./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3231015500 <...> Warning: Permanently added '10.128.1.20' (ECDSA) to the list of known hosts. execve("./syz-executor3231015500", ["./syz-executor3231015500"], 0x7fff96ab8a80 /* 10 vars */) = 0 brk(NULL) = 0x555556f7b000 brk(0x555556f7bd00) = 0x555556f7bd00 arch_prctl(ARCH_SET_FS, 0x555556f7b3c0) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3231015500", 4096) = 28 brk(0x555556f9cd00) = 0x555556f9cd00 brk(0x555556f9d000) = 0x555556f9d000 mprotect(0x7f18d2c52000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7f18d2ba0060, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f18d2ba1ad0}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7f18d2ba0060, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f18d2ba1ad0}, NULL, 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 4997 attached , child_tidptr=0x555556f7b690) = 4997 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] getpid() = 4997 [pid 4997] mkdir("./syzkaller.nNIKB3", 0700 [pid 4996] <... clone resumed>, child_tidptr=0x555556f7b690) = 4998 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 4999 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 4998 attached [pid 4996] <... clone resumed>, child_tidptr=0x555556f7b690) = 5000 [pid 4997] chmod("./syzkaller.nNIKB3", 0777 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] <... chmod resumed>) = 0 [pid 4997] chdir("./syzkaller.nNIKB3") = 0 [pid 4997] mkdir("./0", 0777 [pid 4996] <... clone resumed>, child_tidptr=0x555556f7b690) = 5001 [pid 4996] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 4999 attached [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4998] getpid( [pid 4996] <... clone resumed>, child_tidptr=0x555556f7b690) = 5002 ./strace-static-x86_64: Process 5001 attached [pid 4997] <... openat resumed>) = 3 [pid 4998] <... getpid resumed>) = 4998 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] mkdir("./syzkaller.0hbtF7", 0700./strace-static-x86_64: Process 5000 attached [pid 4997] close(3 [pid 5001] getpid() = 5001 [pid 5001] mkdir("./syzkaller.ti1jIl", 0700 [pid 4998] <... mkdir resumed>) = 0 [pid 5000] getpid() = 5000 [pid 5000] mkdir("./syzkaller.2OhuIi", 0700 [pid 5001] <... mkdir resumed>) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 5000] chmod("./syzkaller.2OhuIi", 0777) = 0 [pid 5000] chdir("./syzkaller.2OhuIi") = 0 [pid 5001] chmod("./syzkaller.ti1jIl", 0777 [pid 5000] mkdir("./0", 0777 [pid 5001] <... chmod resumed>) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 5001] chdir("./syzkaller.ti1jIl") = 0 [pid 5001] mkdir("./0", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4997] <... close resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4999] getpid( [pid 4998] chmod("./syzkaller.0hbtF7", 0777 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... openat resumed>) = 3 [pid 4999] <... getpid resumed>) = 4999 [pid 4998] <... chmod resumed>) = 0 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5003 [pid 4999] mkdir("./syzkaller.CMUY9a", 0700 [pid 4998] chdir("./syzkaller.0hbtF7" [pid 5000] <... openat resumed>) = 3 [pid 4999] <... mkdir resumed>) = 0 [pid 4999] chmod("./syzkaller.CMUY9a", 0777 [pid 4998] <... chdir resumed>) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4998] mkdir("./0", 0777 [pid 4999] <... chmod resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... mkdir resumed>) = 0 [pid 4999] chdir("./syzkaller.CMUY9a" [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4999] <... chdir resumed>) = 0 [pid 5000] close(3 [pid 4998] <... openat resumed>) = 3 [pid 5000] <... close resumed>) = 0 [pid 4999] mkdir("./0", 0777 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... mkdir resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5002 attached [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] getpid( [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... getpid resumed>) = 5002 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] mkdir("./syzkaller.JfBJyr", 0700 [pid 4999] <... openat resumed>) = 3 [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5004 ./strace-static-x86_64: Process 5003 attached [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5003] chdir("./0") = 0 [pid 5003] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... mkdir resumed>) = 0 [pid 4999] close(3) = 0 [pid 5003] <... prctl resumed>) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5006 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... clone resumed>, child_tidptr=0x555556f7b690) = 5005 [pid 5003] setpgid(0, 0) = 0 [pid 5003] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5002] chmod("./syzkaller.JfBJyr", 0777./strace-static-x86_64: Process 5005 attached [pid 5003] write(3, "1000", 4 [pid 5002] <... chmod resumed>) = 0 [pid 5005] chdir("./0") = 0 [pid 5003] <... write resumed>) = 4 [pid 5002] chdir("./syzkaller.JfBJyr" [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5007 ./strace-static-x86_64: Process 5007 attached [pid 5003] close(3 [pid 5002] <... chdir resumed>) = 0 [pid 5003] <... close resumed>) = 0 [pid 5003] symlink("/dev/binderfs", "./binderfs" [pid 5002] mkdir("./0", 0777 [pid 5007] chdir("./0" [pid 5005] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] <... symlink resumed>) = 0 [pid 5005] <... prctl resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5004 attached [pid 5007] <... chdir resumed>) = 0 [pid 5005] setpgid(0, 0 [pid 5003] memfd_create("syzkaller", 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5005] <... setpgid resumed>) = 0 [pid 5004] chdir("./0" [pid 5005] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5004] <... chdir resumed>) = 0 [pid 5005] <... openat resumed>) = 3 [pid 5004] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5005] write(3, "1000", 4 [pid 5004] <... prctl resumed>) = 0 [pid 5005] <... write resumed>) = 4 [pid 5004] setpgid(0, 0 [pid 5005] close(3 [pid 5004] <... setpgid resumed>) = 0 [pid 5005] <... close resumed>) = 0 [pid 5005] symlink("/dev/binderfs", "./binderfs" [pid 5004] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5006 attached [pid 5007] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5005] <... symlink resumed>) = 0 [pid 5004] <... openat resumed>) = 3 [pid 5003] <... memfd_create resumed>) = 3 [pid 5002] <... openat resumed>) = 3 [pid 5007] <... prctl resumed>) = 0 [pid 5006] chdir("./0" [pid 5005] memfd_create("syzkaller", 0 [pid 5004] write(3, "1000", 4 [pid 5003] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5007] setpgid(0, 0 [pid 5006] <... chdir resumed>) = 0 [pid 5005] <... memfd_create resumed>) = 3 [pid 5004] <... write resumed>) = 4 [pid 5003] <... mmap resumed>) = 0x7f18ca796000 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5007] <... setpgid resumed>) = 0 [pid 5006] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5005] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5004] close(3 [pid 5007] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5006] <... prctl resumed>) = 0 [pid 5004] <... close resumed>) = 0 [pid 5002] close(3 [pid 5007] <... openat resumed>) = 3 [pid 5006] setpgid(0, 0 [pid 5004] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... close resumed>) = 0 [pid 5007] write(3, "1000", 4 [pid 5006] <... setpgid resumed>) = 0 [pid 5004] <... symlink resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5007] <... write resumed>) = 4 [pid 5006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5004] memfd_create("syzkaller", 0) = 3 [pid 5007] close(3 [pid 5004] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5006] <... openat resumed>) = 3 [pid 5007] <... close resumed>) = 0 [pid 5006] write(3, "1000", 4 [pid 5004] <... mmap resumed>) = 0x7f18ca796000 [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5009 ./strace-static-x86_64: Process 5009 attached [pid 5007] symlink("/dev/binderfs", "./binderfs" [pid 5006] <... write resumed>) = 4 [pid 5003] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5007] <... symlink resumed>) = 0 [pid 5006] close(3 [pid 5007] memfd_create("syzkaller", 0) = 3 [pid 5006] <... close resumed>) = 0 [pid 5007] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5006] symlink("/dev/binderfs", "./binderfs" [pid 5007] <... mmap resumed>) = 0x7f18ca796000 [pid 5006] <... symlink resumed>) = 0 [pid 5006] memfd_create("syzkaller", 0) = 3 [ 71.982362][ T5003] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5003 'syz-executor323' [pid 5006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5004] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5009] chdir("./0") = 0 [pid 5009] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5009] setpgid(0, 0) = 0 [pid 5009] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5009] write(3, "1000", 4) = 4 [pid 5009] close(3) = 0 [pid 5009] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5009] memfd_create("syzkaller", 0) = 3 [pid 5009] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5004] <... write resumed>) = 2097152 [pid 5004] munmap(0x7f18ca796000, 2097152) = 0 [pid 5004] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5004] ioctl(4, LOOP_SET_FD, 3 [pid 5005] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5004] <... ioctl resumed>) = 0 [pid 5006] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5007] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5004] close(3) = 0 [pid 5004] mkdir("./file1", 0777 [pid 5003] <... write resumed>) = 2097152 [pid 5004] <... mkdir resumed>) = 0 [pid 5004] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5003] munmap(0x7f18ca796000, 2097152 [pid 5009] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5003] <... munmap resumed>) = 0 [pid 5003] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 72.104574][ T5004] loop3: detected capacity change from 0 to 4096 [pid 5003] ioctl(4, LOOP_SET_FD, 3 [pid 5006] <... write resumed>) = 2097152 [pid 5005] <... write resumed>) = 2097152 [pid 5005] munmap(0x7f18ca796000, 2097152 [pid 5007] <... write resumed>) = 2097152 [pid 5005] <... munmap resumed>) = 0 [pid 5003] <... ioctl resumed>) = 0 [pid 5007] munmap(0x7f18ca796000, 2097152 [pid 5005] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5003] close(3 [pid 5007] <... munmap resumed>) = 0 [pid 5005] <... openat resumed>) = 4 [pid 5003] <... close resumed>) = 0 [pid 5007] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5005] ioctl(4, LOOP_SET_FD, 3 [ 72.159062][ T5003] loop0: detected capacity change from 0 to 4096 [ 72.195274][ T5004] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5003] mkdir("./file1", 0777 [pid 5009] <... write resumed>) = 2097152 [pid 5007] <... openat resumed>) = 4 [pid 5003] <... mkdir resumed>) = 0 [pid 5003] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5009] munmap(0x7f18ca796000, 2097152 [pid 5007] ioctl(4, LOOP_SET_FD, 3 [pid 5006] munmap(0x7f18ca796000, 2097152 [pid 5009] <... munmap resumed>) = 0 [pid 5005] <... ioctl resumed>) = 0 [pid 5006] <... munmap resumed>) = 0 [pid 5006] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5009] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5007] <... ioctl resumed>) = 0 [pid 5006] <... openat resumed>) = 4 [pid 5005] close(3 [pid 5009] <... openat resumed>) = 4 [pid 5007] close(3 [pid 5006] ioctl(4, LOOP_SET_FD, 3 [pid 5005] <... close resumed>) = 0 [pid 5009] ioctl(4, LOOP_SET_FD, 3 [pid 5007] <... close resumed>) = 0 [ 72.211994][ T5005] loop4: detected capacity change from 0 to 4096 [ 72.225180][ T5007] loop2: detected capacity change from 0 to 4096 [ 72.237550][ T5006] loop1: detected capacity change from 0 to 4096 [ 72.245965][ T5003] NILFS (loop0): invalid segment: Checksum error in segment payload [ 72.255895][ T5009] loop5: detected capacity change from 0 to 4096 [pid 5005] mkdir("./file1", 0777 [pid 5009] <... ioctl resumed>) = 0 [pid 5007] mkdir("./file1", 0777 [pid 5005] <... mkdir resumed>) = 0 [pid 5007] <... mkdir resumed>) = 0 [pid 5005] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5009] close(3 [pid 5007] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5006] <... ioctl resumed>) = 0 [pid 5006] close(3) = 0 [pid 5006] mkdir("./file1", 0777) = 0 [pid 5006] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5009] <... close resumed>) = 0 [pid 5009] mkdir("./file1", 0777) = 0 [ 72.256675][ T5004] NILFS (loop3): trying rollback from an earlier position [ 72.279617][ T5003] NILFS (loop0): trying rollback from an earlier position [ 72.284789][ T5005] NILFS (loop4): invalid segment: Checksum error in segment payload [ 72.304078][ T5006] NILFS (loop1): invalid segment: Checksum error in segment payload [ 72.305315][ T5007] NILFS (loop2): invalid segment: Checksum error in segment payload [ 72.319376][ T5006] NILFS (loop1): trying rollback from an earlier position [ 72.335959][ T5004] NILFS (loop3): recovery complete [ 72.341958][ T5003] NILFS (loop0): recovery complete [ 72.348391][ T5005] NILFS (loop4): trying rollback from an earlier position [pid 5009] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5003] <... mount resumed>) = 0 [pid 5003] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5003] chdir("./file1") = 0 [pid 5003] ioctl(4, LOOP_CLR_FD) = 0 [pid 5003] close(4) = 0 [pid 5003] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [ 72.350058][ T5009] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5004] <... mount resumed>) = 0 [pid 5004] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5003] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5004] chdir("./file1" [pid 5003] <... open resumed>) = 5 [pid 5004] <... chdir resumed>) = 0 [pid 5004] ioctl(4, LOOP_CLR_FD [pid 5003] ftruncate(5, 33587195 [pid 5004] <... ioctl resumed>) = 0 [ 72.392760][ T5011] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.405851][ T5010] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.411032][ T5007] NILFS (loop2): trying rollback from an earlier position [ 72.417025][ T5006] NILFS (loop1): recovery complete [ 72.424892][ T5009] NILFS (loop5): trying rollback from an earlier position [pid 5004] close(4 [pid 5003] <... ftruncate resumed>) = 0 [pid 5004] <... close resumed>) = 0 [pid 5003] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5004] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5003] <... open resumed>) = 6 [pid 5003] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5004] <... open resumed>) = 4 [pid 5003] sendfile(6, 7, NULL, 281474978811909 [pid 5004] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5004] ftruncate(5, 33587195) = 0 [pid 5004] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5004] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 72.443202][ T5005] NILFS (loop4): recovery complete [pid 5004] sendfile(6, 7, NULL, 281474978811909 [pid 5005] <... mount resumed>) = 0 [pid 5005] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5005] chdir("./file1") = 0 [pid 5005] ioctl(4, LOOP_CLR_FD [pid 5006] <... mount resumed>) = 0 [pid 5005] <... ioctl resumed>) = 0 [pid 5005] close(4) = 0 [pid 5005] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5006] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5005] <... open resumed>) = 4 [pid 5006] chdir("./file1" [pid 5005] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5006] <... chdir