>) = 0 [pid 5560] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./39/file0", [pid 5064] <... umount2 resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5560] <... write resumed>) = 2097152 [pid 5067] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5560] munmap(0x7ff395729000, 2097152 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5560] <... munmap resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] lstat("./39/file0", [pid 5560] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5067] <... openat resumed>) = 4 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5560] <... openat resumed>) = 4 [pid 5067] fstat(4, [pid 5064] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5560] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5560] <... ioctl resumed>) = 0 [pid 5067] getdents64(4, [pid 5064] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5560] close(3 [pid 5067] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] <... openat resumed>) = 4 [pid 5560] <... close resumed>) = 0 [pid 5067] getdents64(4, [pid 5064] fstat(4, [pid 5560] mkdir("./file0", 0777 [pid 5067] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5560] <... mkdir resumed>) = 0 [pid 5067] close(4 [pid 5064] getdents64(4, [pid 5560] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5067] <... close resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] rmdir("./39/file0" [pid 5064] getdents64(4, [pid 5067] <... rmdir resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] getdents64(3, [pid 5064] close(4 [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5064] <... close resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5064] rmdir("./39/file0" [pid 5067] rmdir("./39" [pid 5064] <... rmdir resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, [pid 5067] mkdir("./40", 0777 [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] <... mkdir resumed>) = 0 [ 125.844521][ T5560] loop1: detected capacity change from 0 to 4096 [pid 5064] close(3 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5064] <... close resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [pid 5064] rmdir("./39" [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5064] <... rmdir resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] mkdir("./40", 0777 [pid 5067] close(3) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5067] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5562 [pid 5064] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5562 attached [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5562] chdir("./40" [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5562] <... chdir resumed>) = 0 [ 125.897626][ T5560] NILFS (loop1): invalid segment: Checksum error in segment payload [ 125.936981][ T5560] NILFS (loop1): trying rollback from an earlier position [pid 5064] close(3 [pid 5562] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... close resumed>) = 0 [pid 5562] <... prctl resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5562] setpgid(0, 0) = 0 [pid 5562] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5064] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5563 ./strace-static-x86_64: Process 5563 attached [pid 5562] write(3, "1000", 4) = 4 [pid 5563] chdir("./40" [pid 5562] close(3 [pid 5563] <... chdir resumed>) = 0 [pid 5562] <... close resumed>) = 0 [pid 5563] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5562] symlink("/dev/binderfs", "./binderfs" [pid 5563] <... prctl resumed>) = 0 [pid 5562] <... symlink resumed>) = 0 [pid 5560] <... mount resumed>) = 0 [pid 5563] setpgid(0, 0) = 0 [pid 5562] memfd_create("syzkaller", 0 [pid 5560] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5563] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5562] <... memfd_create resumed>) = 3 [pid 5563] <... openat resumed>) = 3 [pid 5562] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5560] <... openat resumed>) = 3 [pid 5563] write(3, "1000", 4) = 4 [ 126.007655][ T5560] NILFS (loop1): recovery complete [ 126.021878][ T5564] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5562] <... mmap resumed>) = 0x7ff395729000 [pid 5560] chdir("./file0" [pid 5563] close(3 [pid 5562] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5560] <... chdir resumed>) = 0 [pid 5563] <... close resumed>) = 0 [pid 5560] ioctl(4, LOOP_CLR_FD [pid 5563] symlink("/dev/binderfs", "./binderfs" [pid 5560] <... ioctl resumed>) = 0 [pid 5563] <... symlink resumed>) = 0 [pid 5560] close(4 [pid 5563] memfd_create("syzkaller", 0 [pid 5560] <... close resumed>) = 0 [pid 5563] <... memfd_create resumed>) = 3 [pid 5560] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5563] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5560] <... open resumed>) = 4 [pid 5563] <... mmap resumed>) = 0x7ff395729000 [pid 5560] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5560] ftruncate(5, 33587195) = 0 [pid 5560] sendfile(4, 5, NULL, 281474978811909 [pid 5563] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5555] <... sendfile resumed>) = 1048576 [pid 5555] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5555] exit_group(0) = ? [pid 5555] +++ exited with 0 +++ [pid 5562] <... write resumed>) = 2097152 [pid 5562] munmap(0x7ff395729000, 2097152) = 0 [pid 5562] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5555, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5562] <... openat resumed>) = 4 [pid 5562] ioctl(4, LOOP_SET_FD, 3 [pid 5066] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, [pid 5563] <... write resumed>) = 2097152 [pid 5563] munmap(0x7ff395729000, 2097152 [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5563] <... munmap resumed>) = 0 [pid 5066] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5563] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5563] ioctl(4, LOOP_SET_FD, 3 [pid 5066] lstat("./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5562] <... ioctl resumed>) = 0 [pid 5562] close(3) = 0 [pid 5562] mkdir("./file0", 0777 [pid 5066] unlink("./40/binderfs" [pid 5562] <... mkdir resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5562] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5066] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5563] <... ioctl resumed>) = 0 [pid 5563] close(3) = 0 [pid 5563] mkdir("./file0", 0777) = 0 [ 126.211969][ T5562] loop5: detected capacity change from 0 to 4096 [ 126.246239][ T5563] loop2: detected capacity change from 0 to 4096 [pid 5563] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5556] <... sendfile resumed>) = 1048576 [pid 5556] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5556] exit_group(0) = ? [pid 5556] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5556, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5062] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] unlink("./39/binderfs") = 0 [ 126.313960][ T5563] NILFS (loop2): invalid segment: Checksum error in segment payload [ 126.323273][ T5562] NILFS (loop5): invalid segment: Checksum error in segment payload [ 126.346198][ T5562] NILFS (loop5): trying rollback from an earlier position [ 126.358343][ T5563] NILFS (loop2): trying rollback from an earlier position [ 126.417493][ T5563] NILFS (loop2): recovery complete [ 126.433531][ T5562] NILFS (loop5): recovery complete [ 126.448416][ T5565] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5062] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5562] <... mount resumed>) = 0 [pid 5066] <... umount2 resumed>) = 0 [pid 5563] <... mount resumed>) = 0 [pid 5562] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5563] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5562] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5563] <... openat resumed>) = 3 [pid 5563] chdir("./file0") = 0 [pid 5563] ioctl(4, LOOP_CLR_FD) = 0 [pid 5563] close(4 [pid 5066] lstat("./40/file0", [pid 5563] <... close resumed>) = 0 [pid 5562] chdir("./file0" [pid 5563] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5562] <... chdir resumed>) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5562] ioctl(4, LOOP_CLR_FD [pid 5066] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5563] <... open resumed>) = 4 [pid 5562] <... ioctl resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5563] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5562] close(4 [pid 5066] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... umount2 resumed>) = 0 [pid 5562] <... close resumed>) = 0 [pid 5066] <... openat resumed>) = 4 [pid 5562] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5066] fstat(4, [pid 5062] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5562] <... open resumed>) = 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 126.466505][ T5566] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5563] <... open resumed>) = 5 [pid 5562] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5066] getdents64(4, [pid 5062] lstat("./39/file0", [pid 5563] ftruncate(5, 33587195 [pid 5562] <... open resumed>) = 5 [pid 5066] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5563] <... ftruncate resumed>) = 0 [pid 5562] ftruncate(5, 33587195 [pid 5066] getdents64(4, [pid 5062] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5563] sendfile(4, 5, NULL, 281474978811909 [pid 5562] <... ftruncate resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5562] sendfile(4, 5, NULL, 281474978811909 [pid 5066] close(4 [pid 5062] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5066] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5066] rmdir("./40/file0" [pid 5062] fstat(4, [pid 5066] <... rmdir resumed>) = 0 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, [pid 5062] getdents64(4, [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] close(3 [pid 5062] getdents64(4, [pid 5066] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] rmdir("./40" [pid 5062] close(4 [pid 5066] <... rmdir resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5066] mkdir("./41", 0777 [pid 5062] rmdir("./39/file0" [pid 5066] <... mkdir resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] getdents64(3, [pid 5066] <... openat resumed>) = 3 [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5062] close(3 [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5062] <... close resumed>) = 0 [pid 5066] close(3 [pid 5062] rmdir("./39" [pid 5066] <... close resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] mkdir("./40", 0777) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5567 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5567 attached [pid 5567] chdir("./41" [pid 5062] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5568 [pid 5567] <... chdir resumed>) = 0 [pid 5567] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5567] setpgid(0, 0./strace-static-x86_64: Process 5568 attached ) = 0 [pid 5568] chdir("./40" [pid 5567] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5568] <... chdir resumed>) = 0 [pid 5567] <... openat resumed>) = 3 [pid 5568] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5567] write(3, "1000", 4 [pid 5568] <... prctl resumed>) = 0 [pid 5567] <... write resumed>) = 4 [pid 5568] setpgid(0, 0 [pid 5567] close(3 [pid 5568] <... setpgid resumed>) = 0 [pid 5567] <... close resumed>) = 0 [pid 5568] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5567] symlink("/dev/binderfs", "./binderfs" [pid 5568] <... openat resumed>) = 3 [pid 5567] <... symlink resumed>) = 0 [pid 5568] write(3, "1000", 4 [pid 5567] memfd_create("syzkaller", 0 [pid 5558] <... sendfile resumed>) = 1048576 [pid 5568] <... write resumed>) = 4 [pid 5567] <... memfd_create resumed>) = 3 [pid 5568] close(3 [pid 5567] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5558] open(NULL, O_RDONLY [pid 5568] <... close resumed>) = 0 [pid 5567] <... mmap resumed>) = 0x7ff395729000 [pid 5558] <... open resumed>) = -1 EFAULT (Bad address) [pid 5568] symlink("/dev/binderfs", "./binderfs" [pid 5558] exit_group(0 [pid 5568] <... symlink resumed>) = 0 [pid 5568] memfd_create("syzkaller", 0) = 3 [pid 5568] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5558] <... exit_group resumed>) = ? [pid 5568] <... mmap resumed>) = 0x7ff395729000 [pid 5558] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5558, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5567] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5568] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./39/binderfs") = 0 [pid 5065] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5567] <... write resumed>) = 2097152 [pid 5567] munmap(0x7ff395729000, 2097152) = 0 [pid 5567] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5567] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5568] <... write resumed>) = 2097152 [pid 5568] munmap(0x7ff395729000, 2097152) = 0 [pid 5568] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5568] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5567] close(3) = 0 [pid 5567] mkdir("./file0", 0777) = 0 [pid 5567] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5568] close(3) = 0 [pid 5568] mkdir("./file0", 0777) = 0 [ 126.830858][ T5567] loop4: detected capacity change from 0 to 4096 [ 126.851363][ T5568] loop0: detected capacity change from 0 to 4096 [pid 5568] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./39/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [ 126.920912][ T5567] NILFS (loop4): invalid segment: Checksum error in segment payload [ 126.932838][ T5567] NILFS (loop4): trying rollback from an earlier position [ 126.943103][ T5568] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5065] getdents64(4, [pid 5560] <... sendfile resumed>) = 1048576 [pid 5065] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5560] open(NULL, O_RDONLY [pid 5065] close(4) = 0 [pid 5560] <... open resumed>) = -1 EFAULT (Bad address) [pid 5065] rmdir("./39/file0" [pid 5560] exit_group(0 [pid 5065] <... rmdir resumed>) = 0 [pid 5560] <... exit_group resumed>) = ? [pid 5065] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5560] +++ exited with 0 +++ [pid 5065] close(3) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5560, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5065] rmdir("./39") = 0 [pid 5065] mkdir("./40", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5063] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5063] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] close(3 [pid 5063] <... openat resumed>) = 3 [pid 5065] <... close resumed>) = 0 [pid 5063] fstat(3, [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, [pid 5065] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5569 [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./40/binderfs") = 0 ./strace-static-x86_64: Process 5569 attached [pid 5063] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5569] chdir("./40") = 0 [ 126.988107][ T5568] NILFS (loop0): trying rollback from an earlier position [ 127.027278][ T5567] NILFS (loop4): recovery complete [pid 5569] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5569] setpgid(0, 0) = 0 [pid 5569] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5569] write(3, "1000", 4) = 4 [pid 5569] close(3) = 0 [pid 5569] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5569] memfd_create("syzkaller", 0) = 3 [pid 5569] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5567] <... mount resumed>) = 0 [pid 5567] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5567] chdir("./file0") = 0 [pid 5567] ioctl(4, LOOP_CLR_FD) = 0 [pid 5567] close(4) = 0 [pid 5567] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5567] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5567] ftruncate(5, 33587195) = 0 [ 127.086905][ T5568] NILFS (loop0): recovery complete [ 127.092331][ T5570] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5567] sendfile(4, 5, NULL, 281474978811909 [pid 5569] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5568] <... mount resumed>) = 0 [pid 5568] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5568] chdir("./file0") = 0 [pid 5568] ioctl(4, LOOP_CLR_FD) = 0 [pid 5568] close(4) = 0 [pid 5568] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5568] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5568] ftruncate(5, 33587195) = 0 [ 127.150348][ T5571] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5568] sendfile(4, 5, NULL, 281474978811909 [pid 5063] <... umount2 resumed>) = 0 [pid 5569] <... write resumed>) = 2097152 [pid 5569] munmap(0x7ff395729000, 2097152 [pid 5063] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5569] <... munmap resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5569] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] lstat("./40/file0", [pid 5569] <... openat resumed>) = 4 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5569] ioctl(4, LOOP_SET_FD, 3 [pid 5063] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5569] <... ioctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./40/file0") = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./40") = 0 [pid 5569] close(3 [pid 5063] mkdir("./41", 0777 [pid 5569] <... close resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5569] mkdir("./file0", 0777 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5569] <... mkdir resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [ 127.343389][ T5569] loop3: detected capacity change from 0 to 4096 [pid 5569] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5562] <... sendfile resumed>) = 1048576 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5563] <... sendfile resumed>) = 1048576 [pid 5562] open(NULL, O_RDONLY [pid 5063] close(3 [pid 5563] open(NULL, O_RDONLY [pid 5562] <... open resumed>) = -1 EFAULT (Bad address) [pid 5063] <... close resumed>) = 0 [pid 5563] <... open resumed>) = -1 EFAULT (Bad address) [pid 5562] exit_group(0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5563] exit_group(0 [pid 5562] <... exit_group resumed>) = ? [pid 5063] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5572 ./strace-static-x86_64: Process 5572 attached [pid 5563] <... exit_group resumed>) = ? [pid 5562] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5562, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5563] +++ exited with 0 +++ [pid 5572] chdir("./41" [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5563, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5572] <... chdir resumed>) = 0 [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 5572] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... restart_syscall resumed>) = 0 [pid 5572] <... prctl resumed>) = 0 [pid 5572] setpgid(0, 0 [pid 5067] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5572] <... setpgid resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5572] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5572] <... openat resumed>) = 3 [pid 5067] <... openat resumed>) = 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5572] write(3, "1000", 4 [pid 5067] fstat(3, [pid 5064] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5572] <... write resumed>) = 4 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5572] close(3 [ 127.397136][ T5569] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5067] getdents64(3, [pid 5064] fstat(3, [pid 5572] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5572] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5067] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] getdents64(3, [pid 5572] memfd_create("syzkaller", 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5572] <... memfd_create resumed>) = 3 [pid 5067] lstat("./40/binderfs", [pid 5064] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5572] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5572] <... mmap resumed>) = 0x7ff395729000 [pid 5067] unlink("./40/binderfs" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... unlink resumed>) = 0 [pid 5064] lstat("./40/binderfs", [pid 5067] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./40/binderfs") = 0 [pid 5064] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 127.476225][ T5569] NILFS (loop3): trying rollback from an earlier position [pid 5572] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5572] munmap(0x7ff395729000, 2097152) = 0 [pid 5572] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 127.561629][ T5569] NILFS (loop3): recovery complete [pid 5572] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5572] close(3) = 0 [pid 5572] mkdir("./file0", 0777) = 0 [pid 5572] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5569] <... mount resumed>) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5569] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5067] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5569] chdir("./file0") = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5569] ioctl(4, LOOP_CLR_FD) = 0 [pid 5067] lstat("./40/file0", [pid 5569] close(4) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5569] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5067] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5569] <... open resumed>) = 4 [ 127.589870][ T5572] loop1: detected capacity change from 0 to 4096 [ 127.611074][ T5573] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5067] getdents64(4, [pid 5569] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5067] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./40/file0") = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5569] <... open resumed>) = 5 [pid 5067] close(3) = 0 [pid 5569] ftruncate(5, 33587195 [pid 5067] rmdir("./40") = 0 [pid 5569] <... ftruncate resumed>) = 0 [pid 5067] mkdir("./41", 0777 [pid 5569] sendfile(4, 5, NULL, 281474978811909 [pid 5067] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5574 ./strace-static-x86_64: Process 5574 attached [pid 5574] chdir("./41") = 0 [pid 5574] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5574] setpgid(0, 0) = 0 [pid 5574] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5064] <... umount2 resumed>) = 0 [pid 5574] write(3, "1000", 4) = 4 [pid 5574] close(3) = 0 [pid 5574] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5574] memfd_create("syzkaller", 0) = 3 [pid 5574] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5064] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./40/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5574] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./40/file0") = 0 [ 127.719430][ T5572] NILFS (loop1): invalid segment: Checksum error in segment payload [ 127.751268][ T5572] NILFS (loop1): trying rollback from an earlier position [pid 5064] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./40") = 0 [pid 5064] mkdir("./41", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5575 ./strace-static-x86_64: Process 5575 attached [pid 5575] chdir("./41") = 0 [pid 5575] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5575] setpgid(0, 0) = 0 [pid 5575] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5575] write(3, "1000", 4) = 4 [pid 5575] close(3) = 0 [pid 5574] <... write resumed>) = 2097152 [pid 5575] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5575] memfd_create("syzkaller", 0) = 3 [pid 5575] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5574] munmap(0x7ff395729000, 2097152) = 0 [ 127.840097][ T5572] NILFS (loop1): recovery complete [pid 5574] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5574] ioctl(4, LOOP_SET_FD, 3 [pid 5575] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5574] <... ioctl resumed>) = 0 [pid 5574] close(3 [pid 5572] <... mount resumed>) = 0 [pid 5574] <... close resumed>) = 0 [ 127.883881][ T5574] loop5: detected capacity change from 0 to 4096 [ 127.890400][ T5576] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5574] mkdir("./file0", 0777) = 0 [pid 5572] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5574] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5572] <... openat resumed>) = 3 [pid 5572] chdir("./file0" [pid 5568] <... sendfile resumed>) = 1048576 [pid 5568] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5568] exit_group(0) = ? [pid 5572] <... chdir resumed>) = 0 [pid 5568] +++ exited with 0 +++ [pid 5572] ioctl(4, LOOP_CLR_FD) = 0 [pid 5572] close(4 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5568, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5572] <... close resumed>) = 0 [pid 5062] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5572] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5575] <... write resumed>) = 2097152 [pid 5575] munmap(0x7ff395729000, 2097152 [pid 5062] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5572] <... open resumed>) = 4 [pid 5062] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5572] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./40/binderfs", [pid 5575] <... munmap resumed>) = 0 [pid 5575] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5572] <... open resumed>) = 5 [pid 5575] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5572] ftruncate(5, 33587195) = 0 [pid 5062] unlink("./40/binderfs") = 0 [pid 5575] <... ioctl resumed>) = 0 [pid 5575] close(3) = 0 [pid 5572] sendfile(4, 5, NULL, 281474978811909 [pid 5062] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5575] mkdir("./file0", 0777) = 0 [ 127.951527][ T5574] NILFS (loop5): invalid segment: Checksum error in segment payload [ 127.959604][ T5574] NILFS (loop5): trying rollback from an earlier position [ 127.988610][ T5575] loop2: detected capacity change from 0 to 4096 [pid 5575] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5567] <... sendfile resumed>) = 1048576 [pid 5567] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5567] exit_group(0) = ? [pid 5567] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5567, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5066] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 128.052052][ T5574] NILFS (loop5): recovery complete [ 128.065737][ T5575] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5066] unlink("./41/binderfs") = 0 [pid 5574] <... mount resumed>) = 0 [pid 5066] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5574] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5574] chdir("./file0") = 0 [pid 5574] ioctl(4, LOOP_CLR_FD) = 0 [pid 5574] close(4) = 0 [pid 5574] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5574] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5574] ftruncate(5, 33587195) = 0 [pid 5574] sendfile(4, 5, NULL, 281474978811909 [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 128.108777][ T5577] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.143599][ T5575] NILFS (loop2): trying rollback from an earlier position [pid 5062] lstat("./40/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./40/file0") = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./40") = 0 [pid 5062] mkdir("./41", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5579 [ 128.224258][ T5575] NILFS (loop2): recovery complete [pid 5575] <... mount resumed>) = 0 [pid 5575] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5575] chdir("./file0") = 0 ./strace-static-x86_64: Process 5579 attached [pid 5575] ioctl(4, LOOP_CLR_FD [pid 5579] chdir("./41" [pid 5575] <... ioctl resumed>) = 0 [pid 5579] <... chdir resumed>) = 0 [pid 5575] close(4 [pid 5579] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5575] <... close resumed>) = 0 [pid 5579] <... prctl resumed>) = 0 [pid 5575] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5579] setpgid(0, 0) = 0 [pid 5575] <... open resumed>) = 4 [pid 5579] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5575] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5579] <... openat resumed>) = 3 [pid 5579] write(3, "1000", 4 [pid 5575] <... open resumed>) = 5 [pid 5579] <... write resumed>) = 4 [pid 5575] ftruncate(5, 33587195 [pid 5579] close(3) = 0 [ 128.254059][ T5578] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5575] <... ftruncate resumed>) = 0 [pid 5579] symlink("/dev/binderfs", "./binderfs" [pid 5575] sendfile(4, 5, NULL, 281474978811909 [pid 5066] <... umount2 resumed>) = 0 [pid 5579] <... symlink resumed>) = 0 [pid 5579] memfd_create("syzkaller", 0) = 3 [pid 5579] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5066] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5579] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] lstat("./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./41/file0") = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./41") = 0 [pid 5066] mkdir("./42", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5579] <... write resumed>) = 2097152 [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5580 ./strace-static-x86_64: Process 5580 attached [pid 5580] chdir("./42") = 0 [pid 5580] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5580] setpgid(0, 0) = 0 [pid 5580] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5580] write(3, "1000", 4 [pid 5569] <... sendfile resumed>) = 1048576 [pid 5580] <... write resumed>) = 4 [pid 5569] open(NULL, O_RDONLY [pid 5580] close(3 [pid 5569] <... open resumed>) = -1 EFAULT (Bad address) [pid 5580] <... close resumed>) = 0 [pid 5569] exit_group(0 [pid 5580] symlink("/dev/binderfs", "./binderfs" [pid 5569] <... exit_group resumed>) = ? [pid 5580] <... symlink resumed>) = 0 [pid 5579] munmap(0x7ff395729000, 2097152 [pid 5580] memfd_create("syzkaller", 0 [pid 5579] <... munmap resumed>) = 0 [pid 5569] +++ exited with 0 +++ [pid 5580] <... memfd_create resumed>) = 3 [pid 5579] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5580] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5579] <... openat resumed>) = 4 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5569, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5580] <... mmap resumed>) = 0x7ff395729000 [pid 5579] ioctl(4, LOOP_SET_FD, 3 [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5065] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./40/binderfs") = 0 [pid 5065] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5579] <... ioctl resumed>) = 0 [pid 5579] close(3) = 0 [pid 5579] mkdir("./file0", 0777) = 0 [pid 5579] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [ 128.510964][ T5579] loop0: detected capacity change from 0 to 4096 [ 128.583141][ T5579] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5580] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5580] munmap(0x7ff395729000, 2097152) = 0 [pid 5580] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5580] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... umount2 resumed>) = 0 [pid 5580] <... ioctl resumed>) = 0 [pid 5580] close(3) = 0 [pid 5580] mkdir("./file0", 0777) = 0 [ 128.638346][ T5579] NILFS (loop0): trying rollback from an earlier position [ 128.665013][ T5580] loop4: detected capacity change from 0 to 4096 [pid 5580] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5065] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./40/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./40/file0") = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./40") = 0 [pid 5065] mkdir("./41", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 128.714901][ T5579] NILFS (loop0): recovery complete [ 128.732806][ T5580] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5582 ./strace-static-x86_64: Process 5582 attached [pid 5582] chdir("./41" [pid 5579] <... mount resumed>) = 0 [pid 5582] <... chdir resumed>) = 0 [pid 5579] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5582] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5579] <... openat resumed>) = 3 [pid 5582] <... prctl resumed>) = 0 [pid 5579] chdir("./file0" [pid 5582] setpgid(0, 0 [pid 5579] <... chdir resumed>) = 0 [pid 5582] <... setpgid resumed>) = 0 [pid 5579] ioctl(4, LOOP_CLR_FD [pid 5582] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5579] <... ioctl resumed>) = 0 [pid 5572] <... sendfile resumed>) = 1048576 [pid 5582] <... openat resumed>) = 3 [pid 5579] close(4 [pid 5582] write(3, "1000", 4 [pid 5579] <... close resumed>) = 0 [pid 5572] open(NULL, O_RDONLY [pid 5582] <... write resumed>) = 4 [pid 5579] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5572] <... open resumed>) = -1 EFAULT (Bad address) [pid 5582] close(3 [pid 5579] <... open resumed>) = 4 [pid 5572] exit_group(0 [pid 5582] <... close resumed>) = 0 [pid 5579] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5572] <... exit_group resumed>) = ? [pid 5582] symlink("/dev/binderfs", "./binderfs" [pid 5579] <... open resumed>) = 5 [pid 5572] +++ exited with 0 +++ [pid 5582] <... symlink resumed>) = 0 [pid 5579] ftruncate(5, 33587195 [pid 5582] memfd_create("syzkaller", 0 [pid 5579] <... ftruncate resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5572, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 5582] <... memfd_create resumed>) = 3 [ 128.768058][ T5581] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.799604][ T5580] NILFS (loop4): trying rollback from an earlier position [pid 5579] sendfile(4, 5, NULL, 281474978811909 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5582] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... restart_syscall resumed>) = 0 [pid 5582] <... mmap resumed>) = 0x7ff395729000 [pid 5063] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5582] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./41/binderfs") = 0 [ 128.911078][ T5580] NILFS (loop4): recovery complete [pid 5063] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5580] <... mount resumed>) = 0 [pid 5580] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5580] chdir("./file0") = 0 [pid 5580] ioctl(4, LOOP_CLR_FD) = 0 [pid 5580] close(4) = 0 [pid 5580] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5580] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5582] <... write resumed>) = 2097152 [pid 5580] ftruncate(5, 33587195 [pid 5063] <... umount2 resumed>) = 0 [pid 5580] <... ftruncate resumed>) = 0 [pid 5582] munmap(0x7ff395729000, 2097152 [ 128.953785][ T5583] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5582] <... munmap resumed>) = 0 [pid 5580] sendfile(4, 5, NULL, 281474978811909 [pid 5582] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5574] <... sendfile resumed>) = 1048576 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5582] <... openat resumed>) = 4 [pid 5582] ioctl(4, LOOP_SET_FD, 3 [pid 5574] open(NULL, O_RDONLY [pid 5063] lstat("./41/file0", [pid 5574] <... open resumed>) = -1 EFAULT (Bad address) [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5574] exit_group(0 [pid 5063] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5582] <... ioctl resumed>) = 0 [pid 5574] <... exit_group resumed>) = ? [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5582] close(3 [pid 5574] +++ exited with 0 +++ [pid 5063] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5582] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5582] mkdir("./file0", 0777 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5574, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5063] fstat(4, [pid 5582] <... mkdir resumed>) = 0 [pid 5067] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5582] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(4, [pid 5067] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] fstat(3, [pid 5063] getdents64(4, [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] getdents64(3, [pid 5063] close(4 [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] <... close resumed>) = 0 [ 129.046337][ T5582] loop3: detected capacity change from 0 to 4096 [pid 5067] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] rmdir("./41/file0" [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./41/binderfs", [pid 5063] <... rmdir resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./41/binderfs" [pid 5063] getdents64(3, [pid 5067] <... unlink resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(3) = 0 [pid 5063] rmdir("./41") = 0 [pid 5063] mkdir("./42", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5584 [ 129.104266][ T5582] NILFS (loop3): invalid segment: Checksum error in segment payload [ 129.120517][ T5582] NILFS (loop3): trying rollback from an earlier position [pid 5575] <... sendfile resumed>) = 1048576 [pid 5575] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5575] exit_group(0) = ? [pid 5575] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5575, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5064] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, ./strace-static-x86_64: Process 5584 attached 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5584] chdir("./42" [pid 5064] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5584] <... chdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5584] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] lstat("./41/binderfs", [pid 5584] <... prctl resumed>) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5584] setpgid(0, 0 [pid 5064] unlink("./41/binderfs" [pid 5584] <... setpgid resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5584] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5584] <... openat resumed>) = 3 [pid 5584] write(3, "1000", 4) = 4 [pid 5584] close(3) = 0 [pid 5584] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5584] memfd_create("syzkaller", 0) = 3 [pid 5582] <... mount resumed>) = 0 [pid 5584] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5582] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5582] chdir("./file0") = 0 [pid 5582] ioctl(4, LOOP_CLR_FD) = 0 [pid 5582] close(4) = 0 [pid 5582] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5067] <... umount2 resumed>) = 0 [ 129.221476][ T5582] NILFS (loop3): recovery complete [ 129.232003][ T5585] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5582] <... open resumed>) = 4 [pid 5584] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5582] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5067] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5582] <... open resumed>) = 5 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5582] ftruncate(5, 33587195 [pid 5067] lstat("./41/file0", [pid 5582] <... ftruncate resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5582] sendfile(4, 5, NULL, 281474978811909 [pid 5067] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./41/file0") = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./41") = 0 [pid 5067] mkdir("./42", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5586 ./strace-static-x86_64: Process 5586 attached [pid 5586] chdir("./42") = 0 [pid 5586] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5586] setpgid(0, 0) = 0 [pid 5586] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5584] <... write resumed>) = 2097152 [pid 5586] <... openat resumed>) = 3 [pid 5586] write(3, "1000", 4 [pid 5584] munmap(0x7ff395729000, 2097152 [pid 5586] <... write resumed>) = 4 [pid 5584] <... munmap resumed>) = 0 [pid 5586] close(3 [pid 5584] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5586] <... close resumed>) = 0 [pid 5584] <... openat resumed>) = 4 [pid 5586] symlink("/dev/binderfs", "./binderfs" [pid 5584] ioctl(4, LOOP_SET_FD, 3 [pid 5586] <... symlink resumed>) = 0 [pid 5586] memfd_create("syzkaller", 0) = 3 [pid 5586] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./41/file0", [pid 5584] <... ioctl resumed>) = 0 [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5584] close(3) = 0 [pid 5064] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5584] mkdir("./file0", 0777 [ 129.369223][ T5584] loop1: detected capacity change from 0 to 4096 [pid 5064] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5584] <... mkdir resumed>) = 0 [pid 5064] <... openat resumed>) = 4 [pid 5584] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./41/file0") = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3 [pid 5586] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./41") = 0 [pid 5064] mkdir("./42", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 129.445166][ T5584] NILFS (loop1): invalid segment: Checksum error in segment payload [ 129.460018][ T5584] NILFS (loop1): trying rollback from an earlier position [pid 5064] close(3 [pid 5586] <... write resumed>) = 2097152 [pid 5064] <... close resumed>) = 0 [pid 5586] munmap(0x7ff395729000, 2097152 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5586] <... munmap resumed>) = 0 [pid 5586] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5064] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5587 [pid 5586] <... openat resumed>) = 4 [pid 5586] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5586] close(3) = 0 [pid 5586] mkdir("./file0", 0777) = 0 ./strace-static-x86_64: Process 5587 attached [pid 5586] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5587] chdir("./42") = 0 [ 129.515868][ T5584] NILFS (loop1): recovery complete [ 129.533734][ T5586] loop5: detected capacity change from 0 to 4096 [pid 5587] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5584] <... mount resumed>) = 0 [pid 5587] <... prctl resumed>) = 0 [pid 5584] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5587] setpgid(0, 0 [pid 5584] <... openat resumed>) = 3 [pid 5587] <... setpgid resumed>) = 0 [pid 5584] chdir("./file0" [pid 5587] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5584] <... chdir resumed>) = 0 [pid 5587] <... openat resumed>) = 3 [pid 5584] ioctl(4, LOOP_CLR_FD [pid 5587] write(3, "1000", 4 [pid 5584] <... ioctl resumed>) = 0 [pid 5587] <... write resumed>) = 4 [pid 5584] close(4 [pid 5587] close(3 [pid 5584] <... close resumed>) = 0 [pid 5587] <... close resumed>) = 0 [pid 5584] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5587] symlink("/dev/binderfs", "./binderfs" [pid 5584] <... open resumed>) = 4 [pid 5587] <... symlink resumed>) = 0 [pid 5584] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5587] memfd_create("syzkaller", 0) = 3 [pid 5584] <... open resumed>) = 5 [pid 5587] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5584] ftruncate(5, 33587195 [pid 5587] <... mmap resumed>) = 0x7ff395729000 [pid 5584] <... ftruncate resumed>) = 0 [ 129.569946][ T5588] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.602445][ T5586] NILFS (loop5): invalid segment: Checksum error in segment payload [ 129.639453][ T5586] NILFS (loop5): trying rollback from an earlier position [pid 5584] sendfile(4, 5, NULL, 281474978811909 [ 129.699188][ T5586] NILFS (loop5): recovery complete [pid 5587] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5586] <... mount resumed>) = 0 [pid 5579] <... sendfile resumed>) = 1048576 [pid 5579] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5579] exit_group(0 [pid 5586] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5579] <... exit_group resumed>) = ? [pid 5586] <... openat resumed>) = 3 [pid 5579] +++ exited with 0 +++ [pid 5586] chdir("./file0") = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5579, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5586] ioctl(4, LOOP_CLR_FD) = 0 [pid 5062] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5586] close(4) = 0 [pid 5586] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5586] <... open resumed>) = 4 [pid 5586] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] <... openat resumed>) = 3 [pid 5586] <... open resumed>) = 5 [pid 5062] fstat(3, [pid 5586] ftruncate(5, 33587195 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5586] <... ftruncate