resumed>) = 0 [pid 5005] <... open resumed>) = 5 [pid 5006] ioctl(4, LOOP_CLR_FD [pid 5005] ftruncate(5, 33587195 [pid 5006] <... ioctl resumed>) = 0 [ 72.491313][ T5013] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.516547][ T5014] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.523367][ T5007] NILFS (loop2): recovery complete [pid 5005] <... ftruncate resumed>) = 0 [pid 5005] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5006] close(4 [pid 5005] <... open resumed>) = 6 [pid 5006] <... close resumed>) = 0 [pid 5005] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5006] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5005] <... open resumed>) = 7 [pid 5005] sendfile(6, 7, NULL, 281474978811909 [pid 5006] <... open resumed>) = 4 [ 72.544022][ T5009] NILFS (loop5): recovery complete [pid 5006] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5009] <... mount resumed>) = 0 [pid 5006] ftruncate(5, 33587195 [pid 5009] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5006] <... ftruncate resumed>) = 0 [pid 5009] <... openat resumed>) = 3 [pid 5007] <... mount resumed>) = 0 [pid 5006] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5009] chdir("./file1" [pid 5007] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5006] <... open resumed>) = 6 [pid 5009] <... chdir resumed>) = 0 [pid 5007] <... openat resumed>) = 3 [pid 5006] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5009] ioctl(4, LOOP_CLR_FD [pid 5007] chdir("./file1" [pid 5009] <... ioctl resumed>) = 0 [pid 5007] <... chdir resumed>) = 0 [pid 5006] <... open resumed>) = 7 [pid 5009] close(4 [pid 5007] ioctl(4, LOOP_CLR_FD [pid 5006] sendfile(6, 7, NULL, 281474978811909 [pid 5009] <... close resumed>) = 0 [pid 5007] <... ioctl resumed>) = 0 [pid 5009] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5007] close(4) = 0 [ 72.574140][ T5016] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.597926][ T5017] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5009] <... open resumed>) = 4 [pid 5007] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5009] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5007] <... open resumed>) = 4 [pid 5009] <... open resumed>) = 5 [pid 5007] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5009] ftruncate(5, 33587195 [pid 5007] <... open resumed>) = 5 [pid 5009] <... ftruncate resumed>) = 0 [pid 5007] ftruncate(5, 33587195 [pid 5009] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5007] <... ftruncate resumed>) = 0 [pid 5009] <... open resumed>) = 6 [pid 5007] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5009] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5007] <... open resumed>) = 6 [pid 5009] <... open resumed>) = 7 [pid 5009] sendfile(6, 7, NULL, 281474978811909 [pid 5007] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5007] sendfile(6, 7, NULL, 281474978811909 [pid 5003] <... sendfile resumed>) = 1048576 [pid 5003] exit_group(0) = ? [pid 5003] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5003, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 4997] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4997] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5004] <... sendfile resumed>) = 1048576 [pid 4997] getdents64(3, [pid 5004] exit_group(0 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5004] <... exit_group resumed>) = ? [pid 4997] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./0/binderfs") = 0 [pid 4997] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5004, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5005] <... sendfile resumed>) = 1048576 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5005] exit_group(0 [pid 5000] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5005] <... exit_group resumed>) = ? [pid 5000] <... openat resumed>) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 5005] +++ exited with 0 +++ [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5005, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] lstat("./0/binderfs", [pid 5001] <... openat resumed>) = 3 [pid 5001] fstat(3, [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] unlink("./0/binderfs" [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... unlink resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./0/binderfs") = 0 [pid 5001] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5009] <... sendfile resumed>) = 1048576 [pid 5009] exit_group(0) = ? [pid 5009] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5009, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [pid 5007] <... sendfile resumed>) = 1048576 [pid 5002] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5007] exit_group(0) = ? [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5007] +++ exited with 0 +++ [pid 5002] lstat("./0/binderfs", [pid 5000] <... umount2 resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] unlink("./0/binderfs" [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5007, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5002] <... unlink resumed>) = 0 [pid 4999] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5006] <... sendfile resumed>) = 1048576 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5006] exit_group(0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5006] <... exit_group resumed>) = ? [pid 4999] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./0/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./0/file1") = 0 [pid 4999] unlink("./0/binderfs" [pid 5006] +++ exited with 0 +++ [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... unlink resumed>) = 0 [pid 5000] lstat("./0/file1", [pid 4999] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5006, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5001] rmdir("./0" [pid 5000] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... openat resumed>) = 4 [pid 4998] <... openat resumed>) = 3 [pid 5000] fstat(4, [pid 4998] fstat(3, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, [pid 4998] getdents64(3, [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] getdents64(4, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] lstat("./0/binderfs", [pid 5000] close(4 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... close resumed>) = 0 [pid 4998] unlink("./0/binderfs" [pid 5000] rmdir("./0/file1" [pid 4998] <... unlink resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4998] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] mkdir("./1", 0777 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./0" [pid 5001] <... mkdir resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5000] mkdir("./1", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5000] close(3 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] <... umount2 resumed>) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x555556f7b690) = 5019 [pid 4997] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./0/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 ./strace-static-x86_64: Process 5019 attached [pid 4997] rmdir("./0/file1") = 0 [pid 5019] chdir("./1") = 0 [pid 5019] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4997] getdents64(3, [pid 5019] setpgid(0, 0 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5019] <... setpgid resumed>) = 0 [pid 5019] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4997] close(3) = 0 [pid 4997] rmdir("./0") = 0 [pid 5019] <... openat resumed>) = 3 [pid 5019] write(3, "1000", 4) = 4 [pid 5019] close(3) = 0 [pid 4997] mkdir("./1", 0777 [pid 5019] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5019] memfd_create("syzkaller", 0) = 3 [pid 5019] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4997] <... mkdir resumed>) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5000] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] <... openat resumed>) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5020 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5021 ./strace-static-x86_64: Process 5020 attached [pid 5020] chdir("./1") = 0 [pid 5020] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5020] setpgid(0, 0) = 0 [pid 5020] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5020] write(3, "1000", 4) = 4 [pid 5020] close(3) = 0 [pid 5020] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 5021 attached [pid 5021] chdir("./1" [pid 5020] memfd_create("syzkaller", 0 [pid 5021] <... chdir resumed>) = 0 [pid 5020] <... memfd_create resumed>) = 3 [pid 5021] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5020] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5021] <... prctl resumed>) = 0 [pid 5020] <... mmap resumed>) = 0x7f18ca796000 [pid 5021] setpgid(0, 0) = 0 [pid 5021] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5002] <... umount2 resumed>) = 0 [pid 5021] write(3, "1000", 4) = 4 [pid 5021] close(3) = 0 [pid 5002] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5021] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5021] memfd_create("syzkaller", 0 [pid 5002] lstat("./0/file1", [pid 5021] <... memfd_create resumed>) = 3 [pid 5021] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5021] <... mmap resumed>) = 0x7f18ca796000 [pid 5002] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5019] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] rmdir("./0/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./0") = 0 [pid 5002] mkdir("./1", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 5021] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... close resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5022 [pid 5020] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5022 attached [pid 5022] chdir("./1") = 0 [pid 5022] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5022] setpgid(0, 0) = 0 [pid 5022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5022] write(3, "1000", 4) = 4 [pid 5022] close(3) = 0 [pid 5022] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5022] memfd_create("syzkaller", 0) = 3 [pid 5022] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./0/file1", [pid 5019] <... write resumed>) = 2097152 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5019] munmap(0x7f18ca796000, 2097152 [pid 4999] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5019] <... munmap resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] lstat("./0/file1", [pid 5019] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4999] <... openat resumed>) = 4 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5019] <... openat resumed>) = 4 [pid 4999] fstat(4, [pid 4998] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5019] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5019] <... ioctl resumed>) = 0 [pid 4999] getdents64(4, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] getdents64(4, [pid 4998] <... openat resumed>) = 4 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] fstat(4, [pid 4999] close(4 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] getdents64(4, [pid 4999] rmdir("./0/file1" [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] getdents64(4, [pid 5021] <... write resumed>) = 2097152 [pid 4999] getdents64(3, [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(4 [pid 4999] close(3 [pid 4998] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] rmdir("./0/file1" [pid 5021] munmap(0x7f18ca796000, 2097152 [pid 4999] rmdir("./0" [pid 4998] <... rmdir resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, [pid 5021] <... munmap resumed>) = 0 [pid 4999] mkdir("./1", 0777 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 4998] close(3 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] <... close resumed>) = 0 [pid 5021] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4999] <... openat resumed>) = 3 [pid 4998] rmdir("./0" [pid 5021] <... openat resumed>) = 4 [pid 5019] close(3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4998] <... rmdir resumed>) = 0 [pid 5021] ioctl(4, LOOP_SET_FD, 3 [pid 5019] <... close resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] mkdir("./1", 0777 [pid 5019] mkdir("./file1", 0777 [pid 4999] close(3 [pid 4998] <... mkdir resumed>) = 0 [pid 5019] <... mkdir resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5019] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... openat resumed>) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5023 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5024 [pid 5022] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5020] <... write resumed>) = 2097152 ./strace-static-x86_64: Process 5023 attached ./strace-static-x86_64: Process 5024 attached [pid 5023] chdir("./1" [pid 5020] munmap(0x7f18ca796000, 2097152 [pid 5024] chdir("./1" [pid 5023] <... chdir resumed>) = 0 [pid 5024] <... chdir resumed>) = 0 [pid 5023] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5024] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5023] <... prctl resumed>) = 0 [ 74.153332][ T5019] loop4: detected capacity change from 0 to 4096 [ 74.186403][ T5021] loop0: detected capacity change from 0 to 4096 [pid 5024] <... prctl resumed>) = 0 [pid 5023] setpgid(0, 0 [pid 5021] <... ioctl resumed>) = 0 [pid 5020] <... munmap resumed>) = 0 [pid 5024] setpgid(0, 0 [pid 5023] <... setpgid resumed>) = 0 [pid 5021] close(3 [pid 5024] <... setpgid resumed>) = 0 [pid 5023] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5021] <... close resumed>) = 0 [pid 5020] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5024] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5023] <... openat resumed>) = 3 [pid 5021] mkdir("./file1", 0777 [pid 5020] <... openat resumed>) = 4 [pid 5024] <... openat resumed>) = 3 [pid 5023] write(3, "1000", 4 [pid 5021] <... mkdir resumed>) = 0 [pid 5020] ioctl(4, LOOP_SET_FD, 3 [pid 5024] write(3, "1000", 4 [pid 5023] <... write resumed>) = 4 [pid 5021] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5024] <... write resumed>) = 4 [pid 5023] close(3 [pid 5024] close(3 [pid 5023] <... close resumed>) = 0 [pid 5024] <... close resumed>) = 0 [pid 5023] symlink("/dev/binderfs", "./binderfs" [pid 5024] symlink("/dev/binderfs", "./binderfs" [pid 5023] <... symlink resumed>) = 0 [pid 5024] <... symlink resumed>) = 0 [pid 5023] memfd_create("syzkaller", 0 [pid 5024] memfd_create("syzkaller", 0 [pid 5023] <... memfd_create resumed>) = 3 [pid 5024] <... memfd_create resumed>) = 3 [pid 5023] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5023] <... mmap resumed>) = 0x7f18ca796000 [pid 5024] <... mmap resumed>) = 0x7f18ca796000 [pid 5020] <... ioctl resumed>) = 0 [ 74.214455][ T5019] NILFS (loop4): invalid segment: Checksum error in segment payload [ 74.222760][ T5019] NILFS (loop4): trying rollback from an earlier position [ 74.238544][ T5020] loop3: detected capacity change from 0 to 4096 [pid 5020] close(3) = 0 [pid 5020] mkdir("./file1", 0777 [pid 5022] <... write resumed>) = 2097152 [pid 5020] <... mkdir resumed>) = 0 [pid 5023] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5022] munmap(0x7f18ca796000, 2097152 [pid 5020] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5022] <... munmap resumed>) = 0 [ 74.265207][ T5021] NILFS (loop0): invalid segment: Checksum error in segment payload [ 74.299055][ T5020] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5022] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5024] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5022] <... openat resumed>) = 4 [pid 5022] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5022] close(3) = 0 [pid 5022] mkdir("./file1", 0777) = 0 [ 74.315841][ T5021] NILFS (loop0): trying rollback from an earlier position [ 74.319056][ T5020] NILFS (loop3): trying rollback from an earlier position [ 74.331973][ T5022] loop5: detected capacity change from 0 to 4096 [ 74.346894][ T5019] NILFS (loop4): recovery complete [pid 5022] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5023] <... write resumed>) = 2097152 [pid 5023] munmap(0x7f18ca796000, 2097152) = 0 [pid 5019] <... mount resumed>) = 0 [pid 5024] <... write resumed>) = 2097152 [pid 5023] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5019] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5023] <... openat resumed>) = 4 [pid 5019] <... openat resumed>) = 3 [pid 5023] ioctl(4, LOOP_SET_FD, 3 [ 74.362665][ T5022] NILFS (loop5): invalid segment: Checksum error in segment payload [ 74.374057][ T5025] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.386371][ T5022] NILFS (loop5): trying rollback from an earlier position [ 74.388152][ T5021] NILFS (loop0): recovery complete [ 74.395431][ T5020] NILFS (loop3): recovery complete [pid 5019] chdir("./file1" [pid 5020] <... mount resumed>) = 0 [pid 5019] <... chdir resumed>) = 0 [pid 5020] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5024] munmap(0x7f18ca796000, 2097152) = 0 [pid 5020] <... openat resumed>) = 3 [pid 5019] ioctl(4, LOOP_CLR_FD [pid 5020] chdir("./file1" [pid 5019] <... ioctl resumed>) = 0 [pid 5024] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5022] <... mount resumed>) = 0 [pid 5020] <... chdir resumed>) = 0 [pid 5024] <... openat resumed>) = 4 [pid 5024] ioctl(4, LOOP_SET_FD, 3 [pid 5022] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5020] ioctl(4, LOOP_CLR_FD [pid 5019] close(4 [pid 5023] <... ioctl resumed>) = 0 [pid 5022] <... openat resumed>) = 3 [pid 5020] <... ioctl resumed>) = 0 [pid 5019] <... close resumed>) = 0 [pid 5022] chdir("./file1" [pid 5020] close(4 [pid 5019] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5022] <... chdir resumed>) = 0 [pid 5020] <... close resumed>) = 0 [pid 5022] ioctl(4, LOOP_CLR_FD [pid 5020] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5019] <... open resumed>) = 4 [pid 5022] <... ioctl resumed>) = 0 [pid 5022] close(4 [pid 5020] <... open resumed>) = 4 [ 74.410652][ T5026] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.412529][ T5023] loop2: detected capacity change from 0 to 4096 [ 74.430095][ T5022] NILFS (loop5): recovery complete [ 74.439006][ T5027] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.443796][ T5024] loop1: detected capacity change from 0 to 4096 [pid 5019] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5023] close(3 [pid 5022] <... close resumed>) = 0 [pid 5021] <... mount resumed>) = 0 [pid 5020] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5019] <... open resumed>) = 5 [pid 5023] <... close resumed>) = 0 [pid 5022] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5021] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5020] <... open resumed>) = 5 [pid 5019] ftruncate(5, 33587195 [pid 5023] mkdir("./file1", 0777 [pid 5021] <... openat resumed>) = 3 [pid 5020] ftruncate(5, 33587195 [pid 5019] <... ftruncate resumed>) = 0 [pid 5022] <... open resumed>) = 4 [pid 5021] chdir("./file1" [pid 5023] <... mkdir resumed>) = 0 [pid 5021] <... chdir resumed>) = 0 [pid 5020] <... ftruncate resumed>) = 0 [pid 5019] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5022] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5023] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5021] ioctl(4, LOOP_CLR_FD [pid 5020] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5019] <... open resumed>) = 6 [pid 5022] <... open resumed>) = 5 [pid 5022] ftruncate(5, 33587195 [pid 5021] <... ioctl resumed>) = 0 [pid 5020] <... open resumed>) = 6 [pid 5019] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5022] <... ftruncate resumed>) = 0 [pid 5021] close(4 [pid 5020] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5019] <... open resumed>) = 7 [pid 5022] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5021] <... close resumed>) = 0 [pid 5020] <... open resumed>) = 7 [pid 5019] sendfile(6, 7, NULL, 281474978811909 [pid 5022] <... open resumed>) = 6 [pid 5021] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5020] sendfile(6, 7, NULL, 281474978811909 [pid 5022] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5021] <... open resumed>) = 4 [pid 5022] <... open resumed>) = 7 [pid 5021] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5021] ftruncate(5, 33587195 [pid 5022] sendfile(6, 7, NULL, 281474978811909 [pid 5021] <... ftruncate resumed>) = 0 [pid 5021] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5024] <... ioctl resumed>) = 0 [pid 5021] <... open resumed>) = 6 [pid 5024] close(3 [pid 5021] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5024] <... close resumed>) = 0 [pid 5021] <... open resumed>) = 7 [pid 5024] mkdir("./file1", 0777 [pid 5021] sendfile(6, 7, NULL, 281474978811909 [pid 5024] <... mkdir resumed>) = 0 [ 74.469351][ T5028] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.540314][ T5023] NILFS (loop2): invalid segment: Checksum error in segment payload [ 74.552376][ T5024] NILFS (loop1): invalid segment: Checksum error in segment payload [ 74.589171][ T5023] NILFS (loop2): trying rollback from an earlier position [ 74.592884][ T5024] NILFS (loop1): trying rollback from an earlier position [ 74.691653][ T5023] NILFS (loop2): recovery complete [ 74.712596][ T5024] NILFS (loop1): recovery complete [pid 5024] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5023] <... mount resumed>) = 0 [pid 5023] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5023] chdir("./file1") = 0 [pid 5023] ioctl(4, LOOP_CLR_FD) = 0 [pid 5023] close(4) = 0 [pid 5023] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [ 74.745383][ T5029] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5023] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5023] ftruncate(5, 33587195 [pid 5024] <... mount resumed>) = 0 [pid 5023] <... ftruncate resumed>) = 0 [pid 5024] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5023] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5024] <... openat resumed>) = 3 [pid 5023] <... open resumed>) = 6 [pid 5024] chdir("./file1" [pid 5023] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5024] <... chdir resumed>) = 0 [pid 5023] <... open resumed>) = 7 [pid 5024] ioctl(4, LOOP_CLR_FD [pid 5023] sendfile(6, 7, NULL, 281474978811909 [pid 5024] <... ioctl resumed>) = 0 [pid 5024] close(4) = 0 [ 74.819250][ T5030] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5024] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5024] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5024] ftruncate(5, 33587195) = 0 [pid 5024] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5024] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5024] sendfile(6, 7, NULL, 281474978811909 [pid 5022] <... sendfile resumed>) = 1048576 [pid 5022] exit_group(0) = ? [pid 5022] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5022, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./1/binderfs") = 0 [pid 5002] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5019] <... sendfile resumed>) = 1048576 [pid 5019] exit_group(0) = ? [pid 5019] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5019, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [pid 5001] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./1/binderfs") = 0 [pid 5001] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5020] <... sendfile resumed>) = 1048576 [pid 5020] exit_group(0) = ? [pid 5020] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5020, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5000] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./1/binderfs") = 0 [pid 5000] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = 0 [pid 5021] <... sendfile resumed>) = 1048576 [pid 5021] exit_group(0) = ? [pid 5002] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5021] +++ exited with 0 +++ [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./1/file1", [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5021, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=34 /* 0.34 s */} --- [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... openat resumed>) = 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] fstat(3, [pid 5002] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... openat resumed>) = 4 [pid 4997] getdents64(3, [pid 5002] fstat(4, [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] getdents64(4, [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] lstat("./1/binderfs", [pid 5002] getdents64(4, [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] unlink("./1/binderfs" [pid 5002] close(4 [pid 4997] <... unlink resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 4997] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] rmdir("./1/file1") = 0 [pid 5002] getdents64(3, [pid 5001] <... umount2 resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./1/file1", [pid 5002] close(3 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... close resumed>) = 0 [pid 5001] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] rmdir("./1" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... rmdir resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] mkdir("./2", 0777 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] <... mkdir resumed>) = 0 [pid 5001] getdents64(4, [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5001] close(4 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5001] <... close resumed>) = 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] rmdir("./1/file1" [pid 5002] close(3 [pid 5001] <... rmdir resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./1") = 0 [pid 5001] mkdir("./2", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5031 [pid 5001] <... close resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5032 ./strace-static-x86_64: Process 5032 attached [pid 5023] <... sendfile resumed>) = 1048576 [pid 5032] chdir("./2" [pid 5023] exit_group(0./strace-static-x86_64: Process 5031 attached ) = ? [pid 5031] chdir("./2" [pid 5032] <... chdir resumed>) = 0 [pid 5032] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5031] <... chdir resumed>) = 0 [pid 5032] setpgid(0, 0 [pid 5031] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5032] <... setpgid resumed>) = 0 [pid 5031] <... prctl resumed>) = 0 [pid 5023] +++ exited with 0 +++ [pid 5032] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5031] setpgid(0, 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5023, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5032] <... openat resumed>) = 3 [pid 5032] write(3, "1000", 4 [pid 5031] <... setpgid resumed>) = 0 [pid 5032] <... write resumed>) = 4 [pid 5031] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5032] close(3 [pid 5031] <... openat resumed>) = 3 [pid 5032] <... close resumed>) = 0 [pid 5031] write(3, "1000", 4 [pid 5032] symlink("/dev/binderfs", "./binderfs" [pid 5031] <... write resumed>) = 4 [pid 5032] <... symlink resumed>) = 0 [pid 5031] close(3 [pid 5000] <... umount2 resumed>) = 0 [pid 4999] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5032] memfd_create("syzkaller", 0 [pid 5031] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5032] <... memfd_create resumed>) = 3 [pid 5031] symlink("/dev/binderfs", "./binderfs" [pid 4999] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5032] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5031] <... symlink resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5032] <... mmap resumed>) = 0x7f18ca796000 [pid 5031] memfd_create("syzkaller", 0 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./1/binderfs") = 0 [pid 4999] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5031] <... memfd_create resumed>) = 3 [pid 5031] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5000] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./1/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5032] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./1/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./1") = 0 [pid 5000] mkdir("./2", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5033 ./strace-static-x86_64: Process 5033 attached [pid 5033] chdir("./2") = 0 [pid 5033] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5033] setpgid(0, 0) = 0 [pid 5033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5033] write(3, "1000", 4) = 4 [pid 5033] close(3) = 0 [pid 5033] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5033] memfd_create("syzkaller", 0) = 3 [pid 5033] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5031] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5033] <... mmap resumed>) = 0x7f18ca796000 [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./1/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5024] <... sendfile resumed>) = 1048576 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5024] exit_group(0 [pid 4997] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5024] <... exit_group resumed>) = ? [pid 5024] +++ exited with 0 +++ [pid 4997] <... openat resumed>) = 4 [pid 4997] fstat(4, [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5024, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 4998] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] getdents64(4, [pid 4998] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] fstat(3, [pid 4997] getdents64(4, [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] getdents64(3, [pid 4997] close(4 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] rmdir("./1/file1" [pid 4998] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 5032] <... write resumed>) = 2097152 [pid 4998] unlink("./1/binderfs" [pid 4997] getdents64(3, [pid 5032] munmap(0x7f18ca796000, 2097152 [pid 4998] <... unlink resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] close(3 [pid 5032] <... munmap resumed>) = 0 [pid 5033] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4997] <... close resumed>) = 0 [pid 5032] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5032] ioctl(4, LOOP_SET_FD, 3 [pid 4997] rmdir("./1" [pid 5031] <... write resumed>) = 2097152 [pid 5031] munmap(0x7f18ca796000, 2097152 [pid 4997] <... rmdir resumed>) = 0 [pid 4997] mkdir("./2", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5031] <... munmap resumed>) = 0 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5032] <... ioctl resumed>) = 0 [pid 5031] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5032] close(3 [pid 4997] close(3 [pid 5032] <... close resumed>) = 0 [pid 5031] <... openat resumed>) = 4 [pid 5032] mkdir("./file1", 0777 [pid 4997] <... close resumed>) = 0 [pid 5032] <... mkdir resumed>) = 0 [pid 5032] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5034 [pid 5031] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5034 