resumed>) = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5586] sendfile(4, 5, NULL, 281474978811909 [pid 5062] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 129.744171][ T5589] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5062] lstat("./41/binderfs", [pid 5587] <... write resumed>) = 2097152 [pid 5062] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5587] munmap(0x7ff395729000, 2097152 [pid 5062] unlink("./41/binderfs" [pid 5587] <... munmap resumed>) = 0 [pid 5587] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5587] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... unlink resumed>) = 0 [pid 5062] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5587] <... ioctl resumed>) = 0 [pid 5587] close(3 [pid 5580] <... sendfile resumed>) = 1048576 [pid 5580] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5580] exit_group(0) = ? [pid 5587] <... close resumed>) = 0 [pid 5580] +++ exited with 0 +++ [pid 5587] mkdir("./file0", 0777) = 0 [pid 5587] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5580, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5066] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5066] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 129.845528][ T5587] loop2: detected capacity change from 0 to 4096 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./42/binderfs") = 0 [ 129.924247][ T5587] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5066] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = 0 [ 129.965143][ T5587] NILFS (loop2): trying rollback from an earlier position [pid 5062] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [ 130.037865][ T5587] NILFS (loop2): recovery complete [pid 5062] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./41/file0") = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./41") = 0 [pid 5587] <... mount resumed>) = 0 [pid 5062] mkdir("./42", 0777 [pid 5587] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] <... umount2 resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5587] <... openat resumed>) = 3 [pid 5066] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5587] chdir("./file0" [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5587] <... chdir resumed>) = 0 [pid 5066] lstat("./42/file0", [pid 5587] ioctl(4, LOOP_CLR_FD [pid 5062] <... openat resumed>) = 3 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5587] <... ioctl resumed>) = 0 [pid 5066] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5587] close(4) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5587] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5066] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 130.090723][ T5590] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5062] close(3 [pid 5587] <... open resumed>) = 4 [pid 5066] <... openat resumed>) = 4 [pid 5062] <... close resumed>) = 0 [pid 5587] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5066] fstat(4, [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5587] <... open resumed>) = 5 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5587] ftruncate(5, 33587195 [pid 5066] getdents64(4, [pid 5587] <... ftruncate resumed>) = 0 [pid 5587] sendfile(4, 5, NULL, 281474978811909 [pid 5066] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5591 [pid 5582] <... sendfile resumed>) = 1048576 [pid 5582] open(NULL, O_RDONLY [pid 5066] getdents64(4, [pid 5582] <... open resumed>) = -1 EFAULT (Bad address) [pid 5066] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5591 attached [pid 5582] exit_group(0 [pid 5066] close(4 [pid 5591] chdir("./42" [pid 5582] <... exit_group resumed>) = ? [pid 5066] <... close resumed>) = 0 [pid 5591] <... chdir resumed>) = 0 [pid 5591] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5591] setpgid(0, 0) = 0 [pid 5591] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5582] +++ exited with 0 +++ [pid 5591] <... openat resumed>) = 3 [pid 5066] rmdir("./42/file0" [pid 5591] write(3, "1000", 4 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5582, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} --- [pid 5591] <... write resumed>) = 4 [pid 5066] <... rmdir resumed>) = 0 [pid 5591] close(3 [pid 5066] getdents64(3, [pid 5591] <... close resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5065] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5591] symlink("/dev/binderfs", "./binderfs" [pid 5066] close(3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5591] <... symlink resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5591] memfd_create("syzkaller", 0 [pid 5066] rmdir("./42" [pid 5065] <... openat resumed>) = 3 [pid 5591] <... memfd_create resumed>) = 3 [pid 5065] fstat(3, [pid 5066] <... rmdir resumed>) = 0 [pid 5591] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] mkdir("./43", 0777 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5591] <... mmap resumed>) = 0x7ff395729000 [pid 5065] getdents64(3, [pid 5066] <... mkdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5065] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5065] lstat("./41/binderfs", [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5065] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] close(3 [pid 5065] unlink("./41/binderfs" [pid 5066] <... close resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 5065] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5592 ./strace-static-x86_64: Process 5592 attached [pid 5592] chdir("./43") = 0 [pid 5592] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5592] setpgid(0, 0) = 0 [pid 5592] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5592] write(3, "1000", 4) = 4 [pid 5592] close(3) = 0 [pid 5592] symlink("/dev/binderfs", "./binderfs" [pid 5591] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5592] <... symlink resumed>) = 0 [pid 5592] memfd_create("syzkaller", 0) = 3 [pid 5592] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5592] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5591] <... write resumed>) = 2097152 [pid 5591] munmap(0x7ff395729000, 2097152) = 0 [pid 5591] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5591] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5591] close(3 [pid 5065] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5591] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5591] mkdir("./file0", 0777 [pid 5065] lstat("./41/file0", [pid 5591] <... mkdir resumed>) = 0 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5591] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5065] umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./41/file0") = 0 [ 130.342822][ T5591] loop0: detected capacity change from 0 to 4096 [pid 5065] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./41") = 0 [pid 5065] mkdir("./42", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5592] <... write resumed>) = 2097152 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3 [pid 5592] munmap(0x7ff395729000, 2097152 [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5592] <... munmap resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5593 ./strace-static-x86_64: Process 5593 attached [pid 5593] chdir("./42") = 0 [pid 5593] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5593] setpgid(0, 0) = 0 [pid 5593] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5593] write(3, "1000", 4) = 4 [pid 5593] close(3) = 0 [pid 5593] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5592] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5584] <... sendfile resumed>) = 1048576 [pid 5593] memfd_create("syzkaller", 0 [pid 5592] <... openat resumed>) = 4 [pid 5584] open(NULL, O_RDONLY [pid 5593] <... memfd_create resumed>) = 3 [pid 5592] ioctl(4, LOOP_SET_FD, 3 [pid 5584] <... open resumed>) = -1 EFAULT (Bad address) [ 130.411329][ T5591] NILFS (loop0): invalid segment: Checksum error in segment payload [ 130.440860][ T5591] NILFS (loop0): trying rollback from an earlier position [pid 5593] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5584] exit_group(0) = ? [pid 5584] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5584, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5592] <... ioctl resumed>) = 0 [pid 5592] close(3 [pid 5063] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5593] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5592] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5592] mkdir("./file0", 0777 [pid 5063] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5592] <... mkdir resumed>) = 0 [pid 5063] fstat(3, [pid 5592] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./42/binderfs") = 0 [ 130.464186][ T5592] loop4: detected capacity change from 0 to 4096 [pid 5063] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5591] <... mount resumed>) = 0 [pid 5591] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5591] chdir("./file0") = 0 [pid 5591] ioctl(4, LOOP_CLR_FD) = 0 [ 130.511070][ T5591] NILFS (loop0): recovery complete [ 130.520613][ T5592] NILFS (loop4): invalid segment: Checksum error in segment payload [ 130.528983][ T5592] NILFS (loop4): trying rollback from an earlier position [ 130.548093][ T5594] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5591] close(4) = 0 [pid 5591] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5591] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5591] ftruncate(5, 33587195) = 0 [pid 5591] sendfile(4, 5, NULL, 281474978811909 [pid 5593] <... write resumed>) = 2097152 [pid 5593] munmap(0x7ff395729000, 2097152) = 0 [pid 5593] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 130.596076][ T5592] NILFS (loop4): recovery complete [pid 5593] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./42/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5592] <... mount resumed>) = 0 [pid 5063] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, [pid 5593] close(3 [pid 5063] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5593] <... close resumed>) = 0 [pid 5592] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] getdents64(4, [pid 5593] mkdir("./file0", 0777 [pid 5592] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5592] chdir("./file0") = 0 [pid 5592] ioctl(4, LOOP_CLR_FD) = 0 [pid 5592] close(4 [pid 5586] <... sendfile resumed>) = 1048576 [pid 5592] <... close resumed>) = 0 [pid 5592] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5593] <... mkdir resumed>) = 0 [pid 5593] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5063] close(4) = 0 [pid 5063] rmdir("./42/file0" [pid 5592] <... open resumed>) = 4 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./42") = 0 [ 130.641397][ T5593] loop3: detected capacity change from 0 to 4096 [ 130.672644][ T5595] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] mkdir("./43", 0777 [pid 5592] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5586] open(NULL, O_RDONLY [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5592] <... open resumed>) = 5 [pid 5586] <... open resumed>) = -1 EFAULT (Bad address) [pid 5063] <... openat resumed>) = 3 [pid 5592] ftruncate(5, 33587195 [pid 5586] exit_group(0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5592] <... ftruncate resumed>) = 0 [pid 5586] <... exit_group resumed>) = ? [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5592] sendfile(4, 5, NULL, 281474978811909 [pid 5063] close(3 [pid 5586] +++ exited with 0 +++ [pid 5063] <... close resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5586, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5596 [pid 5067] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5596 attached [pid 5067] lstat("./42/binderfs", [pid 5596] chdir("./43" [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5596] <... chdir resumed>) = 0 [pid 5067] unlink("./42/binderfs" [pid 5596] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] <... unlink resumed>) = 0 [pid 5596] <... prctl resumed>) = 0 [pid 5067] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5596] setpgid(0, 0) = 0 [pid 5596] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5596] write(3, "1000", 4) = 4 [pid 5596] close(3) = 0 [ 130.752090][ T5593] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5596] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5596] memfd_create("syzkaller", 0) = 3 [pid 5596] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [ 130.794792][ T5593] NILFS (loop3): trying rollback from an earlier position [ 130.849281][ T5593] NILFS (loop3): recovery complete [pid 5596] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5593] <... mount resumed>) = 0 [pid 5593] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5593] chdir("./file0") = 0 [pid 5593] ioctl(4, LOOP_CLR_FD) = 0 [pid 5593] close(4) = 0 [pid 5593] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5593] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5593] ftruncate(5, 33587195) = 0 [ 130.877995][ T5597] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5593] sendfile(4, 5, NULL, 281474978811909 [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5596] <... write resumed>) = 2097152 [pid 5067] lstat("./42/file0", [pid 5596] munmap(0x7ff395729000, 2097152 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5596] <... munmap resumed>) = 0 [pid 5067] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5596] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5596] <... openat resumed>) = 4 [pid 5067] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5596] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... openat resumed>) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, [pid 5587] <... sendfile resumed>) = 1048576 [pid 5067] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] close(4 [pid 5587] open(NULL, O_RDONLY [pid 5067] <... close resumed>) = 0 [pid 5587] <... open resumed>) = -1 EFAULT (Bad address) [pid 5067] rmdir("./42/file0" [pid 5587] exit_group(0 [pid 5067] <... rmdir resumed>) = 0 [pid 5587] <... exit_group resumed>) = ? [pid 5067] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5587] +++ exited with 0 +++ [pid 5067] close(3) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5587, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5067] rmdir("./42") = 0 [pid 5067] mkdir("./43", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5596] <... ioctl resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5596] close(3 [pid 5067] close(3 [pid 5596] <... close resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5596] mkdir("./file0", 0777 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5596] <... mkdir resumed>) = 0 [pid 5596] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5067] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5598 [pid 5064] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 131.009757][ T5596] loop1: detected capacity change from 0 to 4096 [pid 5064] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5598 attached ) = -1 EINVAL (Invalid argument) [pid 5598] chdir("./43") = 0 [pid 5064] lstat("./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./42/binderfs" [pid 5598] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... unlink resumed>) = 0 [pid 5598] <... prctl resumed>) = 0 [pid 5064] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5598] setpgid(0, 0) = 0 [pid 5598] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5598] write(3, "1000", 4) = 4 [pid 5598] close(3) = 0 [pid 5598] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5598] memfd_create("syzkaller", 0) = 3 [pid 5598] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [ 131.104970][ T5596] NILFS (loop1): invalid segment: Checksum error in segment payload [ 131.117789][ T5596] NILFS (loop1): trying rollback from an earlier position [pid 5598] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [ 131.202034][ T5596] NILFS (loop1): recovery complete [pid 5596] <... mount resumed>) = 0 [pid 5596] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5596] chdir("./file0") = 0 [pid 5596] ioctl(4, LOOP_CLR_FD) = 0 [pid 5596] close(4 [pid 5598] munmap(0x7ff395729000, 2097152 [pid 5596] <... close resumed>) = 0 [pid 5596] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5598] <... munmap resumed>) = 0 [pid 5596] <... open resumed>) = 4 [pid 5596] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5598] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5596] <... open resumed>) = 5 [pid 5064] <... umount2 resumed>) = 0 [pid 5598] <... openat resumed>) = 4 [pid 5598] ioctl(4, LOOP_SET_FD, 3 [pid 5596] ftruncate(5, 33587195) = 0 [pid 5596] sendfile(4, 5, NULL, 281474978811909 [pid 5598] <... ioctl resumed>) = 0 [pid 5598] close(3) = 0 [pid 5598] mkdir("./file0", 0777) = 0 [pid 5598] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5064] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./42/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 131.282451][ T5599] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.311940][ T5598] loop5: detected capacity change from 0 to 4096 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./42/file0") = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./42") = 0 [pid 5064] mkdir("./43", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [ 131.349389][ T5598] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5600 ./strace-static-x86_64: Process 5600 attached [pid 5600] chdir("./43") = 0 [pid 5600] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5600] setpgid(0, 0) = 0 [pid 5600] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5600] write(3, "1000", 4) = 4 [pid 5591] <... sendfile resumed>) = 1048576 [ 131.403880][ T5598] NILFS (loop5): trying rollback from an earlier position [pid 5600] close(3) = 0 [pid 5591] open(NULL, O_RDONLY [pid 5600] symlink("/dev/binderfs", "./binderfs" [pid 5591] <... open resumed>) = -1 EFAULT (Bad address) [pid 5600] <... symlink resumed>) = 0 [pid 5591] exit_group(0 [pid 5600] memfd_create("syzkaller", 0 [pid 5591] <... exit_group resumed>) = ? [pid 5600] <... memfd_create resumed>) = 3 [pid 5600] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5591] +++ exited with 0 +++ [pid 5600] <... mmap resumed>) = 0x7ff395729000 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5591, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5062] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 131.454885][ T5598] NILFS (loop5): recovery complete [pid 5598] <... mount resumed>) = 0 [pid 5062] lstat("./42/binderfs", [pid 5598] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5598] <... openat resumed>) = 3 [pid 5062] unlink("./42/binderfs" [pid 5598] chdir("./file0" [pid 5062] <... unlink resumed>) = 0 [pid 5598] <... chdir resumed>) = 0 [pid 5062] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5598] ioctl(4, LOOP_CLR_FD) = 0 [pid 5598] close(4) = 0 [pid 5598] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5600] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5598] <... open resumed>) = 4 [pid 5598] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5598] ftruncate(5, 33587195) = 0 [ 131.490815][ T5601] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5598] sendfile(4, 5, NULL, 281474978811909 [pid 5600] <... write resumed>) = 2097152 [pid 5600] munmap(0x7ff395729000, 2097152) = 0 [pid 5600] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5600] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5600] close(3) = 0 [pid 5600] mkdir("./file0", 0777) = 0 [ 131.581031][ T5600] loop2: detected capacity change from 0 to 4096 [pid 5600] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5592] <... sendfile resumed>) = 1048576 [pid 5592] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5592] exit_group(0) = ? [pid 5592] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5592, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5066] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./43/binderfs") = 0 [ 131.633905][ T5600] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5066] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./42/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./42/file0") = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./42") = 0 [pid 5062] mkdir("./43", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 131.712363][ T5600] NILFS (loop2): trying rollback from an earlier position [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5602 ./strace-static-x86_64: Process 5602 attached [pid 5602] chdir("./43") = 0 [pid 5602] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5602] setpgid(0, 0) = 0 [pid 5602] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5602] write(3, "1000", 4) = 4 [pid 5602] close(3) = 0 [ 131.783748][ T5600] NILFS (loop2): recovery complete [pid 5602] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5602] memfd_create("syzkaller", 0) = 3 [pid 5602] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5600] <... mount resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5600] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] <... openat resumed>) = 4 [pid 5600] <... openat resumed>) = 3 [pid 5066] fstat(4, [pid 5600] chdir("./file0" [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5600] <... chdir resumed>) = 0 [pid 5066] getdents64(4, [pid 5600] ioctl(4, LOOP_CLR_FD [pid 5066] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5600] <... ioctl resumed>) = 0 [pid 5600] close(4 [pid 5066] getdents64(4, [pid 5600] <... close resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5600] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5066] close(4 [pid 5600] <... open resumed>) = 4 [pid 5066] <... close resumed>) = 0 [pid 5600] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5066] rmdir("./43/file0" [pid 5600] <... open resumed>) = 5 [pid 5066] <... rmdir resumed>) = 0 [pid 5600] ftruncate(5, 33587195 [pid 5066] getdents64(3, [pid 5600] <... ftruncate resumed>) = 0 [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5600] sendfile(4, 5, NULL, 281474978811909 [pid 5066] close(3) = 0 [pid 5066] rmdir("./43") = 0 [pid 5066] mkdir("./44", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5593] <... sendfile resumed>) = 1048576 [pid 5593] open(NULL, O_RDONLY [pid 5066] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5604 ./strace-static-x86_64: Process 5604 attached [pid 5604] chdir("./44") = 0 [ 131.834136][ T5603] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5604] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5604] setpgid(0, 0) = 0 [pid 5604] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5593] <... open resumed>) = -1 EFAULT (Bad address) [pid 5604] <... openat resumed>) = 3 [pid 5593] exit_group(0 [pid 5604] write(3, "1000", 4 [pid 5593] <... exit_group resumed>) = ? [pid 5604] <... write resumed>) = 4 [pid 5593] +++ exited with 0 +++ [pid 5604] close(3) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5593, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5604] symlink("/dev/binderfs", "./binderfs" [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5604] <... symlink resumed>) = 0 [pid 5065] <... restart_syscall resumed>) = 0 [pid 5604] memfd_create("syzkaller", 0) = 3 [pid 5604] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5604] <... mmap resumed>) = 0x7ff395729000 [pid 5602] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./42/binderfs") = 0 [pid 5065] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5604] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5602] <... write resumed>) = 2097152 [pid 5602] munmap(0x7ff395729000, 2097152) = 0 [pid 5602] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5602] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5602] close(3) = 0 [pid 5604] <... write resumed>) = 2097152 [pid 5602] mkdir("./file0", 0777 [pid 5604] munmap(0x7ff395729000, 2097152 [pid 5602] <... mkdir resumed>) = 0 [pid 5604] <... munmap resumed>) = 0 [pid 5602] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5604] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 132.043625][ T5602] loop0: detected capacity change from 0 to 4096 [pid 5604] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5604] close(3) = 0 [pid 5604] mkdir("./file0", 0777) = 0 [pid 5604] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./42/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [ 132.083809][ T5604] loop4: detected capacity change from 0 to 4096 [ 132.103350][ T5602] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5065] rmdir("./42/file0") = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./42") = 0 [pid 5065] mkdir("./43", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 132.142014][ T5604] NILFS (loop4): invalid segment: Checksum error in segment payload [ 132.150076][ T5604] NILFS (loop4): trying rollback from an earlier position [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5605 ./strace-static-x86_64: Process 5605 attached [pid 5605] chdir("./43") = 0 [pid 5605] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5605] setpgid(0, 0) = 0 [pid 5605] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5605] write(3, "1000", 4) = 4 [pid 5605] close(3) = 0 [pid 5605] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5605] memfd_create("syzkaller", 0) = 3 [pid 5605] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [ 132.186735][ T5602] NILFS (loop0): trying rollback from an earlier position [pid 5596] <... sendfile resumed>) = 1048576 [pid 5596] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5596] exit_group(0 [pid 5605] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5596] <... exit_group resumed>) = ? [pid 5596] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5596, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [ 132.257445][ T5602] NILFS (loop0): recovery complete [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./43/binderfs") = 0 [pid 5063] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5602] <... mount resumed>) = 0 [pid 5602] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5602] chdir("./file0") = 0 [pid 5602] ioctl(4, LOOP_CLR_FD) = 0 [ 132.294515][ T5604] NILFS (loop4): recovery complete [ 132.304868][ T5606] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5602] close(4 [pid 5605] <... write resumed>) = 2097152 [pid 5604] <... mount resumed>) = 0 [pid 5602] <... close resumed>) = 0 [pid 5604] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5602] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5604] <... openat resumed>) = 3 [pid 5602] <... open resumed>) = 4 [pid 5604] chdir("./file0" [pid 5602] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5604] <... chdir resumed>) = 0 [pid 5602] <... open resumed>) = 5 [pid 5604] ioctl(4, LOOP_CLR_FD [pid 5602] ftruncate(5, 33587195 [pid 5604] <... ioctl resumed>) = 0 [pid 5602] <... ftruncate resumed>) = 0 [pid 5604] close(4 [pid 5602] sendfile(4, 5, NULL, 281474978811909 [pid 5605] munmap(0x7ff395729000, 2097152 [pid 5604] <... close resumed>) = 0 [pid 5604] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5605] <... munmap resumed>) = 0 [pid 5604] <... open resumed>) = 4 [pid 5604] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5605] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5604] <... open resumed>) = 5 [pid 5605] <... openat resumed>) = 4 [pid 5604] ftruncate(5, 33587195) = 0 [ 132.340994][ T5607] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5604] sendfile(4, 5, NULL, 281474978811909 [pid 5605] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5605] close(3) = 0 [pid 5605] mkdir("./file0", 0777) = 0 [pid 5598] <... sendfile resumed>) = 1048576 [pid 5605] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5598] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [ 132.401011][ T5605] loop3: detected capacity change from 0 to 4096 [pid 5598] exit_group(0) = ? [pid 5598] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5598, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5067] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5067] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./43/binderfs", [pid 5063] lstat("./43/file0", [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, [pid 5067] unlink("./43/binderfs") = 0 [pid 5067] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./43/file0") = 0 [ 132.470527][ T5605] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5063] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./43") = 0 [pid 5063] mkdir("./44", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5608 ./strace-static-x86_64: Process 5608 attached [pid 5608] chdir("./44") = 0 [pid 5608] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5608] setpgid(0, 0) = 0 [pid 5608] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5608] write(3, "1000", 4) = 4 [pid 5608] close(3) = 0 [pid 5608] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5608] memfd_create("syzkaller", 0) = 3 [pid 5608] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [ 132.562419][ T5605] NILFS (loop3): trying rollback from an earlier position [pid 5608] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 132.623223][ T5605] NILFS (loop3): recovery complete [pid 5608] <... write resumed>) = 2097152 [pid 5608] munmap(0x7ff395729000, 2097152 [pid 5067] lstat("./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5608] <... munmap resumed>) = 0 [pid 5605] <... mount resumed>) = 0 [pid 5067] <... openat resumed>) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./43/file0" [pid 5605] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... rmdir resumed>) = 0 [pid 5605] <... openat resumed>) = 3 [pid 5067] getdents64(3, [pid 5605] chdir("./file0" [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./43") = 0 [pid 5067] mkdir("./44", 0777 [pid 5605] <... chdir resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5605] ioctl(4, LOOP_CLR_FD [pid 5608] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5605] <... ioctl resumed>) = 0 [pid 5067] <... openat resumed>) = 3 [ 132.662458][ T5609] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5608] <... openat resumed>) = 4 [pid 5605] close(4 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5608] ioctl(4, LOOP_SET_FD, 3 [pid 5605] <... close resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5605] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5610 [pid 5608] <... ioctl resumed>) = 0 [pid 5608] close(3) = 0 [pid 5608] mkdir("./file0", 0777 [pid 5605] <... open resumed>) = 4 [pid 5605] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5605] ftruncate(5, 33587195) = 0 [pid 5605] sendfile(4, 5, NULL, 281474978811909 [pid 5608] <... mkdir resumed>) = 0 [pid 5608] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, ""./strace-static-x86_64: Process 5610 attached [pid 5600] <... sendfile resumed>) = 1048576 [pid 5610] chdir("./44" [ 132.715420][ T5608] loop1: detected capacity change from 0 to 4096 [pid 5600] open(NULL, O_RDONLY [pid 5610] <... chdir resumed>) = 0 [pid 5600] <... open resumed>) = -1 EFAULT (Bad address) [pid 5610] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5600] exit_group(0 [pid 5610] <... prctl resumed>) = 0 [pid 5600] <... exit_group resumed>) = ? [pid 5610] setpgid(0, 0 [pid 5600] +++ exited with 0 +++ [pid 5610] <... setpgid resumed>) = 0 [pid 5610] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5600, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5610] <... openat resumed>) = 3 [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5610] write(3, "1000", 4 [pid 5064] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5610] <... write resumed>) = 4 [pid 5064] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5610] close(3 [pid 5064] <... openat resumed>) = 3 [pid 5610] <... close resumed>) = 0 [pid 5064] fstat(3, [pid 5610] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, [pid 5610] <... symlink resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5610] memfd_create("syzkaller", 0 [pid 5064] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5610] <... memfd_create resumed>) = 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5610] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] lstat("./43/binderfs", [pid 5610] <... mmap resumed>) = 0x7ff395729000 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./43/binderfs") = 0 [ 132.790596][ T5608] NILFS (loop1): invalid segment: Checksum error in segment payload [ 132.798641][ T5608] NILFS (loop1): trying rollback from an earlier position [pid 5064] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 132.883887][ T5608] NILFS (loop1): recovery complete [pid 5610] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5608] <... mount resumed>) = 0 [pid 5608] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5608] chdir("./file0") = 0 [pid 5608] ioctl(4, LOOP_CLR_FD) = 0 [pid 5608] close(4) = 0 [pid 5608] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5608] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5608] ftruncate(5, 33587195) = 0 [ 132.938724][ T5611] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5608] sendfile(4, 5, NULL, 281474978811909 [pid 5064] <... umount2 resumed>) = 0 [pid 5610] munmap(0x7ff395729000, 2097152 [pid 5064] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5610] <... munmap resumed>) = 0 [pid 5610] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5610] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, [pid 5610] <... ioctl resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./43/file0") = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./43") = 0 [pid 5064] mkdir("./44", 0777 [pid 5610] close(3 [pid 5064] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5610] <... close resumed>) = 0 [ 133.032402][ T5610] loop5: detected capacity change from 0 to 4096 [pid 5610] mkdir("./file0", 0777 [pid 5064] <... openat resumed>) = 3 [pid 5610] <... mkdir resumed>) = 0 [pid 5610] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5612 ./strace-static-x86_64: Process 5612 attached [pid 5612] chdir("./44") = 0 [pid 5612] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5612] setpgid(0, 0) = 0 [pid 5612] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5612] write(3, "1000", 4) = 4 [pid 5612] close(3) = 0 [pid 5612] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5612] memfd_create("syzkaller", 0) = 3 [pid 5612] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [ 133.120680][ T5610] NILFS (loop5): invalid segment: Checksum error in segment payload [ 133.170862][ T5610] NILFS (loop5): trying rollback from an earlier position [ 133.232851][ T5610] NILFS (loop5): recovery complete [pid 5612] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5602] <... sendfile resumed>) = 1048576 [pid 5610] <... mount resumed>) = 0 [pid 5602] open(NULL, O_RDONLY [pid 5610] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5602] <... open resumed>) = -1 EFAULT (Bad address) [pid 5610] <... openat resumed>) = 3 [pid 5602] exit_group(0 [pid 5610] chdir("./file0" [pid 5602] <... exit_group resumed>) = ? [pid 5610] <... chdir resumed>) = 0 [pid 5610] ioctl(4, LOOP_CLR_FD [pid 5602] +++ exited with 0 +++ [pid 5610] <... ioctl resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5602, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5610] close(4) = 0 [pid 5062] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] getdents64(3, [pid 5612] <... write resumed>) = 2097152 [pid 5610] <... open resumed>) = 4 [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5610] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./43/binderfs", [pid 5610] <... open resumed>) = 5 [pid 5062] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 133.269287][ T5613] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5610] ftruncate(5, 33587195 [pid 5062] unlink("./43/binderfs" [pid 5610] <... ftruncate resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 5610] sendfile(4, 5, NULL, 281474978811909 [pid 5062] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5612] munmap(0x7ff395729000, 2097152) = 0 [pid 5612] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5612] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5612] close(3) = 0 [pid 5612] mkdir("./file0", 0777) = 0 [ 133.338938][ T5612] loop2: detected capacity change from 0 to 4096 [pid 5612] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5604] <... sendfile resumed>) = 1048576 [pid 5604] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5604] exit_group(0) = ? [pid 5604] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5604, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- [pid 5066] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./44/binderfs") = 0 [ 133.422047][ T5612] NILFS (loop2): invalid segment: Checksum error in segment payload [ 133.457943][ T5612] NILFS (loop2): trying rollback from an earlier position [pid 5066] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./43/file0") = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./43") = 0 [pid 5062] mkdir("./44", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 133.534401][ T5612] NILFS (loop2): recovery complete [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5614 ./strace-static-x86_64: Process 5614 attached [pid 5614] chdir("./44") = 0 [pid 5614] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5614] setpgid(0, 0) = 0 [pid 5614] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5614] write(3, "1000", 4) = 4 [pid 5614] close(3) = 0 [pid 5614] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5614] memfd_create("syzkaller", 0) = 3 [pid 5614] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5612] <... mount resumed>) = 0 [pid 5612] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5612] chdir("./file0") = 0 [pid 5612] ioctl(4, LOOP_CLR_FD) = 0 [pid 5612] close(4) = 0 [pid 5612] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5612] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5612] ftruncate(5, 33587195) = 0 [ 133.600237][ T5615] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5612] sendfile(4, 5, NULL, 281474978811909 [pid 5614] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./44/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./44/file0") = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./44") = 0 [pid 5066] mkdir("./45", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3 [pid 5614] <... write resumed>) = 2097152 [pid 5066] <... close resumed>) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5616 ./strace-static-x86_64: Process 5616 attached [pid 5616] chdir("./45") = 0 [pid 5616] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5616] setpgid(0, 0) = 0 [pid 5616] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5614] munmap(0x7ff395729000, 2097152 [pid 5616] write(3, "1000", 4 [pid 5614] <... munmap resumed>) = 0 [pid 5616] <... write resumed>) = 4 [pid 5614] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5616] close(3 [pid 5614] <... openat resumed>) = 4 [pid 5616] <... close resumed>) = 0 [pid 5614] ioctl(4, LOOP_SET_FD, 3 [pid 5616] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5616] memfd_create("syzkaller", 0) = 3 [pid 5616] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5605] <... sendfile resumed>) = 1048576 [pid 5605] open(NULL, O_RDONLY [pid 5616] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5605] <... open resumed>) = -1 EFAULT (Bad address) [pid 5605] exit_group(0 [pid 5614] <... ioctl resumed>) = 0 [pid 5605] <... exit_group resumed>) = ? [pid 5614] close(3) = 0 [pid 5614] mkdir("./file0", 0777 [pid 5605] +++ exited with 0 +++ [pid 5614] <... mkdir resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5605, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [ 133.817659][ T5614] loop0: detected capacity change from 0 to 4096 [pid 5614] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5065] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./43/binderfs") = 0 [pid 5065] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5608] <... sendfile resumed>) = 1048576 [pid 5608] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5608] exit_group(0) = ? [pid 5608] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5608, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 5063] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 133.898782][ T5614] NILFS (loop0): invalid segment: Checksum error in segment payload [ 133.936110][ T5614] NILFS (loop0): trying rollback from an earlier position [pid 5063] lstat("./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./44/binderfs") = 0 [pid 5063] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5616] <... write resumed>) = 2097152 [pid 5616] munmap(0x7ff395729000, 2097152) = 0 [pid 5616] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5616] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5616] close(3) = 0 [pid 5616] mkdir("./file0", 0777) = 0 [ 134.001556][ T5616] loop4: detected capacity change from 0 to 4096 [ 134.036901][ T5614] NILFS (loop0): recovery complete [pid 5616] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5614] <... mount resumed>) = 0 [pid 5614] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5614] chdir("./file0" [pid 5065] <... umount2 resumed>) = 0 [pid 5614] <... chdir resumed>) = 0 [pid 5614] ioctl(4, LOOP_CLR_FD) = 0 [pid 5614] close(4) = 0 [pid 5614] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5614] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5614] ftruncate(5, 33587195) = 0 [ 134.068187][ T5616] NILFS (loop4): invalid segment: Checksum error in segment payload [ 134.100697][ T5617] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.104657][ T5616] NILFS (loop4): trying rollback from an earlier position [pid 5614] sendfile(4, 5, NULL, 281474978811909 [pid 5065] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5065] close(4 [pid 5063] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] rmdir("./43/file0") = 0 [pid 5063] lstat("./44/file0", [pid 5065] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] close(3 [pid 5063] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] rmdir("./43" [pid 5063] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... rmdir resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5610] <... sendfile resumed>) = 1048576 [pid 5065] mkdir("./44", 0777 [pid 5063] fstat(4, [pid 5610] open(NULL, O_RDONLY [pid 5065] <... mkdir resumed>) = 0 [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] <... open resumed>) = -1 EFAULT (Bad address) [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3 [pid 5610] exit_group(0 [pid 5065] <... close resumed>) = 0 [pid 5063] getdents64(4, [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5618 [pid 5610] <... exit_group resumed>) = ? [pid 5063] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [ 134.240806][ T5616] NILFS (loop4): recovery complete [pid 5610] +++ exited with 0 +++ [pid 5063] getdents64(4, [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5610, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5063] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 5067] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 5618 attached [pid 5616] <... mount resumed>) = 0 [pid 5067] fstat(3, [pid 5063] <... close resumed>) = 0 [pid 5618] chdir("./44" [pid 5616] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] rmdir("./44/file0" [pid 5618] <... chdir resumed>) = 0 [pid 5616] <... openat resumed>) = 3 [pid 5067] getdents64(3, [pid 5618] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5616] chdir("./file0" [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] <... rmdir