attached [pid 4999] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5034] chdir("./2") = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5034] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5034] setpgid(0, 0) = 0 [pid 4999] lstat("./1/file1", [pid 5034] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5034] write(3, "1000", 4) = 4 [pid 4999] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5034] close(3) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 76.144148][ T5032] loop4: detected capacity change from 0 to 4096 [ 76.167341][ T5031] loop5: detected capacity change from 0 to 4096 [pid 5034] symlink("/dev/binderfs", "./binderfs" [pid 4999] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5034] <... symlink resumed>) = 0 [pid 5031] <... ioctl resumed>) = 0 [pid 5034] memfd_create("syzkaller", 0 [pid 5031] close(3 [pid 4999] <... openat resumed>) = 4 [pid 5034] <... memfd_create resumed>) = 3 [pid 5031] <... close resumed>) = 0 [pid 4999] fstat(4, [pid 5034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5031] mkdir("./file1", 0777 [pid 5034] <... mmap resumed>) = 0x7f18ca796000 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5031] <... mkdir resumed>) = 0 [pid 4999] getdents64(4, [pid 5031] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4 [pid 5033] <... write resumed>) = 2097152 [pid 5033] munmap(0x7f18ca796000, 2097152 [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./1/file1") = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3 [pid 5034] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5033] <... munmap resumed>) = 0 [pid 4999] <... close resumed>) = 0 [ 76.200421][ T5032] NILFS (loop4): invalid segment: Checksum error in segment payload [ 76.232086][ T5031] NILFS (loop5): invalid segment: Checksum error in segment payload [ 76.242794][ T5032] NILFS (loop4): trying rollback from an earlier position [pid 5033] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5033] ioctl(4, LOOP_SET_FD, 3 [pid 4999] rmdir("./1" [pid 4998] <... umount2 resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] mkdir("./2", 0777 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... mkdir resumed>) = 0 [pid 4998] lstat("./1/file1", [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4998] umount2("./1/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] close(3 [pid 4998] <... openat resumed>) = 4 [pid 4999] <... close resumed>) = 0 [pid 4998] fstat(4, [pid 5033] <... ioctl resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] getdents64(4, [pid 5033] close(3 [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5035 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4./strace-static-x86_64: Process 5035 attached ) = 0 [pid 5035] chdir("./2" [pid 4998] rmdir("./1/file1" [pid 5035] <... chdir resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5035] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] getdents64(3, [pid 5035] <... prctl resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5035] setpgid(0, 0 [pid 5033] <... close resumed>) = 0 [pid 4998] close(3 [pid 5035] <... setpgid resumed>) = 0 [pid 4998] <... close resumed>) = 0 [ 76.260526][ T5031] NILFS (loop5): trying rollback from an earlier position [ 76.263958][ T5033] loop3: detected capacity change from 0 to 4096 [pid 5035] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5033] mkdir("./file1", 0777) = 0 [pid 5033] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5035] <... openat resumed>) = 3 [pid 4998] rmdir("./1" [pid 5035] write(3, "1000", 4 [pid 5034] <... write resumed>) = 2097152 [pid 5035] <... write resumed>) = 4 [pid 4998] <... rmdir resumed>) = 0 [pid 5035] close(3 [pid 5031] <... mount resumed>) = 0 [pid 4998] mkdir("./2", 0777 [pid 5035] <... close resumed>) = 0 [pid 5031] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5035] symlink("/dev/binderfs", "./binderfs" [pid 5031] <... openat resumed>) = 3 [pid 4998] <... mkdir resumed>) = 0 [pid 5035] <... symlink resumed>) = 0 [pid 5031] chdir("./file1" [pid 5035] memfd_create("syzkaller", 0 [pid 5032] <... mount resumed>) = 0 [pid 5031] <... chdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5035] <... memfd_create resumed>) = 3 [ 76.317839][ T5031] NILFS (loop5): recovery complete [ 76.323727][ T5032] NILFS (loop4): recovery complete [ 76.330016][ T5036] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.346030][ T5037] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5032] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5031] ioctl(4, LOOP_CLR_FD [pid 5035] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5034] munmap(0x7f18ca796000, 2097152 [pid 5032] <... openat resumed>) = 3 [pid 4998] <... openat resumed>) = 3 [pid 5032] chdir("./file1" [pid 5031] <... ioctl resumed>) = 0 [pid 5035] <... mmap resumed>) = 0x7f18ca796000 [pid 5032] <... chdir resumed>) = 0 [pid 5031] close(4 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5032] ioctl(4, LOOP_CLR_FD) = 0 [pid 5032] close(4 [pid 5034] <... munmap resumed>) = 0 [pid 5032] <... close resumed>) = 0 [pid 5031] <... close resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5032] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5031] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] close(3 [ 76.361922][ T5033] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5034] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4998] <... close resumed>) = 0 [pid 5034] <... openat resumed>) = 4 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5034] ioctl(4, LOOP_SET_FD, 3 [pid 5032] <... open resumed>) = 4 [pid 5032] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5031] <... open resumed>) = 4 [pid 5032] <... open resumed>) = 5 [pid 5032] ftruncate(5, 33587195) = 0 [pid 5032] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5032] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5032] sendfile(6, 7, NULL, 281474978811909./strace-static-x86_64: Process 5038 attached [pid 5038] chdir("./2" [pid 5031] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5035] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5034] <... ioctl resumed>) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5038 [pid 5034] close(3 [pid 5031] <... open resumed>) = 5 [pid 5038] <... chdir resumed>) = 0 [pid 5034] <... close resumed>) = 0 [pid 5031] ftruncate(5, 33587195 [pid 5038] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5038] setpgid(0, 0 [pid 5031] <... ftruncate resumed>) = 0 [pid 5038] <... setpgid resumed>) = 0 [pid 5034] mkdir("./file1", 0777 [pid 5031] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5038] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5031] <... open resumed>) = 6 [pid 5038] <... openat resumed>) = 3 [pid 5034] <... mkdir resumed>) = 0 [pid 5038] write(3, "1000", 4) = 4 [pid 5038] close(3) = 0 [pid 5038] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5031] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5038] memfd_create("syzkaller", 0 [pid 5031] <... open resumed>) = 7 [pid 5038] <... memfd_create resumed>) = 3 [pid 5038] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5034] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [ 76.389492][ T5034] loop0: detected capacity change from 0 to 4096 [ 76.411301][ T5033] NILFS (loop3): trying rollback from an earlier position [ 76.444062][ T5034] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5031] sendfile(6, 7, NULL, 281474978811909 [pid 5038] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5035] <... write resumed>) = 2097152 [ 76.506357][ T5034] NILFS (loop0): trying rollback from an earlier position [ 76.506916][ T5033] NILFS (loop3): recovery complete [pid 5035] munmap(0x7f18ca796000, 2097152) = 0 [pid 5033] <... mount resumed>) = 0 [pid 5033] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5035] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5033] <... openat resumed>) = 3 [pid 5033] chdir("./file1") = 0 [pid 5035] <... openat resumed>) = 4 [pid 5033] ioctl(4, LOOP_CLR_FD) = 0 [pid 5033] close(4 [pid 5035] ioctl(4, LOOP_SET_FD, 3 [pid 5033] <... close resumed>) = 0 [pid 5033] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5038] <... write resumed>) = 2097152 [pid 5038] munmap(0x7f18ca796000, 2097152) = 0 [pid 5035] <... ioctl resumed>) = 0 [pid 5033] <... open resumed>) = 4 [pid 5033] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5033] ftruncate(5, 33587195) = 0 [pid 5033] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5033] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5033] sendfile(6, 7, NULL, 281474978811909 [pid 5035] close(3) = 0 [pid 5035] mkdir("./file1", 0777) = 0 [pid 5038] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5035] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5038] <... openat resumed>) = 4 [ 76.565719][ T5039] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.581840][ T5034] NILFS (loop0): recovery complete [ 76.593882][ T5035] loop2: detected capacity change from 0 to 4096 [pid 5038] ioctl(4, LOOP_SET_FD, 3 [pid 5034] <... mount resumed>) = 0 [pid 5034] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5034] chdir("./file1") = 0 [pid 5034] ioctl(4, LOOP_CLR_FD) = 0 [pid 5034] close(4) = 0 [ 76.621741][ T5038] loop1: detected capacity change from 0 to 4096 [ 76.639161][ T5040] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5034] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5038] <... ioctl resumed>) = 0 [pid 5038] close(3) = 0 [pid 5038] mkdir("./file1", 0777) = 0 [pid 5034] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5038] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5034] ftruncate(5, 33587195) = 0 [pid 5034] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5034] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 76.664574][ T5035] NILFS (loop2): invalid segment: Checksum error in segment payload [ 76.703266][ T5038] NILFS (loop1): invalid segment: Checksum error in segment payload [ 76.723517][ T5035] NILFS (loop2): trying rollback from an earlier position [ 76.727650][ T5038] NILFS (loop1): trying rollback from an earlier position [ 76.787402][ T5035] NILFS (loop2): recovery complete [pid 5034] sendfile(6, 7, NULL, 281474978811909 [pid 5035] <... mount resumed>) = 0 [pid 5035] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5038] <... mount resumed>) = 0 [pid 5038] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5038] chdir("./file1") = 0 [pid 5038] ioctl(4, LOOP_CLR_FD) = 0 [pid 5038] close(4 [pid 5035] chdir("./file1" [pid 5038] <... close resumed>) = 0 [pid 5038] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5035] <... chdir resumed>) = 0 [ 76.843062][ T5041] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.856170][ T5038] NILFS (loop1): recovery complete [pid 5035] ioctl(4, LOOP_CLR_FD) = 0 [pid 5035] close(4) = 0 [pid 5035] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5038] <... open resumed>) = 4 [pid 5035] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5038] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5035] ftruncate(5, 33587195 [pid 5038] <... open resumed>) = 5 [pid 5035] <... ftruncate resumed>) = 0 [pid 5035] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5035] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5038] ftruncate(5, 33587195 [pid 5035] <... open resumed>) = 7 [pid 5038] <... ftruncate resumed>) = 0 [pid 5035] sendfile(6, 7, NULL, 281474978811909 [pid 5038] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5038] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 76.904703][ T5042] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5038] sendfile(6, 7, NULL, 281474978811909 [pid 5032] <... sendfile resumed>) = 1048576 [pid 5032] exit_group(0) = ? [pid 5032] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5032, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5001] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, [pid 5031] <... sendfile resumed>) = 1048576 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, [pid 5031] exit_group(0 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5031] <... exit_group resumed>) = ? [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./2/binderfs") = 0 [pid 5001] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5031] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5031, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=22 /* 0.22 s */} --- [pid 5002] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./2/binderfs") = 0 [pid 5002] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./2/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./2/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./2") = 0 [pid 5001] mkdir("./3", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5043 ./strace-static-x86_64: Process 5043 attached [pid 5043] chdir("./3") = 0 [pid 5043] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5043] setpgid(0, 0 [pid 5033] <... sendfile resumed>) = 1048576 [pid 5033] exit_group(0 [pid 5043] <... setpgid resumed>) = 0 [pid 5033] <... exit_group resumed>) = ? [pid 5043] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5043] write(3, "1000", 4) = 4 [pid 5043] close(3) = 0 [pid 5043] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5043] memfd_create("syzkaller", 0) = 3 [pid 5043] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5034] <... sendfile resumed>) = 1048576 [pid 5033] +++ exited with 0 +++ [pid 5034] exit_group(0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5033, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=34 /* 0.34 s */} --- [pid 5000] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5034] <... exit_group resumed>) = ? [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 5034] +++ exited with 0 +++ [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5034, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./2/binderfs" [pid 5002] <... umount2 resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 5000] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] lstat("./2/file1", [pid 4997] getdents64(3, [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5043] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... openat resumed>) = 4 [pid 4997] lstat("./2/binderfs", [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] getdents64(4, [pid 4997] unlink("./2/binderfs" [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, [pid 4997] <... unlink resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] close(4) = 0 [pid 5002] rmdir("./2/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./2") = 0 [pid 5002] mkdir("./3", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5044 ./strace-static-x86_64: Process 5044 attached [pid 5044] chdir("./3") = 0 [pid 5044] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5044] setpgid(0, 0) = 0 [pid 5044] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5035] <... sendfile resumed>) = 1048576 [pid 5044] <... openat resumed>) = 3 [pid 5035] exit_group(0) = ? [pid 5035] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5035, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5044] write(3, "1000", 4) = 4 [pid 4999] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./2/binderfs", [pid 5044] close(3 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./2/binderfs" [pid 5044] <... close resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 5044] symlink("/dev/binderfs", "./binderfs" [pid 5043] <... write resumed>) = 2097152 [pid 4999] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5044] <... symlink resumed>) = 0 [pid 5043] munmap(0x7f18ca796000, 2097152 [pid 5000] <... umount2 resumed>) = 0 [pid 4997] <... umount2 resumed>) = 0 [pid 5044] memfd_create("syzkaller", 0 [pid 5000] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5044] <... memfd_create resumed>) = 3 [pid 5043] <... munmap resumed>) = 0 [pid 5044] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5043] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5044] <... mmap resumed>) = 0x7f18ca796000 [pid 5043] <... openat resumed>) = 4 [pid 5000] lstat("./2/file1", [pid 4997] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5043] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./2/file1", [pid 5000] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... openat resumed>) = 4 [pid 4997] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5044] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] getdents64(4, [pid 4997] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5043] <... ioctl resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, [pid 4997] <... openat resumed>) = 4 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] fstat(4, [pid 5000] close(4) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] rmdir("./2/file1" [pid 4997] getdents64(4, [pid 5000] <... rmdir resumed>) = 0 [pid 5000] getdents64(3, [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] getdents64(4, [pid 5000] close(3 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5043] close(3 [pid 5000] <... close resumed>) = 0 [pid 4997] close(4 [pid 5000] rmdir("./2" [pid 4997] <... close resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4997] rmdir("./2/file1" [pid 5000] mkdir("./3", 0777 [pid 5043] <... close resumed>) = 0 [pid 5043] mkdir("./file1", 0777 [pid 4997] <... rmdir resumed>) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 4997] getdents64(3, [pid 5043] <... mkdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5043] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4997] close(3 [pid 5038] <... sendfile resumed>) = 1048576 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5038] exit_group(0 [pid 5000] close(3 [pid 4997] <... close resumed>) = 0 [pid 5038] <... exit_group resumed>) = ? [pid 4997] rmdir("./2" [pid 5000] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] <... rmdir resumed>) = 0 [pid 5038] +++ exited with 0 +++ [pid 4997] mkdir("./3", 0777 [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5045 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5038, si_uid=0, si_status=0, si_utime=0, si_stime=34 /* 0.34 s */} --- [pid 4998] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... mkdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 5045 attached [pid 4998] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5045] chdir("./3" [pid 4998] <... openat resumed>) = 3 [pid 4997] <... openat resumed>) = 3 [pid 4998] fstat(3, [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5045] <... chdir resumed>) = 0 [ 78.131924][ T5043] loop4: detected capacity change from 0 to 4096 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5045] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] getdents64(3, [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5045] <... prctl resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] close(3 [pid 5045] setpgid(0, 0 [pid 4998] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5045] <... setpgid resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... close resumed>) = 0 [pid 5045] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] lstat("./2/binderfs", [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5045] <... openat resumed>) = 3 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./2/binderfs") = 0 [pid 5045] write(3, "1000", 4) = 4 [pid 4998] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5046 [pid 5045] close(3) = 0 ./strace-static-x86_64: Process 5046 attached [pid 5045] symlink("/dev/binderfs", "./binderfs" [pid 5044] <... write resumed>) = 2097152 [pid 5045] <... symlink resumed>) = 0 [pid 5045] memfd_create("syzkaller", 0 [pid 5046] chdir("./3" [pid 5044] munmap(0x7f18ca796000, 2097152 [pid 5046] <... chdir resumed>) = 0 [pid 5045] <... memfd_create resumed>) = 3 [pid 5046] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5045] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5046] <... prctl resumed>) = 0 [pid 5045] <... mmap resumed>) = 0x7f18ca796000 [pid 5044] <... munmap resumed>) = 0 [pid 5046] setpgid(0, 0) = 0 [ 78.206095][ T5043] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5044] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5046] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5044] <... openat resumed>) = 4 [pid 5046] <... openat resumed>) = 3 [pid 5044] ioctl(4, LOOP_SET_FD, 3 [pid 5046] write(3, "1000", 4 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./2/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 5046] <... write resumed>) = 4 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5046] close(3 [pid 4999] getdents64(4, [pid 5046] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./2/file1" [pid 5046] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, [pid 5046] <... symlink resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3 [pid 5046] memfd_create("syzkaller", 0 [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./2" [pid 5046] <... memfd_create resumed>) = 3 [pid 4999] <... rmdir resumed>) = 0 [pid 5046] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] mkdir("./3", 0777 [pid 5046] <... mmap resumed>) = 0x7f18ca796000 [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5047 [pid 5044] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5047 attached [pid 5044] close(3 [pid 5047] chdir("./3" [pid 5044] <... close resumed>) = 0 [pid 5047] <... chdir resumed>) = 0 [pid 5044] mkdir("./file1", 0777 [pid 5047] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5044] <... mkdir resumed>) = 0 [pid 5047] setpgid(0, 0 [pid 5044] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5047] <... setpgid resumed>) = 0 [pid 5047] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5045] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5047] write(3, "1000", 4) = 4 [pid 5047] close(3) = 0 [pid 5047] symlink("/dev/binderfs", "./binderfs") = 0 [ 78.253712][ T5043] NILFS (loop4): trying rollback from an earlier position [ 78.263049][ T5044] loop5: detected capacity change from 0 to 4096 [pid 5047] memfd_create("syzkaller", 0 [pid 5046] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5047] <... memfd_create resumed>) = 3 [pid 5047] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 78.312373][ T5043] NILFS (loop4): recovery complete [pid 5047] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5043] <... mount resumed>) = 0 [pid 5043] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5043] chdir("./file1") = 0 [pid 5043] ioctl(4, LOOP_CLR_FD) = 0 [pid 5043] close(4) = 0 [pid 5043] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5043] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5043] ftruncate(5, 33587195) = 0 [pid 5043] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5043] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 78.342735][ T5044] NILFS (loop5): invalid segment: Checksum error in segment payload [ 78.359789][ T5048] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5043] sendfile(6, 7, NULL, 281474978811909 [pid 5047] <... write resumed>) = 2097152 [pid 5045] <... write resumed>) = 2097152 [pid 5045] munmap(0x7f18ca796000, 2097152 [pid 5046] <... write resumed>) = 2097152 [pid 5045] <... munmap resumed>) = 0 [ 78.397673][ T5044] NILFS (loop5): trying rollback from an earlier position [pid 4998] <... umount2 resumed>) = 0 [pid 5046] munmap(0x7f18ca796000, 2097152 [pid 5045] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4998] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5046] <... munmap resumed>) = 0 [pid 5045] <... openat resumed>) = 4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5045] ioctl(4, LOOP_SET_FD, 3 [pid 4998] lstat("./2/file1", [pid 5047] munmap(0x7f18ca796000, 2097152) = 0 [pid 5047] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5047] ioctl(4, LOOP_SET_FD, 3 [pid 5046] <... openat resumed>) = 4 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./2/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 5046] ioctl(4, LOOP_SET_FD, 3 [pid 5045] <... ioctl resumed>) = 0 [pid 5044] <... mount resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./2/file1") = 0 [pid 5044] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5046] <... ioctl resumed>) = 0 [pid 5045] close(3 [pid 5044] <... openat resumed>) = 3 [pid 4998] close(3) = 0 [pid 5045] <... close resumed>) = 0 [pid 5044] chdir("./file1" [pid 4998] rmdir("./2" [pid 5046] close(3 [pid 5045] mkdir("./file1", 0777 [pid 5044] <... chdir resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] mkdir("./3", 0777 [pid 5045] <... mkdir resumed>) = 0 [pid 5044] ioctl(4, LOOP_CLR_FD [pid 4998] <... mkdir resumed>) = 0 [pid 5046] <... close resumed>) = 0 [pid 5045] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5044] <... ioctl resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5044] close(4 [pid 4998] <... openat resumed>) = 3 [pid 5044] <... close resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5044] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5046] mkdir("./file1", 0777 [pid 5044] <... open resumed>) = 4 [pid 5044] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5050 [pid 5044] <... open resumed>) = 5 [pid 5044] ftruncate(5, 33587195) = 0 ./strace-static-x86_64: Process 5050 attached [pid 5044] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5050] chdir("./3" [pid 5044] <... open resumed>) = 6 [pid 5047] <... ioctl resumed>) = 0 [pid 5044] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5050] <... chdir resumed>) = 0 [pid 5047] close(3 [pid 5044] <... open resumed>) = 7 [ 78.451389][ T5044] NILFS (loop5): recovery complete [ 78.460883][ T5049] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.468015][ T5047] loop2: detected capacity change from 0 to 4096 [ 78.472824][ T5045] loop3: detected capacity change from 0 to 4096 [ 78.489313][ T5046] loop0: detected capacity change from 0 to 4096 [pid 5050] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5047] <... close resumed>) = 0 [pid 5044] sendfile(6, 7, NULL, 281474978811909 [pid 5050] <... prctl resumed>) = 0 [pid 5047] mkdir("./file1", 0777 [pid 5050] setpgid(0, 0 [pid 5047] <... mkdir resumed>) = 0 [pid 5050] <... setpgid resumed>) = 0 [pid 5047] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5050] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5050] write(3, "1000", 4) = 4 [pid 5050] close(3) = 0 [pid 5050] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5050] memfd_create("syzkaller", 0) = 3 [pid 5050] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5046] <... mkdir resumed>) = 0 [pid 5046] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [ 78.538290][ T5047] NILFS (loop2): invalid segment: Checksum error in segment payload [ 78.543805][ T5045] NILFS (loop3): invalid segment: Checksum error in segment payload [ 78.571856][ T5045] NILFS (loop3): trying rollback from an earlier position [ 78.603983][ T5046] NILFS (loop0): invalid segment: Checksum error in segment payload [ 78.615708][ T5047] NILFS (loop2): trying rollback from an earlier position [ 78.624529][ T5046] NILFS (loop0): trying rollback from an earlier position [ 78.654362][ T5045] NILFS (loop3): recovery complete [pid 5050] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5045] <... mount resumed>) = 0 [pid 5045] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5045] chdir("./file1") = 0 [pid 5045] ioctl(4, LOOP_CLR_FD [pid 5046] <... mount resumed>) = 0 [pid 5045] <... ioctl resumed>) = 0 [pid 5046] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5045] close(4) = 0 [pid 5050] <... write resumed>) = 2097152 [pid 5046] <... openat resumed>) = 3 [pid 5046] chdir("./file1" [ 78.678444][ T5046] NILFS (loop0): recovery complete [ 78.684372][ T5051] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.711335][ T5052] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5045] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5050] munmap(0x7f18ca796000, 2097152 [pid 5046] <... chdir resumed>) = 0 [pid 5045] <... open resumed>) = 4 [pid 5046] ioctl(4, LOOP_CLR_FD [pid 5050] <... munmap resumed>) = 0 [pid 5046] <... ioctl resumed>) = 0 [pid 5045] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5046] close(4 [pid 5045] <... open resumed>) = 5 [pid 5046] <... close resumed>) = 0 [pid 5045] ftruncate(5, 33587195 [ 78.735518][ T5047] NILFS (loop2): recovery complete [pid 5050] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5046] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5045] <... ftruncate resumed>) = 0 [pid 5050] ioctl(4, LOOP_SET_FD, 3 [pid 5047] <... mount resumed>) = 0 [pid 5047] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5046] <... open resumed>) = 4 [pid 5045] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5047] <... openat resumed>) = 3 [pid 5045] <... open resumed>) = 6 [pid 5047] chdir("./file1" [pid 5046] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5045] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5047] <... chdir resumed>) = 0 [pid 5047] ioctl(4, LOOP_CLR_FD [pid 5046] <... open resumed>) = 5 [pid 5045] <... open resumed>) = 7 [pid 5047] <... ioctl resumed>) = 0 [pid 5047] close(4) = 0 [pid 5046] ftruncate(5, 33587195 [pid 5045] sendfile(6, 7, NULL, 281474978811909 [pid 5047] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5046] <... ftruncate resumed>) = 0 [pid 5046] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5046] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 78.774753][ T5053] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 78.776968][ T5050] loop1: detected capacity change from 0 to 4096 [pid 5046] sendfile(6, 7, NULL, 281474978811909 [pid 5050] <... ioctl resumed>) = 0 [pid 5050] close(3) = 0 [pid 5050] mkdir("./file1", 0777) = 0 [pid 5047] <... open resumed>) = 4 [pid 5047] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5050] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5047] <... open resumed>) = 5 [pid 5047] ftruncate(5, 33587195) = 0 [pid 5047] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5047] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 78.894461][ T5050] NILFS (loop1): invalid segment: Checksum error in segment payload [ 78.902705][ T5050] NILFS (loop1): trying rollback from an earlier position [pid 5047] sendfile(6, 7, NULL, 281474978811909 [pid 5050] <... mount resumed>) = 0 [pid 5050] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5050] chdir("./file1") = 0 [pid 5050] ioctl(4, LOOP_CLR_FD) = 0 [pid 5050] close(4) = 0 [pid 5050] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [ 79.021323][ T5050] NILFS (loop1): recovery