resumed>) = 0 [pid 5618] <... prctl resumed>) = 0 [pid 5616] <... chdir resumed>) = 0 [pid 5067] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(3, [pid 5618] setpgid(0, 0 [pid 5616] ioctl(4, LOOP_CLR_FD [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5618] <... setpgid resumed>) = 0 [pid 5616] <... ioctl resumed>) = 0 [pid 5067] lstat("./44/binderfs", [pid 5063] close(3 [pid 5618] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5616] close(4 [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] <... close resumed>) = 0 [pid 5618] <... openat resumed>) = 3 [pid 5616] <... close resumed>) = 0 [ 134.292883][ T5619] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5067] unlink("./44/binderfs" [pid 5063] rmdir("./44" [pid 5618] write(3, "1000", 4 [pid 5616] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5067] <... unlink resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5618] <... write resumed>) = 4 [pid 5616] <... open resumed>) = 4 [pid 5067] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] mkdir("./45", 0777 [pid 5618] close(3 [pid 5616] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5618] <... close resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5618] symlink("/dev/binderfs", "./binderfs" [pid 5616] <... open resumed>) = 5 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5618] <... symlink resumed>) = 0 [pid 5616] ftruncate(5, 33587195 [pid 5063] <... openat resumed>) = 3 [pid 5618] memfd_create("syzkaller", 0 [pid 5616] <... ftruncate resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5618] <... memfd_create resumed>) = 3 [pid 5616] sendfile(4, 5, NULL, 281474978811909 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5618] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5620 [pid 5618] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5620 attached [pid 5620] chdir("./45") = 0 [pid 5620] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5620] setpgid(0, 0) = 0 [pid 5620] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5620] write(3, "1000", 4) = 4 [pid 5620] close(3) = 0 [pid 5620] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5620] memfd_create("syzkaller", 0) = 3 [pid 5620] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5620] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5618] <... write resumed>) = 2097152 [pid 5618] munmap(0x7ff395729000, 2097152 [pid 5612] <... sendfile resumed>) = 1048576 [pid 5618] <... munmap resumed>) = 0 [pid 5612] open(NULL, O_RDONLY [pid 5618] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5612] <... open resumed>) = -1 EFAULT (Bad address) [pid 5618] <... openat resumed>) = 4 [pid 5612] exit_group(0 [pid 5618] ioctl(4, LOOP_SET_FD, 3 [pid 5612] <... exit_group resumed>) = ? [pid 5612] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5612, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5620] <... write resumed>) = 2097152 [pid 5067] <... umount2 resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5064] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, [pid 5067] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5620] munmap(0x7ff395729000, 2097152 [pid 5067] lstat("./44/file0", [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5620] <... munmap resumed>) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] lstat("./44/binderfs", [pid 5620] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5067] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5620] <... openat resumed>) = 4 [pid 5618] <... ioctl resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] unlink("./44/binderfs" [pid 5620] ioctl(4, LOOP_SET_FD, 3 [pid 5618] close(3 [pid 5067] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... unlink resumed>) = 0 [pid 5618] <... close resumed>) = 0 [pid 5064] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5618] mkdir("./file0", 0777 [pid 5067] <... openat resumed>) = 4 [pid 5618] <... mkdir resumed>) = 0 [ 134.568821][ T5618] loop3: detected capacity change from 0 to 4096 [pid 5067] fstat(4, [pid 5618] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5067] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./44/file0" [pid 5620] <... ioctl resumed>) = 0 [pid 5620] close(3 [pid 5067] <... rmdir resumed>) = 0 [pid 5067] getdents64(3, [pid 5620] <... close resumed>) = 0 [pid 5620] mkdir("./file0", 0777 [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./44" [pid 5620] <... mkdir resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5620] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5067] mkdir("./45", 0777) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5067] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5067] close(3) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5621 [ 134.624290][ T5620] loop1: detected capacity change from 0 to 4096 [ 134.651265][ T5618] NILFS (loop3): invalid segment: Checksum error in segment payload ./strace-static-x86_64: Process 5621 attached [pid 5621] chdir("./45") = 0 [pid 5621] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5621] setpgid(0, 0) = 0 [ 134.692829][ T5618] NILFS (loop3): trying rollback from an earlier position [ 134.699518][ T5620] NILFS (loop1): invalid segment: Checksum error in segment payload [ 134.721279][ T5618] NILFS (loop3): recovery complete [pid 5621] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5621] write(3, "1000", 4) = 4 [pid 5621] close(3) = 0 [pid 5621] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5621] memfd_create("syzkaller", 0) = 3 [pid 5621] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5618] <... mount resumed>) = 0 [pid 5618] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5618] chdir("./file0") = 0 [pid 5618] ioctl(4, LOOP_CLR_FD) = 0 [pid 5618] close(4) = 0 [pid 5618] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5618] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5618] ftruncate(5, 33587195) = 0 [pid 5618] sendfile(4, 5, NULL, 281474978811909 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./44/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 134.740298][ T5622] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.765915][ T5620] NILFS (loop1): trying rollback from an earlier position [pid 5064] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] fstat(4, [pid 5621] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./44/file0") = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./44") = 0 [pid 5064] mkdir("./45", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 134.879475][ T5620] NILFS (loop1): recovery complete [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5623 ./strace-static-x86_64: Process 5623 attached [pid 5623] chdir("./45") = 0 [pid 5620] <... mount resumed>) = 0 [pid 5623] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5621] <... write resumed>) = 2097152 [pid 5620] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5623] <... prctl resumed>) = 0 [pid 5620] <... openat resumed>) = 3 [pid 5623] setpgid(0, 0 [pid 5620] chdir("./file0" [pid 5621] munmap(0x7ff395729000, 2097152) = 0 [pid 5621] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5621] ioctl(4, LOOP_SET_FD, 3 [pid 5623] <... setpgid resumed>) = 0 [pid 5620] <... chdir resumed>) = 0 [pid 5623] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5620] ioctl(4, LOOP_CLR_FD [pid 5623] <... openat resumed>) = 3 [pid 5620] <... ioctl resumed>) = 0 [pid 5623] write(3, "1000", 4 [pid 5620] close(4 [pid 5623] <... write resumed>) = 4 [pid 5620] <... close resumed>) = 0 [pid 5623] close(3 [pid 5620] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5623] <... close resumed>) = 0 [pid 5620] <... open resumed>) = 4 [pid 5623] symlink("/dev/binderfs", "./binderfs" [pid 5620] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5623] <... symlink resumed>) = 0 [pid 5620] <... open resumed>) = 5 [pid 5623] memfd_create("syzkaller", 0 [pid 5620] ftruncate(5, 33587195 [pid 5623] <... memfd_create resumed>) = 3 [pid 5620] <... ftruncate resumed>) = 0 [pid 5623] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5620] sendfile(4, 5, NULL, 281474978811909 [pid 5623] <... mmap resumed>) = 0x7ff395729000 [ 134.938227][ T5624] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.976588][ T5621] loop5: detected capacity change from 0 to 4096 [pid 5621] <... ioctl resumed>) = 0 [pid 5621] close(3) = 0 [pid 5621] mkdir("./file0", 0777) = 0 [pid 5621] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5623] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5614] <... sendfile resumed>) = 1048576 [pid 5614] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5614] exit_group(0) = ? [pid 5614] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5614, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5062] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5062] unlink("./44/binderfs") = 0 [ 135.092661][ T5621] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5062] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5623] <... write resumed>) = 2097152 [pid 5623] munmap(0x7ff395729000, 2097152) = 0 [pid 5623] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 135.134936][ T5621] NILFS (loop5): trying rollback from an earlier position [pid 5623] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5623] close(3) = 0 [pid 5623] mkdir("./file0", 0777) = 0 [ 135.182656][ T5623] loop2: detected capacity change from 0 to 4096 [ 135.204192][ T5621] NILFS (loop5): recovery complete [pid 5623] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5621] <... mount resumed>) = 0 [pid 5621] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5621] chdir("./file0") = 0 [ 135.268707][ T5623] NILFS (loop2): invalid segment: Checksum error in segment payload [ 135.290252][ T5623] NILFS (loop2): trying rollback from an earlier position [ 135.297480][ T5625] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5621] ioctl(4, LOOP_CLR_FD) = 0 [pid 5621] close(4) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5623] <... mount resumed>) = 0 [pid 5621] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5623] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5621] <... open resumed>) = 4 [pid 5623] <... openat resumed>) = 3 [pid 5621] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5623] chdir("./file0") = 0 [pid 5621] <... open resumed>) = 5 [pid 5623] ioctl(4, LOOP_CLR_FD [pid 5621] ftruncate(5, 33587195 [pid 5623] <... ioctl resumed>) = 0 [pid 5623] close(4 [pid 5621] <... ftruncate resumed>) = 0 [pid 5623] <... close resumed>) = 0 [pid 5621] sendfile(4, 5, NULL, 281474978811909 [pid 5623] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5623] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 135.331996][ T5623] NILFS (loop2): recovery complete [ 135.348657][ T5626] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5623] <... open resumed>) = 5 [pid 5623] ftruncate(5, 33587195) = 0 [pid 5623] sendfile(4, 5, NULL, 281474978811909 [pid 5062] lstat("./44/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5616] <... sendfile resumed>) = 1048576 [pid 5062] close(4 [pid 5616] open(NULL, O_RDONLY [pid 5062] <... close resumed>) = 0 [pid 5616] <... open resumed>) = -1 EFAULT (Bad address) [pid 5062] rmdir("./44/file0" [pid 5616] exit_group(0 [pid 5062] <... rmdir resumed>) = 0 [pid 5616] <... exit_group resumed>) = ? [pid 5062] getdents64(3, [pid 5616] +++ exited with 0 +++ [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5616, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5062] close(3) = 0 [pid 5062] rmdir("./44") = 0 [pid 5062] mkdir("./45", 0777) = 0 [pid 5066] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... openat resumed>) = 3 [pid 5066] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5066] <... openat resumed>) = 3 [pid 5062] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] fstat(3, [pid 5062] close(3 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] <... close resumed>) = 0 [pid 5066] getdents64(3, [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5627 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./45/binderfs") = 0 [pid 5066] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5627 attached [pid 5627] chdir("./45") = 0 [pid 5627] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5627] setpgid(0, 0) = 0 [pid 5627] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5627] write(3, "1000", 4) = 4 [pid 5627] close(3) = 0 [pid 5627] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5627] memfd_create("syzkaller", 0) = 3 [pid 5627] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5627] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] <... umount2 resumed>) = 0 [pid 5066] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./45/file0", [pid 5627] <... write resumed>) = 2097152 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5627] munmap(0x7ff395729000, 2097152 [pid 5066] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5627] <... munmap resumed>) = 0 [pid 5627] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5066] <... openat resumed>) = 4 [pid 5066] fstat(4, [pid 5627] <... openat resumed>) = 4 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5627] ioctl(4, LOOP_SET_FD, 3 [pid 5066] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5066] close(4) = 0 [pid 5066] rmdir("./45/file0") = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./45") = 0 [pid 5066] mkdir("./46", 0777) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5627] <... ioctl resumed>) = 0 [pid 5066] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5628 [pid 5627] close(3) = 0 [pid 5627] mkdir("./file0", 0777) = 0 [pid 5627] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, ""./strace-static-x86_64: Process 5628 attached [ 135.715561][ T5627] loop0: detected capacity change from 0 to 4096 [pid 5628] chdir("./46") = 0 [pid 5628] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5628] setpgid(0, 0) = 0 [pid 5628] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5628] write(3, "1000", 4) = 4 [pid 5628] close(3) = 0 [pid 5628] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5628] memfd_create("syzkaller", 0) = 3 [pid 5628] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [ 135.783354][ T5627] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5628] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5618] <... sendfile resumed>) = 1048576 [ 135.835495][ T5627] NILFS (loop0): trying rollback from an earlier position [pid 5618] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5618] exit_group(0) = ? [pid 5618] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5618, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5065] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./44/binderfs") = 0 [pid 5065] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5628] <... write resumed>) = 2097152 [pid 5628] munmap(0x7ff395729000, 2097152) = 0 [pid 5628] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 135.920930][ T5627] NILFS (loop0): recovery complete [pid 5628] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5628] close(3) = 0 [pid 5628] mkdir("./file0", 0777) = 0 [pid 5628] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5627] <... mount resumed>) = 0 [pid 5627] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5627] chdir("./file0") = 0 [ 135.956741][ T5628] loop4: detected capacity change from 0 to 4096 [ 135.971254][ T5629] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5627] ioctl(4, LOOP_CLR_FD [pid 5620] <... sendfile resumed>) = 1048576 [pid 5627] <... ioctl resumed>) = 0 [pid 5620] open(NULL, O_RDONLY [pid 5627] close(4 [pid 5620] <... open resumed>) = -1 EFAULT (Bad address) [pid 5627] <... close resumed>) = 0 [pid 5620] exit_group(0 [pid 5627] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5620] <... exit_group resumed>) = ? [pid 5627] <... open resumed>) = 4 [pid 5627] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5620] +++ exited with 0 +++ [pid 5627] ftruncate(5, 33587195) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5620, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5627] sendfile(4, 5, NULL, 281474978811909 [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 136.001272][ T5628] NILFS (loop4): invalid segment: Checksum error in segment payload [ 136.009314][ T5628] NILFS (loop4): trying rollback from an earlier position [pid 5063] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./45/binderfs") = 0 [ 136.082268][ T5628] NILFS (loop4): recovery complete [pid 5063] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5628] <... mount resumed>) = 0 [pid 5628] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5628] chdir("./file0") = 0 [pid 5628] ioctl(4, LOOP_CLR_FD) = 0 [pid 5628] close(4 [pid 5065] <... umount2 resumed>) = 0 [pid 5628] <... close resumed>) = 0 [pid 5628] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5065] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5628] <... open resumed>) = 4 [ 136.134751][ T5630] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5628] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5628] <... open resumed>) = 5 [pid 5065] lstat("./44/file0", [pid 5628] ftruncate(5, 33587195 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5628] <... ftruncate resumed>) = 0 [pid 5065] umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5628] sendfile(4, 5, NULL, 281474978811909 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./44/file0") = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./44") = 0 [pid 5065] mkdir("./45", 0777) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5631 ./strace-static-x86_64: Process 5631 attached [pid 5063] <... umount2 resumed>) = 0 [pid 5631] chdir("./45") = 0 [pid 5631] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5631] setpgid(0, 0) = 0 [pid 5631] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5631] write(3, "1000", 4) = 4 [pid 5631] close(3) = 0 [pid 5063] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5631] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5631] <... symlink resumed>) = 0 [pid 5063] lstat("./45/file0", [pid 5631] memfd_create("syzkaller", 0 [pid 5063] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5631] <... memfd_create resumed>) = 3 [pid 5621] <... sendfile resumed>) = 1048576 [pid 5063] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5631] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5621] open(NULL, O_RDONLY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5631] <... mmap resumed>) = 0x7ff395729000 [pid 5621] <... open resumed>) = -1 EFAULT (Bad address) [pid 5063] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5621] exit_group(0) = ? [pid 5063] <... openat resumed>) = 4 [pid 5621] +++ exited with 0 +++ [pid 5063] fstat(4, [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5621, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5063] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5623] <... sendfile resumed>) = 1048576 [pid 5063] getdents64(4, [pid 5623] open(NULL, O_RDONLY [pid 5063] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5623] <... open resumed>) = -1 EFAULT (Bad address) [pid 5063] getdents64(4, [pid 5623] exit_group(0 [pid 5063] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5623] <... exit_group resumed>) = ? [pid 5067] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... close resumed>) = 0 [pid 5623] +++ exited with 0 +++ [pid 5067] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] rmdir("./45/file0" [pid 5067] <... openat resumed>) = 3 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5623, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- [pid 5067] fstat(3, [pid 5063] <... rmdir resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, [pid 5067] getdents64(3, [pid 5064] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] close(3 [pid 5067] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... openat resumed>) = 3 [pid 5063] rmdir("./45" [pid 5067] lstat("./45/binderfs", [pid 5064] fstat(3, [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5067] unlink("./45/binderfs" [pid 5064] getdents64(3, [pid 5067] <... unlink resumed>) = 0 [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] mkdir("./46", 0777) = 0 [pid 5067] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 3 [pid 5064] lstat("./45/binderfs", [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] unlink("./45/binderfs" [pid 5063] close(3 [pid 5064] <... unlink resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5064] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5632 ./strace-static-x86_64: Process 5632 attached [pid 5631] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5632] chdir("./46") = 0 [pid 5632] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5632] setpgid(0, 0) = 0 [pid 5632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5632] write(3, "1000", 4) = 4 [pid 5632] close(3) = 0 [pid 5632] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5632] memfd_create("syzkaller", 0) = 3 [pid 5632] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5632] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5631] <... write resumed>) = 2097152 [pid 5631] munmap(0x7ff395729000, 2097152) = 0 [pid 5631] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5631] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... umount2 resumed>) = 0 [pid 5067] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = 0 [pid 5631] <... ioctl resumed>) = 0 [pid 5067] <... openat resumed>) = 4 [pid 5067] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5631] close(3 [pid 5067] getdents64(4, [pid 5632] <... write resumed>) = 2097152 [pid 5631] <... close resumed>) = 0 [pid 5067] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [ 136.523211][ T5631] loop3: detected capacity change from 0 to 4096 [pid 5632] munmap(0x7ff395729000, 2097152 [pid 5631] mkdir("./file0", 0777 [pid 5067] close(4 [pid 5632] <... munmap resumed>) = 0 [pid 5631] <... mkdir resumed>) = 0 [pid 5631] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5067] <... close resumed>) = 0 [pid 5632] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5067] rmdir("./45/file0" [pid 5632] <... openat resumed>) = 4 [pid 5632] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... rmdir resumed>) = 0 [pid 5064] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5064] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... close resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] rmdir("./45" [pid 5064] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... rmdir resumed>) = 0 [pid 5064] <... openat resumed>) = 4 [pid 5064] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, [pid 5067] mkdir("./46", 0777 [pid 5064] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5064] close(4 [pid 5632] <... ioctl resumed>) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5064] <... close resumed>) = 0 [pid 5632] close(3 [pid 5067] <... openat resumed>) = 3 [pid 5064] rmdir("./45/file0" [pid 5632] <... close resumed>) = 0 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5064] <... rmdir resumed>) = 0 [pid 5632] mkdir("./file0", 0777 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] getdents64(3, [pid 5632] <... mkdir resumed>) = 0 [pid 5067] close(3 [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] <... close resumed>) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./45") = 0 [pid 5064] mkdir("./46", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5632] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [ 136.596550][ T5631] NILFS (loop3): invalid segment: Checksum error in segment payload [ 136.607975][ T5632] loop1: detected capacity change from 0 to 4096 [pid 5064] close(3./strace-static-x86_64: Process 5633 attached ) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5634 [pid 5633] chdir("./46" [pid 5067] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5633 ./strace-static-x86_64: Process 5634 attached [pid 5634] chdir("./46") = 0 [pid 5634] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5634] setpgid(0, 0) = 0 [pid 5633] <... chdir resumed>) = 0 [pid 5634] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5633] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5634] <... openat resumed>) = 3 [pid 5633] <... prctl resumed>) = 0 [ 136.655799][ T5631] NILFS (loop3): trying rollback from an earlier position [ 136.658458][ T5632] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5634] write(3, "1000", 4) = 4 [pid 5634] close(3) = 0 [pid 5634] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5634] memfd_create("syzkaller", 0 [pid 5633] setpgid(0, 0 [pid 5634] <... memfd_create resumed>) = 3 [pid 5633] <... setpgid resumed>) = 0 [pid 5634] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5633] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5634] <... mmap resumed>) = 0x7ff395729000 [pid 5633] <... openat resumed>) = 3 [pid 5633] write(3, "1000", 4 [pid 5631] <... mount resumed>) = 0 [pid 5634] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5633] <... write resumed>) = 4 [pid 5631] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5634] <... write resumed>) = 2097152 [pid 5633] close(3 [pid 5631] <... openat resumed>) = 3 [pid 5633] <... close resumed>) = 0 [pid 5631] chdir("./file0" [pid 5633] symlink("/dev/binderfs", "./binderfs" [pid 5631] <... chdir resumed>) = 0 [pid 5633] <... symlink resumed>) = 0 [pid 5631] ioctl(4, LOOP_CLR_FD [pid 5633] memfd_create("syzkaller", 0 [pid 5631] <... ioctl resumed>) = 0 [pid 5633] <... memfd_create resumed>) = 3 [ 136.706476][ T5631] NILFS (loop3): recovery complete [ 136.725159][ T5635] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.732881][ T5632] NILFS (loop1): trying rollback from an earlier position [pid 5631] close(4 [pid 5633] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5631] <... close resumed>) = 0 [pid 5633] <... mmap resumed>) = 0x7ff395729000 [pid 5631] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5631] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5631] ftruncate(5, 33587195) = 0 [ 136.776075][ T5632] NILFS (loop1): recovery complete [pid 5631] sendfile(4, 5, NULL, 281474978811909 [pid 5632] <... mount resumed>) = 0 [pid 5632] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5632] chdir("./file0") = 0 [pid 5633] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5632] ioctl(4, LOOP_CLR_FD) = 0 [pid 5634] munmap(0x7ff395729000, 2097152 [pid 5632] close(4) = 0 [pid 5634] <... munmap resumed>) = 0 [pid 5634] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5634] ioctl(4, LOOP_SET_FD, 3 [pid 5632] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5632] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5632] ftruncate(5, 33587195) = 0 [pid 5632] sendfile(4, 5, NULL, 281474978811909 [pid 5633] <... write resumed>) = 2097152 [pid 5634] <... ioctl resumed>) = 0 [pid 5634] close(3) = 0 [pid 5633] munmap(0x7ff395729000, 2097152 [pid 5634] mkdir("./file0", 0777 [pid 5633] <... munmap resumed>) = 0 [pid 5634] <... mkdir resumed>) = 0 [pid 5633] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5634] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5633] <... openat resumed>) = 4 [ 136.814604][ T5636] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.853821][ T5634] loop2: detected capacity change from 0 to 4096 [pid 5633] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5633] close(3) = 0 [pid 5633] mkdir("./file0", 0777) = 0 [ 136.896191][ T5633] loop5: detected capacity change from 0 to 4096 [ 136.908672][ T5634] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5633] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5628] <... sendfile resumed>) = 1048576 [pid 5628] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5628] exit_group(0) = ? [pid 5628] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5628, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5066] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5066] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] lstat("./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] unlink("./46/binderfs") = 0 [ 136.949128][ T5634] NILFS (loop2): trying rollback from an earlier position [ 136.973745][ T5633] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5066] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5627] <... sendfile resumed>) = 1048576 [pid 5627] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5627] exit_group(0) = ? [pid 5627] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5627, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5062] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] lstat("./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 136.995928][ T5633] NILFS (loop5): trying rollback from an earlier position [ 137.012949][ T5634] NILFS (loop2): recovery complete [pid 5062] unlink("./45/binderfs") = 0 [pid 5062] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5634] <... mount resumed>) = 0 [pid 5634] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5634] chdir("./file0") = 0 [pid 5634] ioctl(4, LOOP_CLR_FD) = 0 [pid 5634] close(4) = 0 [pid 5634] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5634] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5066] <... umount2 resumed>) = 0 [pid 5634] <... open resumed>) = 5 [pid 5634] ftruncate(5, 33587195 [pid 5066] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5634] <... ftruncate resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5634] sendfile(4, 5, NULL, 281474978811909 [ 137.065679][ T5637] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.079690][ T5633] NILFS (loop5): recovery complete [pid 5066] lstat("./46/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5066] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5066] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5633] <... mount resumed>) = 0 [pid 5066] close(4 [pid 5633] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5066] <... close resumed>) = 0 [pid 5633] <... openat resumed>) = 3 [pid 5066] rmdir("./46/file0" [pid 5633] chdir("./file0") = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5633] ioctl(4, LOOP_CLR_FD [pid 5066] getdents64(3, [pid 5633] <... ioctl resumed>) = 0 [pid 5633] close(4 [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5633] <... close resumed>) = 0 [pid 5633] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5633] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5066] close(3 [pid 5633] ftruncate(5, 33587195 [pid 5066] <... close resumed>) = 0 [pid 5633] <... ftruncate resumed>) = 0 [pid 5066] rmdir("./46" [pid 5633] sendfile(4, 5, NULL, 281474978811909 [pid 5066] <... rmdir resumed>) = 0 [pid 5066] mkdir("./47", 0777) = 0 [ 137.154051][ T5638] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5639 ./strace-static-x86_64: Process 5639 attached [pid 5062] <... umount2 resumed>) = 0 [pid 5639] chdir("./47" [pid 5062] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5639] <... chdir resumed>) = 0 [pid 5639] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5639] <... prctl resumed>) = 0 [pid 5062] lstat("./45/file0", [pid 5639] setpgid(0, 0 [pid 5062] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5639] <... setpgid resumed>) = 0 [pid 5062] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5639] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5639] <... openat resumed>) = 3 [pid 5062] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5639] write(3, "1000", 4) = 4 [pid 5062] <... openat resumed>) = 4 [pid 5639] close(3 [pid 5062] fstat(4, [pid 5639] <... close resumed>) = 0 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5639] symlink("/dev/binderfs", "./binderfs" [pid 5062] getdents64(4, [pid 5639] <... symlink resumed>) = 0 [pid 5639] memfd_create("syzkaller", 0 [pid 5062] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5639] <... memfd_create resumed>) = 3 [pid 5639] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] getdents64(4, [pid 5639] <... mmap resumed>) = 0x7ff395729000 [pid 5062] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./45/file0") = 0 [pid 5062] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./45") = 0 [pid 5062] mkdir("./46", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5639] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5640 ./strace-static-x86_64: Process 5640 attached [pid 5640] chdir("./46") = 0 [pid 5640] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5640] setpgid(0, 0) = 0 [pid 5640] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5640] write(3, "1000", 4) = 4 [pid 5640] close(3) = 0 [pid 5640] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5639] <... write resumed>) = 2097152 [pid 5639] munmap(0x7ff395729000, 2097152) = 0 [pid 5639] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5639] ioctl(4, LOOP_SET_FD, 3 [pid 5640] memfd_create("syzkaller", 0) = 3 [pid 5640] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5639] <... ioctl resumed>) = 0 [pid 5639] close(3) = 0 [pid 5639] mkdir("./file0", 0777) = 0 [ 137.428594][ T5639] loop4: detected capacity change from 0 to 4096 [pid 5639] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [ 137.498307][ T5639] NILFS (loop4): invalid segment: Checksum error in segment payload [ 137.509784][ T5639] NILFS (loop4): trying rollback from an earlier position [ 137.552389][ T5639] NILFS (loop4): recovery complete [pid 5640] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5639] <... mount resumed>) = 0 [pid 5639] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5639] chdir("./file0") = 0 [pid 5639] ioctl(4, LOOP_CLR_FD) = 0 [pid 5639] close(4) = 0 [pid 5639] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5639] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5639] ftruncate(5, 33587195 [pid 5640] <... write resumed>) = 2097152 [pid 5639] <... ftruncate resumed>) = 0 [pid 5639] sendfile(4, 5, NULL, 281474978811909 [pid 5640] munmap(0x7ff395729000, 2097152) = 0 [pid 5640] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 137.577483][ T5641] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5640] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5640] close(3) = 0 [pid 5640] mkdir("./file0", 0777) = 0 [ 137.629785][ T5640] loop0: detected capacity change from 0 to 4096 [pid 5640] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5632] <... sendfile resumed>) = 1048576 [pid 5632] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5632] exit_group(0) = ? [pid 5631] <... sendfile resumed>) = 1048576 [pid 5631] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5632] +++ exited with 0 +++ [pid 5631] exit_group(0) = ? [pid 5631] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5632, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5631, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 5063] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, [pid 5065] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... openat resumed>) = 3 [pid 5063] lstat("./46/binderfs", [pid 5065] fstat(3, [pid 5063] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] unlink("./46/binderfs" [pid 5065] getdents64(3, [pid 5063] <... unlink resumed>) = 0 [ 137.712639][ T5640] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./45/binderfs") = 0 [ 137.761786][ T5640] NILFS (loop0): trying rollback from an earlier position [ 137.828405][ T5640] NILFS (loop0): recovery complete [pid 5065] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5640] <... mount resumed>) = 0 [pid 5640] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5640] chdir("./file0") = 0 [pid 5640] ioctl(4, LOOP_CLR_FD) = 0 [pid 5640] close(4) = 0 [pid 5640] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5640] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5640] ftruncate(5, 33587195) = 0 [ 137.870051][ T5642] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5640] sendfile(4, 5, NULL, 281474978811909 [pid 5065] <... umount2 resumed>) = 0 [pid 5065] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./46/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./46/file0") = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5634] <... sendfile resumed>) = 1048576 [pid 5065] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] close(3 [pid 5634] open(NULL, O_RDONLY [pid 5065] <... openat resumed>) = 4 [pid 5063] <... close resumed>) = 0 [pid 5634] <... open resumed>) = -1 EFAULT (Bad address) [pid 5065] fstat(4, [pid 5634] exit_group(0 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5634] <... exit_group resumed>) = ? [pid 5065] getdents64(4, [pid 5063] rmdir("./46" [pid 5634] +++ exited with 0 +++ [pid 5065] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, [pid 5063] <... rmdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5634, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5063] mkdir("./47", 0777 [pid 5065] close(4 [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 5065] <... close resumed>) = 0 [pid 5064] <... restart_syscall resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5065] rmdir("./45/file0" [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, [pid 5064] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5065] close(3 [pid 5064] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5633] <... sendfile resumed>) = 1048576 [pid 5065] <... close resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5063] close(3 [pid 5633] open(NULL, O_RDONLY [pid 5065] rmdir("./45" [pid 5064] fstat(3, [pid 5063] <... close resumed>) = 0 [pid 5633] <... open resumed>) = -1 EFAULT (Bad address) [pid 5065] <... rmdir resumed>) = 0 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5633] exit_group(0 [pid 5065] mkdir("./46", 0777 [pid 5064] getdents64(3, [pid 5633] <... exit_group resumed>) = ? [pid 5065] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5643 attached [pid 5633] +++ exited with 0 +++ [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5643 [pid 5643] chdir("./47" [pid 5065] <... openat resumed>) = 3 [pid 5064] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5643] <... chdir resumed>) = 0 [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5633, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5643] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5067] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5064] lstat("./46/binderfs", [pid 5643] <... prctl resumed>) = 0 [pid 5065] close(3 [pid 5064] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5643] setpgid(0, 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... close resumed>) = 0 [pid 5064] unlink("./46/binderfs" [pid 5643] <... setpgid resumed>) = 0 [pid 5067] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... unlink resumed>) = 0 [pid 5643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... openat resumed>) = 3 [pid 5064] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5643] <... openat resumed>) = 3 [pid 5067] fstat(3, [pid 5065] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5644 [pid 5643] write(3, "1000", 4 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5643] <... write resumed>) = 4 [pid 5067] getdents64(3, [pid 5643] close(3 [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5643] <... close resumed>) = 0 [pid 5067] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5644 attached [pid 5643] symlink("/dev/binderfs", "./binderfs" [pid 5644] chdir("./46" [pid 5643] <... symlink resumed>) = 0 [pid 5644] <... chdir resumed>) = 0 [pid 5643] memfd_create("syzkaller", 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5644] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5643] <... memfd_create resumed>) = 3 [pid 5644] <... prctl resumed>) = 0 [pid 5643] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5644] setpgid(0, 0 [pid 5643] <... mmap resumed>) = 0x7ff395729000 [pid 5644] <... setpgid resumed>) = 0 [pid 5067] lstat("./46/binderfs", [pid 5644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5644] <... openat resumed>) = 3 [pid 5644] write(3, "1000", 4) = 4 [pid 5644] close(3 [pid 5067] unlink("./46/binderfs" [pid 5644] <... close resumed>) = 0 [pid 5644] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... unlink resumed>) = 0 [pid 5644] <... symlink resumed>) = 0 [pid 5067] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5644] memfd_create("syzkaller", 0) = 3 [pid 5644] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5643] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5644] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5643] <... write resumed>) = 2097152 [pid 5643] munmap(0x7ff395729000, 2097152) = 0 [pid 5643] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5643] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5644] <... write resumed>) = 2097152 [pid 5064] lstat("./46/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5644] munmap(0x7ff395729000, 2097152 [pid 5064] <... openat resumed>) = 4 [pid 5644] <... munmap resumed>) = 0 [pid 5064] fstat(4, [pid 5644] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5644] ioctl(4, LOOP_SET_FD, 3 [pid 5064] getdents64(4, [pid 5067] <... umount2 resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5643] close(3 [pid 5064] getdents64(4, [pid 5643] <... close resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5643] mkdir("./file0", 0777 [pid 5064] close(4 [pid 5643] <... mkdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5643] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5064] rmdir("./46/file0" [pid 5067] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... rmdir resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] getdents64(3, [pid 5067] lstat("./46/file0", [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] close(3 [pid 5067] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... close resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] rmdir("./46" [pid 5067] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... rmdir resumed>) = 0 [pid 5067] <... openat resumed>) = 4 [pid 5064] mkdir("./47", 0777 [pid 5067] fstat(4, [pid 5064] <... mkdir resumed>) = 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 138.340306][ T5643] loop1: detected capacity change from 0 to 4096 [ 138.377137][ T5644] loop3: detected capacity change from 0 to 4096 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5644] <... ioctl resumed>) = 0 [pid 5067] getdents64(4, [pid 5644] close(3 [pid 5639] <... sendfile resumed>) = 1048576 [pid 5067] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] <... openat resumed>) = 3 [pid 5639] open(NULL, O_RDONLY [pid 5067] getdents64(4, [pid 5639] <... open resumed>) = -1 EFAULT (Bad address) [pid 5067] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5639] exit_group(0 [pid 5067] close(4 [pid 5639] <... exit_group resumed>) = ? [pid 5067] <... close resumed>) = 0 [pid 5639] +++ exited with 0 +++ [pid 5067] rmdir("./46/file0") = 0 [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5639, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5067] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3 [pid 5066] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... close resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] rmdir("./46" [pid 5066] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5644] <... close resumed>) = 0 [pid 5067] <... rmdir resumed>) = 0 [pid 5066] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5067] mkdir("./47", 0777 [pid 5066] fstat(3, [pid 5644] mkdir("./file0", 0777 [pid 5067] <... mkdir