complete [pid 5050] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5050] ftruncate(5, 33587195) = 0 [pid 5050] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5050] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 79.060316][ T5054] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5050] sendfile(6, 7, NULL, 281474978811909 [pid 5044] <... sendfile resumed>) = 1048576 [pid 5043] <... sendfile resumed>) = 1048576 [pid 5044] exit_group(0 [pid 5043] exit_group(0 [pid 5044] <... exit_group resumed>) = ? [pid 5043] <... exit_group resumed>) = ? [pid 5044] +++ exited with 0 +++ [pid 5043] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5044, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5043, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=30 /* 0.30 s */} --- [pid 5002] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... openat resumed>) = 3 [pid 5001] <... openat resumed>) = 3 [pid 5002] fstat(3, [pid 5001] fstat(3, [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 5001] getdents64(3, [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./3/binderfs", [pid 5001] lstat("./3/binderfs", [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./3/binderfs" [pid 5001] unlink("./3/binderfs" [pid 5002] <... unlink resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 5002] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./3/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./3/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5002] rmdir("./3") = 0 [pid 5002] mkdir("./4", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5001] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... close resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] lstat("./3/file1", [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5055 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5055 attached ) = 4 [pid 5001] fstat(4, [pid 5055] chdir("./4" [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5055] <... chdir resumed>) = 0 [pid 5055] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5055] setpgid(0, 0) = 0 [pid 5055] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] getdents64(4, [pid 5055] <... openat resumed>) = 3 [pid 5055] write(3, "1000", 4) = 4 [pid 5001] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5055] close(3) = 0 [pid 5001] getdents64(4, [pid 5055] symlink("/dev/binderfs", "./binderfs" [pid 5001] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5055] <... symlink resumed>) = 0 [pid 5001] close(4 [pid 5055] memfd_create("syzkaller", 0 [pid 5001] <... close resumed>) = 0 [pid 5055] <... memfd_create resumed>) = 3 [pid 5001] rmdir("./3/file1" [pid 5055] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5001] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./3") = 0 [pid 5001] mkdir("./4", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 5055] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5045] <... sendfile resumed>) = 1048576 [pid 5001] <... close resumed>) = 0 [pid 5045] exit_group(0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5045] <... exit_group resumed>) = ? [pid 5001] <... clone resumed>, child_tidptr=0x555556f7b690) = 5056 [pid 5045] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5045, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5056 attached [pid 5047] <... sendfile resumed>) = 1048576 [pid 5046] <... sendfile resumed>) = 1048576 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] chdir("./4" [pid 5046] exit_group(0 [pid 5000] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5056] <... chdir resumed>) = 0 [pid 5046] <... exit_group resumed>) = ? [pid 5000] <... openat resumed>) = 3 [pid 5056] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5046] +++ exited with 0 +++ [pid 5000] getdents64(3, [pid 5056] <... prctl resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5046, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5056] setpgid(0, 0 [pid 5047] exit_group(0 [pid 5000] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... setpgid resumed>) = 0 [pid 5047] <... exit_group resumed>) = ? [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5047] +++ exited with 0 +++ [pid 5056] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] lstat("./3/binderfs", [pid 5056] <... openat resumed>) = 3 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5056] write(3, "1000", 4 [pid 5000] unlink("./3/binderfs" [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5047, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=30 /* 0.30 s */} --- [pid 5056] <... write resumed>) = 4 [pid 5000] <... unlink resumed>) = 0 [pid 4999] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] close(3 [pid 5000] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] <... close resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5056] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... openat resumed>) = 3 [pid 4997] <... openat resumed>) = 3 [pid 5056] <... symlink resumed>) = 0 [pid 4999] fstat(3, [pid 4997] fstat(3, [pid 5056] memfd_create("syzkaller", 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5056] <... memfd_create resumed>) = 3 [pid 4999] getdents64(3, [pid 4997] getdents64(3, [pid 5056] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5056] <... mmap resumed>) = 0x7f18ca796000 [pid 4999] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./3/binderfs", [pid 4997] lstat("./3/binderfs", [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./3/binderfs" [pid 4997] unlink("./3/binderfs" [pid 4999] <... unlink resumed>) = 0 [pid 4997] <... unlink resumed>) = 0 [pid 4999] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5055] <... write resumed>) = 2097152 [pid 5055] munmap(0x7f18ca796000, 2097152) = 0 [pid 5055] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5055] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5055] close(3) = 0 [pid 5055] mkdir("./file1", 0777 [pid 5056] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5055] <... mkdir resumed>) = 0 [ 80.051854][ T5055] loop5: detected capacity change from 0 to 4096 [pid 5055] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./3/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./3/file1") = 0 [pid 5000] getdents64(3, [pid 5056] <... write resumed>) = 2097152 [pid 5050] <... sendfile resumed>) = 1048576 [ 80.134072][ T5055] NILFS (loop5): invalid segment: Checksum error in segment payload [ 80.142201][ T5055] NILFS (loop5): trying rollback from an earlier position [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5056] munmap(0x7f18ca796000, 2097152 [pid 5050] exit_group(0 [pid 5000] close(3 [pid 4999] <... umount2 resumed>) = 0 [pid 5050] <... exit_group resumed>) = ? [pid 5000] <... close resumed>) = 0 [pid 5000] rmdir("./3" [pid 5056] <... munmap resumed>) = 0 [pid 5050] +++ exited with 0 +++ [pid 5000] <... rmdir resumed>) = 0 [pid 4999] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] mkdir("./4", 0777 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5056] <... openat resumed>) = 4 [pid 5000] <... mkdir resumed>) = 0 [pid 4999] lstat("./3/file1", [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5050, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- [pid 5056] ioctl(4, LOOP_SET_FD, 3 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5000] <... openat resumed>) = 3 [pid 4998] <... restart_syscall resumed>) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 4998] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... ioctl resumed>) = 0 [pid 5055] <... mount resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5058 [pid 4998] fstat(3, [pid 5055] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./3/binderfs", ./strace-static-x86_64: Process 5058 attached {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5058] chdir("./4" [pid 4998] unlink("./3/binderfs" [pid 5058] <... chdir resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 5058] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] <... prctl resumed>) = 0 [pid 5058] setpgid(0, 0) = 0 [pid 5056] close(3 [pid 5055] <... openat resumed>) = 3 [pid 4999] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5058] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5056] <... close resumed>) = 0 [pid 5055] chdir("./file1" [pid 4999] <... openat resumed>) = 4 [pid 4997] <... umount2 resumed>) = 0 [pid 5056] mkdir("./file1", 0777 [pid 5055] <... chdir resumed>) = 0 [pid 4999] fstat(4, [pid 5056] <... mkdir resumed>) = 0 [pid 5055] ioctl(4, LOOP_CLR_FD [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5055] <... ioctl resumed>) = 0 [ 80.216284][ T5055] NILFS (loop5): recovery complete [ 80.223220][ T5056] loop4: detected capacity change from 0 to 4096 [ 80.232090][ T5057] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] getdents64(4, [pid 5058] <... openat resumed>) = 3 [pid 5055] close(4 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] write(3, "1000", 4 [pid 5055] <... close resumed>) = 0 [pid 4999] getdents64(4, [pid 4997] lstat("./3/file1", [pid 5055] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] close(4 [pid 4997] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... close resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] rmdir("./3/file1" [pid 4997] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5058] <... write resumed>) = 4 [pid 5055] <... open resumed>) = 4 [pid 4999] <... rmdir resumed>) = 0 [pid 4997] <... openat resumed>) = 4 [pid 5058] close(3 [pid 5055] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4999] getdents64(3, [pid 4997] fstat(4, [pid 5058] <... close resumed>) = 0 [pid 5055] <... open resumed>) = 5 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5058] symlink("/dev/binderfs", "./binderfs" [pid 5055] ftruncate(5, 33587195 [pid 4999] close(3 [pid 4997] getdents64(4, [pid 4999] <... close resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] rmdir("./3" [pid 4997] getdents64(4, [pid 5058] <... symlink resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5058] memfd_create("syzkaller", 0 [pid 5055] <... ftruncate resumed>) = 0 [pid 4999] mkdir("./4", 0777 [pid 4997] close(4 [pid 5058] <... memfd_create resumed>) = 3 [pid 5055] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4999] <... mkdir resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 5058] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5055] <... open resumed>) = 6 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4997] rmdir("./3/file1" [pid 5058] <... mmap resumed>) = 0x7f18ca796000 [pid 5055] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4999] <... openat resumed>) = 3 [pid 4997] <... rmdir resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4997] getdents64(3, [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3 [pid 4997] close(3 [pid 4999] <... close resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] rmdir("./3") = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5059 [pid 4997] mkdir("./4", 0777) = 0 [pid 5055] <... open resumed>) = 7 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5055] sendfile(6, 7, NULL, 281474978811909 [pid 4997] <... openat resumed>) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 ./strace-static-x86_64: Process 5059 attached [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5059] chdir("./4" [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5060 [pid 5059] <... chdir resumed>) = 0 [pid 5059] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5059] setpgid(0, 0) = 0 [pid 5059] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5060 attached ) = 3 [pid 5060] chdir("./4" [pid 5059] write(3, "1000", 4 [pid 5060] <... chdir resumed>) = 0 [pid 5059] <... write resumed>) = 4 [pid 5060] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5059] close(3 [pid 5060] <... prctl resumed>) = 0 [pid 5059] <... close resumed>) = 0 [ 80.269181][ T5056] NILFS (loop4): invalid segment: Checksum error in segment payload [ 80.287737][ T5056] NILFS (loop4): trying rollback from an earlier position [pid 5060] setpgid(0, 0 [pid 5059] symlink("/dev/binderfs", "./binderfs" [pid 5060] <... setpgid resumed>) = 0 [pid 5059] <... symlink resumed>) = 0 [pid 5060] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5059] memfd_create("syzkaller", 0 [pid 5060] <... openat resumed>) = 3 [pid 5059] <... memfd_create resumed>) = 3 [pid 5060] write(3, "1000", 4 [pid 5059] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5060] <... write resumed>) = 4 [pid 5059] <... mmap resumed>) = 0x7f18ca796000 [pid 5060] close(3 [pid 5058] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] <... umount2 resumed>) = 0 [pid 5060] <... close resumed>) = 0 [pid 5060] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5060] memfd_create("syzkaller", 0) = 3 [pid 5060] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4998] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./3/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 80.367422][ T5056] NILFS (loop4): recovery complete [pid 4998] umount2("./3/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5056] <... mount resumed>) = 0 [pid 4998] <... openat resumed>) = 4 [pid 5056] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4998] fstat(4, [pid 5058] <... write resumed>) = 2097152 [pid 5056] <... openat resumed>) = 3 [pid 5059] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5058] munmap(0x7f18ca796000, 2097152 [pid 5056] chdir("./file1" [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5058] <... munmap resumed>) = 0 [pid 5056] <... chdir resumed>) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5056] ioctl(4, LOOP_CLR_FD [pid 5058] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5056] <... ioctl resumed>) = 0 [pid 4998] getdents64(4, [pid 5056] close(4 [pid 5058] <... openat resumed>) = 4 [pid 5056] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5056] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] close(4 [pid 5058] ioctl(4, LOOP_SET_FD, 3 [pid 4998] <... close resumed>) = 0 [pid 4998] rmdir("./3/file1" [pid 5056] <... open resumed>) = 4 [ 80.422395][ T5061] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] <... rmdir resumed>) = 0 [pid 5056] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] getdents64(3, [pid 5056] <... open resumed>) = 5 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3 [pid 5056] ftruncate(5, 33587195 [pid 4998] <... close resumed>) = 0 [pid 5056] <... ftruncate resumed>) = 0 [pid 4998] rmdir("./3" [pid 5056] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 4998] <... rmdir resumed>) = 0 [pid 5056] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4998] mkdir("./4", 0777 [pid 5056] <... open resumed>) = 7 [pid 5056] sendfile(6, 7, NULL, 281474978811909 [pid 4998] <... mkdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5060] <... write resumed>) = 2097152 [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5062 [pid 5058] <... ioctl resumed>) = 0 [pid 5058] close(3) = 0 [pid 5058] mkdir("./file1", 0777./strace-static-x86_64: Process 5062 attached ) = 0 [pid 5062] chdir("./4" [pid 5058] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5062] <... chdir resumed>) = 0 [ 80.475413][ T5058] loop3: detected capacity change from 0 to 4096 [pid 5059] <... write resumed>) = 