resumed>) = 0 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5066] getdents64(3, [pid 5067] <... openat resumed>) = 3 [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5066] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] close(3 [pid 5066] lstat("./47/binderfs", [pid 5067] <... close resumed>) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] unlink("./47/binderfs" [pid 5644] <... mkdir resumed>) = 0 [pid 5066] <... unlink resumed>) = 0 [pid 5067] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5645 [pid 5066] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5644] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5645 attached [pid 5645] chdir("./47") = 0 [pid 5064] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5646 [pid 5645] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5645] setpgid(0, 0) = 0 [pid 5645] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5645] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 5646 attached [pid 5645] close(3 [pid 5646] chdir("./47" [pid 5645] <... close resumed>) = 0 [pid 5646] <... chdir resumed>) = 0 [pid 5646] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5645] symlink("/dev/binderfs", "./binderfs" [pid 5646] <... prctl resumed>) = 0 [pid 5645] <... symlink resumed>) = 0 [pid 5646] setpgid(0, 0 [pid 5645] memfd_create("syzkaller", 0 [pid 5646] <... setpgid resumed>) = 0 [pid 5645] <... memfd_create resumed>) = 3 [pid 5646] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5645] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5646] <... openat resumed>) = 3 [pid 5645] <... mmap resumed>) = 0x7ff395729000 [ 138.426632][ T5643] NILFS (loop1): invalid segment: Checksum error in segment payload [ 138.435121][ T5643] NILFS (loop1): trying rollback from an earlier position [pid 5646] write(3, "1000", 4) = 4 [pid 5646] close(3) = 0 [pid 5646] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5646] memfd_create("syzkaller", 0) = 3 [pid 5646] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5645] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 138.502793][ T5644] NILFS (loop3): invalid segment: Checksum error in segment payload [ 138.518510][ T5643] NILFS (loop1): recovery complete [ 138.540784][ T5644] NILFS (loop3): trying rollback from an earlier position [pid 5646] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5643] <... mount resumed>) = 0 [pid 5643] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5643] chdir("./file0") = 0 [pid 5643] ioctl(4, LOOP_CLR_FD) = 0 [pid 5643] close(4) = 0 [pid 5643] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5643] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5643] ftruncate(5, 33587195) = 0 [pid 5643] sendfile(4, 5, NULL, 281474978811909 [pid 5640] <... sendfile resumed>) = 1048576 [ 138.556677][ T5647] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.586953][ T5644] NILFS (loop3): recovery complete [pid 5646] <... write resumed>) = 2097152 [pid 5640] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5644] <... mount resumed>) = 0 [pid 5640] exit_group(0 [pid 5066] <... umount2 resumed>) = 0 [pid 5645] <... write resumed>) = 2097152 [pid 5640] <... exit_group resumed>) = ? [pid 5646] munmap(0x7ff395729000, 2097152 [pid 5645] munmap(0x7ff395729000, 2097152 [pid 5644] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5640] +++ exited with 0 +++ [pid 5066] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5646] <... munmap resumed>) = 0 [pid 5644] <... openat resumed>) = 3 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5640, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5646] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5644] chdir("./file0" [pid 5066] lstat("./47/file0", [pid 5646] <... openat resumed>) = 4 [pid 5644] <... chdir resumed>) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5646] ioctl(4, LOOP_SET_FD, 3 [pid 5644] ioctl(4, LOOP_CLR_FD [pid 5066] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5646] <... ioctl resumed>) = 0 [pid 5644] <... ioctl resumed>) = 0 [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5646] close(3 [pid 5645] <... munmap resumed>) = 0 [pid 5644] close(4 [pid 5066] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5646] <... close resumed>) = 0 [pid 5644] <... close resumed>) = 0 [pid 5066] <... openat resumed>) = 4 [pid 5646] mkdir("./file0", 0777 [pid 5644] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5066] fstat(4, [pid 5646] <... mkdir resumed>) = 0 [pid 5644] <... open resumed>) = 4 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5646] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5644] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5066] getdents64(4, [pid 5062] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5645] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5644] <... open resumed>) = 5 [pid 5066] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5645] <... openat resumed>) = 4 [pid 5644] ftruncate(5, 33587195 [pid 5066] getdents64(4, [pid 5062] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5645] ioctl(4, LOOP_SET_FD, 3 [pid 5644] <... ftruncate resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [ 138.642546][ T5648] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.673096][ T5646] loop2: detected capacity change from 0 to 4096 [pid 5644] sendfile(4, 5, NULL, 281474978811909 [pid 5066] close(4 [pid 5062] <... openat resumed>) = 3 [pid 5066] <... close resumed>) = 0 [pid 5066] rmdir("./47/file0") = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5066] close(3) = 0 [pid 5066] rmdir("./47" [pid 5062] fstat(3, [pid 5645] <... ioctl resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5066] mkdir("./48", 0777 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5645] close(3 [pid 5066] <... mkdir resumed>) = 0 [pid 5645] <... close resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] getdents64(3, [pid 5645] mkdir("./file0", 0777 [pid 5066] <... openat resumed>) = 3 [pid 5645] <... mkdir resumed>) = 0 [ 138.699958][ T5645] loop5: detected capacity change from 0 to 4096 [pid 5066] ioctl(3, LOOP_CLR_FD [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5645] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5066] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5649 [pid 5062] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5649 attached [pid 5649] chdir("./48" [pid 5062] lstat("./46/binderfs", [pid 5649] <... chdir resumed>) = 0 [pid 5062] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5649] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5649] setpgid(0, 0) = 0 [pid 5649] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5649] write(3, "1000", 4) = 4 [pid 5649] close(3) = 0 [pid 5649] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5062] unlink("./46/binderfs" [pid 5649] memfd_create("syzkaller", 0) = 3 [pid 5062] <... unlink resumed>) = 0 [pid 5649] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5649] <... mmap resumed>) = 0x7ff395729000 [ 138.745557][ T5646] NILFS (loop2): invalid segment: Checksum error in segment payload [ 138.769190][ T5645] NILFS (loop5): invalid segment: Checksum error in segment payload [ 138.791282][ T5646] NILFS (loop2): trying rollback from an earlier position [ 138.810199][ T5645] NILFS (loop5): trying rollback from an earlier position [pid 5649] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5646] <... mount resumed>) = 0 [pid 5646] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5646] chdir("./file0") = 0 [pid 5646] ioctl(4, LOOP_CLR_FD) = 0 [pid 5649] <... write resumed>) = 2097152 [pid 5646] close(4) = 0 [pid 5646] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5646] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5646] ftruncate(5, 33587195) = 0 [ 138.874153][ T5646] NILFS (loop2): recovery complete [ 138.881274][ T5645] NILFS (loop5): recovery complete [ 138.889672][ T5650] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5646] sendfile(4, 5, NULL, 281474978811909 [pid 5649] munmap(0x7ff395729000, 2097152) = 0 [pid 5649] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5645] <... mount resumed>) = 0 [pid 5649] ioctl(4, LOOP_SET_FD, 3 [pid 5645] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] <... umount2 resumed>) = 0 [pid 5649] <... ioctl resumed>) = 0 [pid 5645] chdir("./file0" [pid 5649] close(3 [pid 5645] <... chdir resumed>) = 0 [pid 5062] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5649] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 138.936850][ T5651] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.952372][ T5649] loop4: detected capacity change from 0 to 4096 [pid 5649] mkdir("./file0", 0777 [pid 5062] lstat("./46/file0", [pid 5649] <... mkdir resumed>) = 0 [pid 5645] ioctl(4, LOOP_CLR_FD [pid 5062] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5649] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5062] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5645] <... ioctl resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5645] close(4 [pid 5062] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5645] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5062] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] getdents64(4, [pid 5645] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./46/file0") = 0 [pid 5062] getdents64(3, [pid 5645] <... open resumed>) = 4 [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5645] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] close(3 [pid 5645] <... open resumed>) = 5 [pid 5062] <... close resumed>) = 0 [pid 5645] ftruncate(5, 33587195 [pid 5062] rmdir("./46" [pid 5645] <... ftruncate resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5645] sendfile(4, 5, NULL, 281474978811909 [pid 5062] mkdir("./47", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5652 [ 139.037522][ T5649] NILFS (loop4): invalid segment: Checksum error in segment payload [ 139.054664][ T5649] NILFS (loop4): trying rollback from an earlier position ./strace-static-x86_64: Process 5652 attached [pid 5652] chdir("./47") = 0 [pid 5652] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5652] setpgid(0, 0) = 0 [pid 5652] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5652] write(3, "1000", 4) = 4 [pid 5652] close(3) = 0 [pid 5652] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5652] memfd_create("syzkaller", 0) = 3 [pid 5652] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [ 139.145566][ T5649] NILFS (loop4): recovery complete [pid 5652] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5649] <... mount resumed>) = 0 [pid 5649] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5649] chdir("./file0") = 0 [pid 5649] ioctl(4, LOOP_CLR_FD) = 0 [pid 5649] close(4) = 0 [pid 5649] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5649] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5649] ftruncate(5, 33587195) = 0 [ 139.190579][ T5653] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5649] sendfile(4, 5, NULL, 281474978811909 [pid 5652] <... write resumed>) = 2097152 [pid 5652] munmap(0x7ff395729000, 2097152) = 0 [pid 5652] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5652] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5652] close(3) = 0 [pid 5652] mkdir("./file0", 0777) = 0 [ 139.294417][ T5652] loop0: detected capacity change from 0 to 4096 [ 139.364517][ T5652] NILFS (loop0): invalid segment: Checksum error in segment payload [ 139.392614][ T5652] NILFS (loop0): trying rollback from an earlier position [pid 5652] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5643] <... sendfile resumed>) = 1048576 [pid 5643] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5643] exit_group(0) = ? [pid 5643] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5643, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5063] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 139.451608][ T5652] NILFS (loop0): recovery complete [pid 5063] getdents64(3, [pid 5652] <... mount resumed>) = 0 [pid 5063] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5652] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5652] <... openat resumed>) = 3 [pid 5063] lstat("./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./47/binderfs" [pid 5652] chdir("./file0" [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5652] <... chdir resumed>) = 0 [pid 5652] ioctl(4, LOOP_CLR_FD) = 0 [pid 5652] close(4) = 0 [pid 5652] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5652] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [ 139.500640][ T5654] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5652] ftruncate(5, 33587195) = 0 [pid 5652] sendfile(4, 5, NULL, 281474978811909 [pid 5644] <... sendfile resumed>) = 1048576 [pid 5644] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5644] exit_group(0) = ? [pid 5644] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5644, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5065] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] lstat("./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5065] unlink("./46/binderfs") = 0 [pid 5065] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./47/file0") = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./47") = 0 [pid 5063] mkdir("./48", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5655 ./strace-static-x86_64: Process 5655 attached [pid 5655] chdir("./48") = 0 [pid 5655] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5655] setpgid(0, 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5655] <... setpgid resumed>) = 0 [pid 5655] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5655] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5655] write(3, "1000", 4 [pid 5065] lstat("./46/file0", [pid 5655] <... write resumed>) = 4 [pid 5065] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5655] close(3 [pid 5065] umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5655] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5655] symlink("/dev/binderfs", "./binderfs" [pid 5065] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5655] <... symlink resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5655] memfd_create("syzkaller", 0 [pid 5065] fstat(4, [pid 5655] <... memfd_create resumed>) = 3 [pid 5065] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5655] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] getdents64(4, [pid 5655] <... mmap resumed>) = 0x7ff395729000 [pid 5065] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./46/file0") = 0 [pid 5065] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./46") = 0 [pid 5065] mkdir("./47", 0777) = 0 [pid 5646] <... sendfile resumed>) = 1048576 [pid 5065] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5646] open(NULL, O_RDONLY [pid 5065] <... openat resumed>) = 3 [pid 5646] <... open resumed>) = -1 EFAULT (Bad address) [pid 5065] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5656 ./strace-static-x86_64: Process 5656 attached [pid 5656] chdir("./47") = 0 [pid 5646] exit_group(0) = ? [pid 5656] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5646] +++ exited with 0 +++ [pid 5656] setpgid(0, 0) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5646, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5656] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 5656] <... openat resumed>) = 3 [pid 5064] <... restart_syscall resumed>) = 0 [pid 5656] write(3, "1000", 4) = 4 [pid 5655] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5656] close(3 [pid 5064] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5656] <... close resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5656] symlink("/dev/binderfs", "./binderfs" [pid 5064] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5656] <... symlink resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5656] memfd_create("syzkaller", 0 [pid 5064] fstat(3, [pid 5656] <... memfd_create resumed>) = 3 [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5656] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] getdents64(3, [pid 5656] <... mmap resumed>) = 0x7ff395729000 [pid 5064] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./47/binderfs") = 0 [pid 5064] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5656] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5655] <... write resumed>) = 2097152 [pid 5655] munmap(0x7ff395729000, 2097152) = 0 [pid 5655] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5655] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5655] close(3 [pid 5645] <... sendfile resumed>) = 1048576 [pid 5655] <... close resumed>) = 0 [pid 5645] open(NULL, O_RDONLY [pid 5655] mkdir("./file0", 0777 [pid 5645] <... open resumed>) = -1 EFAULT (Bad address) [pid 5655] <... mkdir resumed>) = 0 [pid 5645] exit_group(0 [pid 5655] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5645] <... exit_group resumed>) = ? [ 140.090745][ T5655] loop1: detected capacity change from 0 to 4096 [pid 5064] <... umount2 resumed>) = 0 [pid 5645] +++ exited with 0 +++ [pid 5067] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5645, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5067] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5067] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] getdents64(3, [pid 5064] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5649] <... sendfile resumed>) = 1048576 [pid 5067] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5656] <... write resumed>) = 2097152 [pid 5067] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] lstat("./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] unlink("./47/binderfs") = 0 [pid 5067] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5656] munmap(0x7ff395729000, 2097152 [pid 5649] open(NULL, O_RDONLY [pid 5064] lstat("./47/file0", [pid 5656] <... munmap resumed>) = 0 [pid 5656] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5649] <... open resumed>) = -1 EFAULT (Bad address) [pid 5064] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5649] exit_group(0 [pid 5656] <... openat resumed>) = 4 [pid 5649] <... exit_group resumed>) = ? [pid 5064] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5656] ioctl(4, LOOP_SET_FD, 3 [pid 5649] +++ exited with 0 +++ [ 140.138692][ T5655] NILFS (loop1): invalid segment: Checksum error in segment payload [ 140.151232][ T5655] NILFS (loop1): trying rollback from an earlier position [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5649, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- [pid 5066] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5066] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5066] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5066] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5656] <... ioctl resumed>) = 0 [pid 5066] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5656] close(3 [pid 5066] lstat("./48/binderfs", [pid 5656] <... close resumed>) = 0 [pid 5066] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] <... openat resumed>) = 4 [pid 5656] mkdir("./file0", 0777 [pid 5066] unlink("./48/binderfs") = 0 [pid 5064] fstat(4, [pid 5656] <... mkdir resumed>) = 0 [pid 5066] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5656] mount("/dev/loop3", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5064] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./47/file0") = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [ 140.181161][ T5656] loop3: detected capacity change from 0 to 4096 [ 140.201417][ T5655] NILFS (loop1): recovery complete [pid 5064] close(3 [pid 5655] <... mount resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./47" [pid 5655] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5064] <... rmdir resumed>) = 0 [pid 5655] chdir("./file0" [pid 5064] mkdir("./48", 0777 [pid 5655] <... chdir resumed>) = 0 [pid 5655] ioctl(4, LOOP_CLR_FD [pid 5064] <... mkdir resumed>) = 0 [pid 5655] <... ioctl resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5655] close(4) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5655] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5064] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5064] close(3 [pid 5655] <... open resumed>) = 4 [pid 5064] <... close resumed>) = 0 [pid 5655] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5655] <... open resumed>) = 5 [pid 5655] ftruncate(5, 33587195) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5658 [ 140.221479][ T5657] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.232723][ T5656] NILFS (loop3): invalid segment: Checksum error in segment payload [ 140.243296][ T5656] NILFS (loop3): trying rollback from an earlier position [pid 5655] sendfile(4, 5, NULL, 281474978811909./strace-static-x86_64: Process 5658 attached [pid 5658] chdir("./48") = 0 [pid 5658] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5067] <... umount2 resumed>) = 0 [pid 5658] setpgid(0, 0 [pid 5067] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5658] <... setpgid resumed>) = 0 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5658] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5067] lstat("./47/file0", [pid 5658] <... openat resumed>) = 3 [pid 5067] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5658] write(3, "1000", 4 [pid 5067] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5658] <... write resumed>) = 4 [pid 5067] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5658] close(3 [pid 5067] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5658] <... close resumed>) = 0 [pid 5658] symlink("/dev/binderfs", "./binderfs" [pid 5067] <... openat resumed>) = 4 [pid 5658] <... symlink resumed>) = 0 [pid 5067] fstat(4, [pid 5658] memfd_create("syzkaller", 0 [pid 5067] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5658] <... memfd_create resumed>) = 3 [pid 5067] getdents64(4, [pid 5658] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5658] <... mmap resumed>) = 0x7ff395729000 [pid 5067] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5067] close(4) = 0 [pid 5067] rmdir("./47/file0") = 0 [pid 5067] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5067] close(3) = 0 [pid 5067] rmdir("./47") = 0 [ 140.318622][ T5656] NILFS (loop3): recovery complete [pid 5067] mkdir("./48", 0777 [pid 5656] <... mount resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5656] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5656] <... openat resumed>) = 3 [pid 5067] <... openat resumed>) = 3 [pid 5656] chdir("./file0" [pid 5067] ioctl(3, LOOP_CLR_FD [pid 5656] <... chdir resumed>) = 0 [pid 5067] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] <... umount2 resumed>) = 0 [pid 5656] ioctl(4, LOOP_CLR_FD [pid 5067] close(3 [pid 5066] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5656] <... ioctl resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5658] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5656] close(4 [pid 5652] <... sendfile resumed>) = 1048576 [pid 5067] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5656] <... close resumed>) = 0 [pid 5652] open(NULL, O_RDONLY [pid 5656] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5652] <... open resumed>) = -1 EFAULT (Bad address) [pid 5066] lstat("./48/file0", [pid 5656] <... open resumed>) = 4 ./strace-static-x86_64: Process 5660 attached [pid 5656] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5652] exit_group(0 [pid 5067] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5660 [pid 5066] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5660] chdir("./48" [pid 5658] <... write resumed>) = 2097152 [pid 5656] <... open resumed>) = 5 [pid 5652] <... exit_group resumed>) = ? [pid 5066] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5660] <... chdir resumed>) = 0 [pid 5658] munmap(0x7ff395729000, 2097152 [pid 5656] ftruncate(5, 33587195 [pid 5652] +++ exited with 0 +++ [pid 5066] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5660] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5658] <... munmap resumed>) = 0 [pid 5656] <... ftruncate resumed>) = 0 [pid 5066] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5660] <... prctl resumed>) = 0 [ 140.366328][ T5659] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5658] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5656] sendfile(4, 5, NULL, 281474978811909 [pid 5066] <... openat resumed>) = 4 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5652, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5660] setpgid(0, 0 [pid 5658] <... openat resumed>) = 4 [pid 5066] fstat(4, [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 5660] <... setpgid resumed>) = 0 [pid 5658] ioctl(4, LOOP_SET_FD, 3 [pid 5066] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5062] <... restart_syscall resumed>) = 0 [pid 5660] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5066] getdents64(4, [pid 5660] <... openat resumed>) = 3 [pid 5658] <... ioctl resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5660] write(3, "1000", 4 [pid 5658] close(3 [pid 5066] getdents64(4, [pid 5062] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5660] <... write resumed>) = 4 [pid 5658] <... close resumed>) = 0 [pid 5066] <... getdents64 resumed>0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5660] close(3 [pid 5658] mkdir("./file0", 0777 [pid 5066] close(4 [pid 5062] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5660] <... close resumed>) = 0 [pid 5658] <... mkdir resumed>) = 0 [pid 5066] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5660] symlink("/dev/binderfs", "./binderfs" [pid 5658] mount("/dev/loop2", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5066] rmdir("./48/file0" [pid 5062] fstat(3, [pid 5660] <... symlink resumed>) = 0 [pid 5066] <... rmdir resumed>) = 0 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5660] memfd_create("syzkaller", 0 [pid 5066] getdents64(3, [pid 5062] getdents64(3, [pid 5660] <... memfd_create resumed>) = 3 [pid 5066] <... getdents64 resumed>0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5062] <... getdents64 resumed>0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5660] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5066] close(3 [pid 5062] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5660] <... mmap resumed>) = 0x7ff395729000 [pid 5066] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5066] rmdir("./48" [pid 5062] lstat("./47/binderfs", [pid 5066] <... rmdir resumed>) = 0 [pid 5062] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5066] mkdir("./49", 0777 [pid 5062] unlink("./47/binderfs" [pid 5066] <... mkdir resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 5066] openat(AT_FDCWD, "/dev/loop4", O_RDWR [ 140.419497][ T5658] loop2: detected capacity change from 0 to 4096 [pid 5062] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5660] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5066] <... openat resumed>) = 3 [pid 5066] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5066] close(3) = 0 [pid 5066] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5661 ./strace-static-x86_64: Process 5661 attached [pid 5661] chdir("./49") = 0 [pid 5661] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5661] setpgid(0, 0) = 0 [pid 5661] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5661] write(3, "1000", 4) = 4 [pid 5661] close(3) = 0 [pid 5661] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5661] memfd_create("syzkaller", 0) = 3 [pid 5661] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [pid 5660] <... write resumed>) = 2097152 [pid 5661] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5660] munmap(0x7ff395729000, 2097152) = 0 [pid 5660] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 140.531759][ T5658] NILFS (loop2): invalid segment: Checksum error in segment payload [ 140.539969][ T5658] NILFS (loop2): trying rollback from an earlier position [ 140.549824][ T5659] ------------[ cut here ]------------ [pid 5660] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5660] close(3) = 0 [pid 5660] mkdir("./file0", 0777) = 0 [ 140.593376][ T5660] loop5: detected capacity change from 0 to 4096 [ 140.598029][ T5659] WARNING: CPU: 0 PID: 5659 at fs/nilfs2/btree.c:2282 nilfs_btree_assign+0xa9f/0xd10 [ 140.616209][ T5659] Modules linked in: [pid 5660] mount("/dev/loop5", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5062] <... umount2 resumed>) = 0 [pid 5661] <... write resumed>) = 2097152 [pid 5062] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5661] munmap(0x7ff395729000, 2097152 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 140.648117][ T5659] CPU: 0 PID: 5659 Comm: segctord Not tainted 6.2.0-rc7-syzkaller-00231-g711e9a4d52bf #0 [ 140.658444][ T5659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 140.670568][ T5658] NILFS (loop2): recovery complete [ 140.675292][ T5659] RIP: 0010:nilfs_btree_assign+0xa9f/0xd10 [ 140.680096][ T5660] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5661] <... munmap resumed>) = 0 [pid 5062] lstat("./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5661] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5661] <... openat resumed>) = 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5661] ioctl(4, LOOP_SET_FD, 3 [pid 5062] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5661] <... ioctl resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5658] <... mount resumed>) = 0 [pid 5658] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5661] close(3 [pid 5658] <... openat resumed>) = 3 [pid 5062] fstat(4, [pid 5658] chdir("./file0") = 0 [pid 5658] ioctl(4, LOOP_CLR_FD) = 0 [ 140.682420][ T5659] Code: 00 0f 85 81 02 00 00 44 89 f0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 1d 90 3b fe 4c 8b 7c 24 38 eb a6 e8 11 90 3b fe <0f> 0b 41 be fe ff ff ff eb 97 44 89 f1 80 e1 07 80 c1 03 38 c1 0f [ 140.703029][ T5660] NILFS (loop5): trying rollback from an earlier position [ 140.719913][ T5661] loop4: detected capacity change from 0 to 4096 [ 140.723996][ T5662] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.729317][ T5659] RSP: 0018:ffffc90004a4f580 EFLAGS: 00010293 [pid 5658] close(4) = 0 [pid 5658] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5661] <... close resumed>) = 0 [pid 5658] <... open resumed>) = 4 [pid 5062] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5658] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5658] ftruncate(5, 33587195 [pid 5661] mkdir("./file0", 0777 [pid 5658] <... ftruncate resumed>) = 0 [pid 5062] getdents64(4, [pid 5658] sendfile(4, 5, NULL, 281474978811909 [pid 5062] <... getdents64 resumed>0x555557401660 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./47/file0" [pid 5661] <... mkdir resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5661] mount("/dev/loop4", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5062] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [ 140.743349][ T5659] RAX: ffffffff8350423f RBX: ffff88806fc94690 RCX: ffff8880264b57c0 [ 140.751735][ T5659] RDX: 0000000000000000 RSI: 00000000fffffffe RDI: 00000000fffffffe [ 140.759986][ T5659] RBP: ffffc90004a4f6b0 R08: ffffffff83503b9b R09: ffffed100de30b23 [ 140.771005][ T5659] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 140.779051][ T5659] R13: ffff88807cf2f800 R14: 00000000fffffffe R15: 1ffff92000949ec0 [ 140.787638][ T5659] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [pid 5062] close(3) = 0 [pid 5062] rmdir("./47") = 0 [pid 5062] mkdir("./48", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 140.800915][ T5659] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.820392][ T5660] NILFS (loop5): recovery complete [ 140.823676][ T5661] NILFS (loop4): invalid segment: Checksum error in segment payload [ 140.827182][ T5659] CR2: 0000555557409668 CR3: 000000000cc8e000 CR4: 00000000003506f0 [pid 5062] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5660] <... mount resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x5555573f85d0) = 5664 [pid 5660] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5660] chdir("./file0") = 0 [pid 5660] ioctl(4, LOOP_CLR_FD) = 0 [pid 5660] close(4) = 0 [pid 5660] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5660] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5660] ftruncate(5, 33587195) = 0 [ 140.846095][ T5661] NILFS (loop4): trying rollback from an earlier position [ 140.852804][ T5659] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 140.864547][ T5659] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 140.873094][ T5663] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5660] sendfile(4, 5, NULL, 281474978811909./strace-static-x86_64: Process 5664 attached [pid 5664] chdir("./48") = 0 [pid 5664] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5664] setpgid(0, 0) = 0 [pid 5664] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5664] write(3, "1000", 4) = 4 [pid 5664] close(3) = 0 [pid 5664] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5664] memfd_create("syzkaller", 0) = 3 [pid 5664] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [ 140.919182][ T5659] Call Trace: [ 140.920993][ T5661] NILFS (loop4): recovery complete [ 140.942431][ T5659] [ 140.945448][ T5659] ? read_lock_is_recursive+0x20/0x20 [pid 5661] <... mount resumed>) = 0 [pid 5661] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5661] chdir("./file0") = 0 [pid 5661] ioctl(4, LOOP_CLR_FD) = 0 [pid 5661] close(4) = 0 [pid 5661] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5661] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [ 140.970257][ T5665] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5661] ftruncate(5, 33587195) = 0 [pid 5661] sendfile(4, 5, NULL, 281474978811909 [ 141.020012][ T5659] ? nilfs_btree_lookup_dirty_buffers+0xfd0/0xfd0 [ 141.057695][ T5659] ? __up_read+0x670/0x670 [pid 5664] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [ 141.088092][ T5659] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 141.126494][ T5659] nilfs_bmap_assign+0x8b/0x160 [pid 5664] munmap(0x7ff395729000, 2097152) = 0 [pid 5664] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5664] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5664] close(3) = 0 [pid 5664] mkdir("./file0", 0777) = 0 [pid 5664] mount("/dev/loop0", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5655] <... sendfile resumed>) = 1048576 [ 141.167144][ T5659] nilfs_segctor_do_construct+0x3a11/0x6f70 [ 141.179887][ T5664] loop0: detected capacity change from 0 to 4096 [ 141.191086][ T5659] ? nilfs_transaction_unlock+0x210/0x210 [pid 5655] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5655] exit_group(0) = ? [pid 5655] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5655, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=15 /* 0.15 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5063] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5063] unlink("./48/binderfs") = 0 [ 141.227603][ T5659] ? nilfs_segctor_confirm+0x24c/0x2d0 [ 141.256126][ T5664] NILFS (loop0): invalid segment: Checksum error in segment payload [ 141.272123][ T5659] ? rcu_read_lock_sched_held+0x8d/0x130 [ 141.291485][ T5659] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 141.310715][ T5664] NILFS (loop0): trying rollback from an earlier position [ 141.319423][ T5659] ? nilfs_segctor_confirm+0x24c/0x2d0 [ 141.338467][ T5659] ? __lock_acquire+0x1f80/0x1f80 [ 141.361574][ T5664] NILFS (loop0): recovery complete [ 141.372535][ T5659] ? do_raw_spin_unlock+0x13b/0x8b0 [ 141.379646][ T5659] ? _raw_spin_unlock+0x28/0x40 [pid 5063] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5664] <... mount resumed>) = 0 [pid 5664] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5664] chdir("./file0") = 0 [pid 5664] ioctl(4, LOOP_CLR_FD) = 0 [pid 5664] close(4) = 0 [pid 5664] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5664] open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 5664] ftruncate(5, 33587195) = 0 [ 141.406020][ T5666] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.433966][ T5659] ? nilfs_segctor_confirm+0x24c/0x2d0 [ 141.439584][ T5659] nilfs_segctor_construct+0x145/0x8c0 [pid 5664] sendfile(4, 5, NULL, 281474978811909 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] lstat("./48/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5063] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 141.506363][ T5659] nilfs_segctor_thread+0x53a/0x1140 [pid 5063] getdents64(4, 0x555557401660 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557401660 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./48/file0") = 0 [pid 5063] getdents64(3, 0x5555573f9620 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./48") = 0 [pid 5063] mkdir("./49", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5063] close(3) = 0 [ 141.538315][ T5659] ? nilfs_construction_timeout+0x40/0x40 [ 141.568310][ T5659] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 141.578028][ T5659] ? _raw_spin_unlock+0x40/0x40 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555573f85d0) = 5667 ./strace-static-x86_64: Process 5667 attached [pid 5667] chdir("./49") = 0 [pid 5667] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5667] setpgid(0, 0) = 0 [pid 5667] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5667] write(3, "1000", 4) = 4 [ 141.619246][ T5659] ? wake_bit_function+0x220/0x220 [pid 5667] close(3) = 0 [pid 5667] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5667] memfd_create("syzkaller", 0) = 3 [pid 5667] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff395729000 [ 141.657998][ T5659] ? _raw_spin_unlock+0x40/0x40 [ 141.673191][ T5659] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [pid 5667] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5658] <... sendfile resumed>) = 1048576 [pid 5658] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5658] exit_group(0) = ? [pid 5658] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5658, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5064] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 141.704203][ T5659] ? __kthread_parkme+0x164/0x1c0 [ 141.712345][ T5659] kthread+0x270/0x300 [ 141.723953][ T5659] ? nilfs_construction_timeout+0x40/0x40 [pid 5064] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5660] <... sendfile resumed>) = 1048576 [pid 5064] <... openat resumed>) = 3 [pid 5064] fstat(3, [pid 5660] open(NULL, O_RDONLY [pid 5064] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5064] getdents64(3, 0x5555573f9620 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] lstat("./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5064] unlink("./48/binderfs") = 0 [pid 5064] umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5667] <... write resumed>) = 2097152 [pid 5667] munmap(0x7ff395729000, 2097152) = 0 [ 141.750514][ T5659] ? kthread_blkcg+0xd0/0xd0 [ 141.756227][ T5659] ret_from_fork+0x1f/0x30 [ 141.761498][ T5659] [ 141.764800][ T5659] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 141.772105][ T5659] CPU: 0 PID: 5659 Comm: segctord Not tainted 6.2.0-rc7-syzkaller-00231-g711e9a4d52bf #0 [ 141.782038][ T5659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 141.792110][ T5659] Call Trace: [ 141.795406][ T5659] [ 141.798349][ T5659] dump_stack_lvl+0x1e7/0x2d0 [pid 5667] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5667] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5667] close(3) = 0 [pid 5667] mkdir("./file0", 0777) = 0 [ 141.803055][ T5659] ? nf_tcp_handle_invalid+0x640/0x640 [ 141.807905][ T5667] loop1: detected capacity change from 0 to 4096 [ 141.814858][ T5659] ? panic+0x770/0x770 [ 141.818961][ T5659] ? vscnprintf+0x5d/0x80 [ 141.823322][ T5659] panic+0x31c/0x770 [ 141.827248][ T5659] ? __warn+0x16c/0x5f0 [ 141.831430][ T5659] ? memcpy_page_flushcache+0x100/0x100 [ 141.837027][ T5659] ? ret_from_fork+0x1f/0x30 [ 141.841669][ T5659] __warn+0x419/0x5f0 [ 141.845682][ T5659] ? nilfs_btree_assign+0xa9f/0xd10 [pid 5667] mount("/dev/loop1", "./file0", "nilfs2", MS_NOATIME|MS_LAZYTIME, "" [pid 5661] <... sendfile resumed>) = 1048576 [pid 5661] open(NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5661] exit_group(0) = ? [pid 5661] +++ exited with 0 +++ [pid 5066] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5661, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5660] <... open resumed>) = -1 EFAULT (Bad address) [pid 5660] exit_group(0) = ? [ 141.850923][ T5659] ? nilfs_btree_assign+0xa9f/0xd10 [ 141.856165][ T5659] report_bug+0x1bd/0x2d0 [ 141.860546][ T5659] handle_bug+0x3d/0x70 [ 141.863569][ T5667] NILFS (loop1): invalid segment: Checksum error in segment payload [ 141.863593][ T5667] NILFS (loop1): trying rollback from an earlier position [ 141.879922][ T5659] exc_invalid_op+0x1a/0x50 [ 141.884473][ T5659] asm_exc_invalid_op+0x1a/0x20 [ 141.889537][ T5659] RIP: 0010:nilfs_btree_assign+0xa9f/0xd10 [ 141.893378][ T5667] NILFS (loop1): recovery complete [ 141.900526][ T5659] Code: 00 0f 85 81 02 00 00 44 89 f0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 1d 90 3b fe 4c 8b 7c 24 38 eb a6 e8 11 90 3b fe <0f> 0b 41 be fe ff ff ff eb 97 44 89 f1 80 e1 07 80 c1 03 38 c1 0f [ 141.920168][ T5659] RSP: 0018:ffffc90004a4f580 EFLAGS: 00010293 [ 141.926272][ T5659] RAX: ffffffff8350423f RBX: ffff88806fc94690 RCX: ffff8880264b57c0 [ 141.934421][ T5659] RDX: 0000000000000000 RSI: 00000000fffffffe RDI: 00000000fffffffe [ 141.942417][ T5659] RBP: ffffc90004a4f6b0 R08: ffffffff83503b9b R09: ffffed100de30b23 [ 141.950417][ T5659] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 141.958398][ T5659] R13: ffff88807cf2f800 R14: 00000000fffffffe R15: 1ffff92000949ec0 [ 141.966384][ T5659] ? nilfs_btree_assign+0x3fb/0xd10 [ 141.971604][ T5659] ? nilfs_btree_assign+0xa9f/0xd10 [ 141.976839][ T5659] ? read_lock_is_recursive+0x20/0x20 [ 141.982230][ T5659] ? nilfs_btree_lookup_dirty_buffers+0xfd0/0xfd0 [ 141.988654][ T5659] ? __up_read+0x670/0x670 [ 141.993087][ T5659] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 141.998741][ T5659] nilfs_bmap_assign+0x8b/0x160 [ 142.003606][ T5659] nilfs_segctor_do_construct+0x3a11/0x6f70 [ 142.009556][ T5659] ? nilfs_transaction_unlock+0x210/0x210 [ 142.015290][ T5659] ? nilfs_segctor_confirm+0x24c/0x2d0 [ 142.020746][ T5659] ? rcu_read_lock_sched_held+0x8d/0x130 [ 142.026381][ T5659] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 142.032383][ T5659] ? nilfs_segctor_confirm+0x24c/0x2d0 [ 142.037837][ T5659] ? __lock_acquire+0x1f80/0x1f80 [ 142.042906][ T5659] ? do_raw_spin_unlock+0x13b/0x8b0 [ 142.048106][ T5659] ? _raw_spin_unlock+0x28/0x40 [ 142.052953][ T5659] ? nilfs_segctor_confirm+0x24c/0x2d0 [ 142.058411][ T5659] nilfs_segctor_construct+0x145/0x8c0 [ 142.063891][ T5659] nilfs_segctor_thread+0x53a/0x1140 [ 142.069219][ T5659] ? nilfs_construction_timeout+0x40/0x40 [ 142.074938][ T5659] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 142.080857][ T5659] ? _raw_spin_unlock+0x40/0x40 [ 142.085722][ T5659] ? wake_bit_function+0x220/0x220 [ 142.090839][ T5659] ? _raw_spin_unlock+0x40/0x40 [ 142.095796][ T5659] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 142.101801][ T5659] ? __kthread_parkme+0x164/0x1c0 [ 142.106856][ T5659] kthread+0x270/0x300 [ 142.110933][ T5659] ? nilfs_construction_timeout+0x40/0x40 [ 142.116662][ T5659] ? kthread_blkcg+0xd0/0xd0 [ 142.121260][ T5659] ret_from_fork+0x1f/0x30 [ 142.125697][ T5659] [ 142.128778][ T5659] Kernel Offset: disabled [ 142.133201][ T5659] Rebooting in 86400 seconds..