2097152 [pid 5062] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5062] setpgid(0, 0) = 0 [pid 5060] munmap(0x7f18ca796000, 2097152 [pid 5062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5060] <... munmap resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5062] write(3, "1000", 4) = 4 [pid 5062] close(3 [pid 5060] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] <... close resumed>) = 0 [pid 5060] <... openat resumed>) = 4 [pid 5059] munmap(0x7f18ca796000, 2097152 [pid 5062] symlink("/dev/binderfs", "./binderfs" [pid 5060] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... symlink resumed>) = 0 [pid 5059] <... munmap resumed>) = 0 [pid 5062] memfd_create("syzkaller", 0 [pid 5059] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... memfd_create resumed>) = 3 [pid 5059] <... openat resumed>) = 4 [pid 5062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5059] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... mmap resumed>) = 0x7f18ca796000 [pid 5059] <... ioctl resumed>) = 0 [pid 5059] close(3) = 0 [pid 5060] <... ioctl resumed>) = 0 [pid 5060] close(3 [pid 5059] mkdir("./file1", 0777 [pid 5062] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5060] <... close resumed>) = 0 [pid 5060] mkdir("./file1", 0777 [pid 5059] <... mkdir resumed>) = 0 [pid 5060] <... mkdir resumed>) = 0 [pid 5059] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [ 80.538414][ T5058] NILFS (loop3): invalid segment: Checksum error in segment payload [ 80.556347][ T5060] loop0: detected capacity change from 0 to 4096 [ 80.568724][ T5058] NILFS (loop3): trying rollback from an earlier position [ 80.576786][ T5059] loop2: detected capacity change from 0 to 4096 [ 80.623877][ T5059] NILFS (loop2): invalid segment: Checksum error in segment payload [ 80.633011][ T5059] NILFS (loop2): trying rollback from an earlier position [ 80.640249][ T5060] NILFS (loop0): invalid segment: Checksum error in segment payload [ 80.656337][ T5058] NILFS (loop3): recovery complete [pid 5060] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5058] <... mount resumed>) = 0 [pid 5058] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5058] chdir("./file1") = 0 [pid 5058] ioctl(4, LOOP_CLR_FD) = 0 [pid 5058] close(4) = 0 [pid 5058] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5058] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5058] ftruncate(5, 33587195) = 0 [pid 5058] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5058] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 80.673181][ T5063] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.703126][ T5059] NILFS (loop2): recovery complete [ 80.708784][ T5060] NILFS (loop0): trying rollback from an earlier position [pid 5058] sendfile(6, 7, NULL, 281474978811909 [pid 5059] <... mount resumed>) = 0 [pid 5059] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] <... write resumed>) = 2097152 [pid 5059] chdir("./file1") = 0 [pid 5059] ioctl(4, LOOP_CLR_FD) = 0 [pid 5059] close(4) = 0 [pid 5059] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5062] munmap(0x7f18ca796000, 2097152 [pid 5059] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5059] ftruncate(5, 33587195) = 0 [pid 5059] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5062] <... munmap resumed>) = 0 [pid 5059] <... open resumed>) = 6 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5059] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5062] <... openat resumed>) = 4 [pid 5059] <... open resumed>) = 7 [pid 5062] ioctl(4, LOOP_SET_FD, 3 [ 80.733577][ T5064] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5059] sendfile(6, 7, NULL, 281474978811909 [pid 5062] <... ioctl resumed>) = 0 [pid 5062] close(3) = 0 [pid 5062] mkdir("./file1", 0777) = 0 [ 80.777407][ T5062] loop1: detected capacity change from 0 to 4096 [ 80.793494][ T5060] NILFS (loop0): recovery complete [pid 5062] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5060] <... mount resumed>) = 0 [pid 5060] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5060] chdir("./file1") = 0 [pid 5060] ioctl(4, LOOP_CLR_FD) = 0 [pid 5060] close(4) = 0 [ 80.842609][ T5065] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.864377][ T5062] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5060] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5060] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5060] ftruncate(5, 33587195) = 0 [pid 5060] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5060] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 80.894255][ T5062] NILFS (loop1): trying rollback from an earlier position [ 80.956312][ T5062] NILFS (loop1): recovery complete [pid 5060] sendfile(6, 7, NULL, 281474978811909 [pid 5062] <... mount resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] chdir("./file1") = 0 [pid 5062] ioctl(4, LOOP_CLR_FD) = 0 [ 81.037694][ T5066] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5062] close(4) = 0 [pid 5062] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5062] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5062] ftruncate(5, 33587195) = 0 [pid 5062] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5062] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5062] sendfile(6, 7, NULL, 281474978811909 [pid 5055] <... sendfile resumed>) = 1048576 [pid 5055] exit_group(0) = ? [pid 5055] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5055, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./4/binderfs") = 0 [pid 5002] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5056] <... sendfile resumed>) = 1048576 [pid 5056] exit_group(0 [pid 5002] <... umount2 resumed>) = 0 [pid 5056] <... exit_group resumed>) = ? [pid 5002] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5056] +++ exited with 0 +++ [pid 5002] lstat("./4/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5056, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- [pid 5002] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... restart_syscall resumed>) = 0 [pid 5002] <... openat resumed>) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] getdents64(4, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] getdents64(4, [pid 5001] <... openat resumed>) = 3 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] fstat(3, [pid 5002] close(4) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] rmdir("./4/file1" [pid 5001] getdents64(3, [pid 5002] <... rmdir resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [ 81.695607][ T26] cfg80211: failed to load regulatory.db [pid 5002] getdents64(3, [pid 5001] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3 [pid 5001] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... close resumed>) = 0 [pid 5001] unlink("./4/binderfs") = 0 [pid 5002] rmdir("./4" [pid 5001] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... rmdir resumed>) = 0 [pid 5002] mkdir("./5", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5067 [pid 5058] <... sendfile resumed>) = 1048576 [pid 5058] exit_group(0) = ? [pid 5058] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5058, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} --- ./strace-static-x86_64: Process 5067 attached [pid 5067] chdir("./5" [pid 5000] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] <... chdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] <... prctl resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5067] setpgid(0, 0 [pid 5000] fstat(3, [pid 5067] <... setpgid resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5067] <... openat resumed>) = 3 [pid 5000] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] write(3, "1000", 4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5067] <... write resumed>) = 4 [pid 5000] lstat("./4/binderfs", [pid 5067] close(3 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5067] <... close resumed>) = 0 [pid 5000] unlink("./4/binderfs" [pid 5067] symlink("/dev/binderfs", "./binderfs" [pid 5000] <... unlink resumed>) = 0 [pid 5067] <... symlink resumed>) = 0 [pid 5000] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5067] memfd_create("syzkaller", 0) = 3 [pid 5067] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5067] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5059] <... sendfile resumed>) = 1048576 [pid 5059] exit_group(0) = ? [pid 5060] <... sendfile resumed>) = 1048576 [pid 5059] +++ exited with 0 +++ [pid 5060] exit_group(0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5059, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5060] <... exit_group resumed>) = ? [pid 4999] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5060] +++ exited with 0 +++ [pid 4999] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5060, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=28 /* 0.28 s */} --- [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, [pid 4997] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... openat resumed>) = 3 [pid 4999] lstat("./4/binderfs", [pid 4997] fstat(3, [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] unlink("./4/binderfs" [pid 4997] getdents64(3, [pid 4999] <... unlink resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./4/binderfs") = 0 [pid 4997] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] <... write resumed>) = 2097152 [pid 5001] lstat("./4/file1", [pid 5067] munmap(0x7f18ca796000, 2097152 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5067] <... munmap resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5067] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] <... openat resumed>) = 4 [pid 5067] <... openat resumed>) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5067] ioctl(4, LOOP_SET_FD, 3 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./4/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5067] <... ioctl resumed>) = 0 [pid 5001] close(3 [pid 5067] close(3) = 0 [pid 5001] <... close resumed>) = 0 [pid 5067] mkdir("./file1", 0777 [pid 5001] rmdir("./4" [pid 5067] <... mkdir resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5067] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5001] mkdir("./5", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5068 ./strace-static-x86_64: Process 5068 attached [pid 5068] chdir("./5") = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5068] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... prctl resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] setpgid(0, 0 [pid 5000] lstat("./4/file1", [pid 5068] <... setpgid resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] <... openat resumed>) = 3 [ 82.075150][ T5067] loop5: detected capacity change from 0 to 4096 [ 82.114216][ T5067] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5068] write(3, "1000", 4 [pid 5000] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5068] <... write resumed>) = 4 [pid 5000] fstat(4, [pid 5068] close(3 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5068] <... close resumed>) = 0 [pid 5000] getdents64(4, [pid 5068] symlink("/dev/binderfs", "./binderfs" [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./4/file1") = 0 [pid 5068] <... symlink resumed>) = 0 [pid 5000] getdents64(3, [pid 5068] memfd_create("syzkaller", 0 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5068] <... memfd_create resumed>) = 3 [ 82.143547][ T5067] NILFS (loop5): trying rollback from an earlier position [pid 5000] close(3 [pid 5068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] <... close resumed>) = 0 [pid 5068] <... mmap resumed>) = 0x7f18ca796000 [pid 5000] rmdir("./4") = 0 [pid 5000] mkdir("./5", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 4997] <... umount2 resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5069 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./4/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5069 attached [pid 5068] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5069] chdir("./5" [pid 4999] <... umount2 resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./4/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5069] <... chdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5069] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... openat resumed>) = 4 [pid 5069] <... prctl resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./4/file1") = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./4" [pid 5069] setpgid(0, 0 [pid 5062] <... sendfile resumed>) = 1048576 [pid 4999] <... rmdir resumed>) = 0 [pid 4997] fstat(4, [pid 5069] <... setpgid resumed>) = 0 [ 82.256954][ T5067] NILFS (loop5): recovery complete [pid 4999] mkdir("./5", 0777 [pid 5069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... mkdir resumed>) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5069] <... openat resumed>) = 3 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4997] getdents64(4, [pid 5069] write(3, "1000", 4 [pid 5062] exit_group(0 [pid 4999] <... openat resumed>) = 3 [pid 5067] <... mount resumed>) = 0 [pid 5069] <... write resumed>) = 4 [pid 5062] <... exit_group resumed>) = ? [pid 5067] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5069] close(3 [pid 5067] <... openat resumed>) = 3 [pid 5062] +++ exited with 0 +++ [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] getdents64(4, [pid 5069] <... close resumed>) = 0 [pid 5067] chdir("./file1" [pid 4999] close(3 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5062, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5069] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... write resumed>) = 2097152 [pid 5067] <... chdir resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 4997] close(4 [pid 5069] <... symlink resumed>) = 0 [pid 5068] munmap(0x7f18ca796000, 2097152 [pid 5067] ioctl(4, LOOP_CLR_FD [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... restart_syscall resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 5069] memfd_create("syzkaller", 0 [pid 5068] <... munmap resumed>) = 0 [pid 5067] <... ioctl resumed>) = 0 [pid 4997] rmdir("./4/file1"./strace-static-x86_64: Process 5071 attached [pid 5069] <... memfd_create resumed>) = 3 [pid 5068] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5067] close(4 [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5071 [pid 5069] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5068] <... openat resumed>) = 4 [pid 4998] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... rmdir resumed>) = 0 [pid 5069] <... mmap resumed>) = 0x7f18ca796000 [pid 5071] chdir("./5" [pid 5068] ioctl(4, LOOP_SET_FD, 3 [pid 5067] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] getdents64(3, [pid 4998] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [ 82.278497][ T5070] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./4/binderfs") = 0 [pid 4998] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5071] <... chdir resumed>) = 0 [pid 5067] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5068] <... ioctl resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5071] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4997] close(3 [pid 5067] <... open resumed>) = 4 [pid 5071] <... prctl resumed>) = 0 [pid 5068] close(3 [pid 5067] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4997] <... close resumed>) = 0 [pid 5071] setpgid(0, 0 [pid 5068] <... close resumed>) = 0 [pid 5067] <... open resumed>) = 5 [pid 4997] rmdir("./4" [pid 5071] <... setpgid resumed>) = 0 [pid 5069] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5068] mkdir("./file1", 0777 [pid 5067] ftruncate(5, 33587195 [pid 5071] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4997] <... rmdir resumed>) = 0 [pid 5068] <... mkdir resumed>) = 0 [pid 5067] <... ftruncate resumed>) = 0 [pid 5071] <... openat resumed>) = 3 [pid 5068] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5067] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4997] mkdir("./5", 0777 [pid 5071] write(3, "1000", 4 [pid 5067] <... open resumed>) = 6 [pid 4997] <... mkdir resumed>) = 0 [pid 5071] <... write resumed>) = 4 [pid 5067] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5071] close(3 [pid 5067] <... open resumed>) = 7 [ 82.323223][ T5068] loop4: detected capacity change from 0 to 4096 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5071] <... close resumed>) = 0 [pid 5067] sendfile(6, 7, NULL, 281474978811909 [pid 5071] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4997] <... openat resumed>) = 3 [pid 5071] memfd_create("syzkaller", 0 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5071] <... memfd_create resumed>) = 3 [pid 5071] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5071] <... mmap resumed>) = 0x7f18ca796000 [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5071] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5072 ./strace-static-x86_64: Process 5072 attached [pid 5072] chdir("./5") = 0 [pid 5072] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5072] setpgid(0, 0) = 0 [ 82.364138][ T5068] NILFS (loop4): invalid segment: Checksum error in segment payload [ 82.388742][ T5068] NILFS (loop4): trying rollback from an earlier position [pid 5072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5072] write(3, "1000", 4) = 4 [pid 5072] close(3) = 0 [pid 5072] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5072] memfd_create("syzkaller", 0) = 3 [pid 5072] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5069] <... write resumed>) = 2097152 [pid 5072] <... mmap resumed>) = 0x7f18ca796000 [pid 5069] munmap(0x7f18ca796000, 2097152) = 0 [pid 5069] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5072] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 82.466177][ T5068] NILFS (loop4): recovery complete [pid 5069] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5069] close(3) = 0 [pid 5068] <... mount resumed>) = 0 [pid 5069] mkdir("./file1", 0777 [pid 5068] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5069] <... mkdir resumed>) = 0 [pid 5071] <... write resumed>) = 2097152 [pid 5069] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5068] <... openat resumed>) = 3 [pid 5068] chdir("./file1" [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./4/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5071] munmap(0x7f18ca796000, 2097152 [pid 5068] <... chdir resumed>) = 0 [pid 5071] <... munmap resumed>) = 0 [ 82.505306][ T5069] loop3: detected capacity change from 0 to 4096 [ 82.512647][ T5073] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.543417][ T5069] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 4998] umount2("./4/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5068] ioctl(4, LOOP_CLR_FD [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5071] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5068] <... ioctl resumed>) = 0 [pid 5071] <... openat resumed>) = 4 [pid 5068] close(4 [pid 4998] openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5071] ioctl(4, LOOP_SET_FD, 3 [pid 5068] <... close resumed>) = 0 [pid 4998] <... openat resumed>) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./4/file1" [pid 5068] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5068] <... open resumed>) = 4 [pid 4998] close(3 [pid 5068] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] <... close resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 5068] <... open resumed>) = 5 [pid 4998] rmdir("./4" [pid 5071] close(3 [pid 5068] ftruncate(5, 33587195 [pid 4998] <... rmdir resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5068] <... ftruncate resumed>) = 0 [pid 4998] mkdir("./5", 0777 [pid 5071] mkdir("./file1", 0777 [pid 5068] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4998] <... mkdir resumed>) = 0 [pid 5071] <... mkdir resumed>) = 0 [pid 5068] <... open resumed>) = 6 [ 82.573034][ T5069] NILFS (loop3): trying rollback from an earlier position [ 82.604517][ T5069] NILFS (loop3): recovery complete [ 82.610142][ T5071] loop2: detected capacity change from 0 to 4096 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5071] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5068] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4998] <... openat resumed>) = 3 [pid 5069] <... mount resumed>) = 0 [pid 5068] <... open resumed>) = 7 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3 [pid 5069] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5068] sendfile(6, 7, NULL, 281474978811909 [pid 4998] <... close resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5075 [pid 5069] <... openat resumed>) = 3 [pid 5069] chdir("./file1") = 0 [pid 5072] <... write resumed>) = 2097152 [pid 5069] ioctl(4, LOOP_CLR_FD) = 0 [pid 5069] close(4) = 0 [pid 5069] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [ 82.650237][ T5074] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.673335][ T5071] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5069] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5072] munmap(0x7f18ca796000, 2097152) = 0 ./strace-static-x86_64: Process 5075 attached [pid 5069] <... open resumed>) = 5 [pid 5075] chdir("./5" [pid 5069] ftruncate(5, 33587195 [pid 5075] <... chdir resumed>) = 0 [pid 5072] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5069] <... ftruncate resumed>) = 0 [pid 5075] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5072] <... openat resumed>) = 4 [pid 5069] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5075] <... prctl resumed>) = 0 [pid 5072] ioctl(4, LOOP_SET_FD, 3 [ 82.700133][ T5071] NILFS (loop2): trying rollback from an earlier position [pid 5069] <... open resumed>) = 6 [pid 5075] setpgid(0, 0 [pid 5072] <... ioctl resumed>) = 0 [pid 5069] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5075] <... setpgid resumed>) = 0 [pid 5069] <... open resumed>) = 7 [pid 5075] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5069] sendfile(6, 7, NULL, 281474978811909 [pid 5075] <... openat resumed>) = 3 [pid 5075] write(3, "1000", 4) = 4 [pid 5075] close(3) = 0 [pid 5075] symlink("/dev/binderfs", "./binderfs" [pid 5072] close(3 [pid 5075] <... symlink resumed>) = 0 [pid 5075] memfd_create("syzkaller", 0) = 3 [pid 5075] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5072] <... close resumed>) = 0 [pid 5075] <... mmap resumed>) = 0x7f18ca796000 [pid 5072] mkdir("./file1", 0777) = 0 [ 82.753478][ T5072] loop0: detected capacity change from 0 to 4096 [pid 5072] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5075] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5071] <... mount resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5071] chdir("./file1") = 0 [pid 5071] ioctl(4, LOOP_CLR_FD) = 0 [pid 5071] close(4) = 0 [pid 5071] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [ 82.839556][ T5071] NILFS (loop2): recovery complete [ 82.847305][ T5072] NILFS (loop0): invalid segment: Checksum error in segment payload [ 82.874548][ T5076] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5071] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5071] ftruncate(5, 33587195) = 0 [pid 5071] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5071] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5071] sendfile(6, 7, NULL, 281474978811909 [pid 5075] <... write resumed>) = 2097152 [ 82.924528][ T5072] NILFS (loop0): trying rollback from an earlier position [pid 5075] munmap(0x7f18ca796000, 2097152) = 0 [pid 5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5075] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5075] close(3) = 0 [pid 5075] mkdir("./file1", 0777) = 0 [ 82.998768][ T5075] loop1: detected capacity change from 0 to 4096 [ 83.031664][ T5072] NILFS (loop0): recovery complete [pid 5075] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5072] <... mount resumed>) = 0 [pid 5072] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5072] chdir("./file1") = 0 [pid 5072] ioctl(4, LOOP_CLR_FD) = 0 [pid 5072] close(4) = 0 [ 83.074059][ T5077] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 83.074252][ T5075] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5072] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5072] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5072] ftruncate(5, 33587195) = 0 [pid 5072] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5072] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 83.130975][ T5075] NILFS (loop1): trying rollback from an earlier position [ 83.263905][ T5075] NILFS (loop1): recovery complete [pid 5072] sendfile(6, 7, NULL, 281474978811909 [pid 5075] <... mount resumed>) = 0 [pid 5075] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5075] chdir("./file1") = 0 [pid 5075] ioctl(4, LOOP_CLR_FD) = 0 [pid 5075] close(4) = 0 [pid 5075] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5075] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5075] ftruncate(5, 33587195) = 0 [pid 5075] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5075] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 83.291691][ T5078] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5075] sendfile(6, 7, NULL, 281474978811909 [pid 5067] <... sendfile resumed>) = 1048576 [pid 5067] exit_group(0) = ? [pid 5067] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5067, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./5/binderfs") = 0 [pid 5002] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5002] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./5/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./5/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./5" [pid 5068] <... sendfile resumed>) = 1048576 [pid 5002] <... rmdir resumed>) = 0 [pid 5068] exit_group(0 [pid 5002] mkdir("./6", 0777 [pid 5068] <... exit_group resumed>) = ? [pid 5002] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5068] +++ exited with 0 +++ [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5068, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5002] close(3 [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5002] <... close resumed>) = 0 [pid 5001] <... restart_syscall resumed>) = 0 [pid 5001] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./5/binderfs") = 0 [pid 5001] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5079 ./strace-static-x86_64: Process 5079 attached [pid 5079] chdir("./6") = 0 [pid 5079] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5079] setpgid(0, 0) = 0 [pid 5079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5079] write(3, "1000", 4) = 4 [pid 5079] close(3) = 0 [pid 5079] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5079] memfd_create("syzkaller", 0) = 3 [pid 5079] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5069] <... sendfile resumed>) = 1048576 [pid 5069] exit_group(0) = ? [pid 5069] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5069, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./5/binderfs") = 0 [pid 5000] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... umount2 resumed>) = 0 [pid 5071] <... sendfile resumed>) = 1048576 [pid 5071] exit_group(0) = ? [pid 5071] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5071, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 4999] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] <... write resumed>) = 2097152 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./5/binderfs") = 0 [pid 4999] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./5/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5079] munmap(0x7f18ca796000, 2097152 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./5/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./5") = 0 [pid 5001] mkdir("./6", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 5079] <... munmap resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5079] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] <... clone resumed>, child_tidptr=0x555556f7b690) = 5080 [pid 5079] <... openat resumed>) = 4 [pid 5079] ioctl(4, LOOP_SET_FD, 3) = 0 ./strace-static-x86_64: Process 5080 attached [pid 5080] chdir("./6") = 0 [pid 5080] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5079] close(3 [pid 5080] <... prctl resumed>) = 0 [pid 5079] <... close resumed>) = 0 [pid 5080] setpgid(0, 0) = 0 [pid 5079] mkdir("./file1", 0777 [pid 5080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5079] <... mkdir resumed>) = 0 [pid 5080] write(3, "1000", 4 [pid 5079] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5080] <... write resumed>) = 4 [pid 5080] close(3) = 0 [pid 5080] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5080] memfd_create("syzkaller", 0) = 3 [pid 5080] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5000] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./5/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 84.244872][ T5079] loop5: detected capacity change from 0 to 4096 [pid 5000] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./5/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./5") = 0 [pid 5000] mkdir("./6", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5081 ./strace-static-x86_64: Process 5081 attached [pid 5081] chdir("./6") = 0 [pid 5081] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5081] setpgid(0, 0) = 0 [pid 5081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5081] write(3, "1000", 4) = 4 [pid 5081] close(3) = 0 [pid 5081] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5080] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5081] memfd_create("syzkaller", 0) = 3 [pid 5081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4999] <... umount2 resumed>) = 0 [pid 5072] <... sendfile resumed>) = 1048576 [ 84.332672][ T5079] NILFS (loop5): invalid segment: Checksum error in segment payload [ 84.371328][ T5079] NILFS (loop5): trying rollback from an earlier position [pid 4999] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5072] exit_group(0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5072] <... exit_group resumed>) = ? [pid 4999] lstat("./5/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5072] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5072, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 4997] restart_syscall(<... resuming interrupted clone ...> [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... restart_syscall resumed>) = 0 [pid 5081] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(4, [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] <... openat resumed>) = 3 [pid 4999] close(4 [pid 4997] fstat(3, [pid 4999] <... close resumed>) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./5/binderfs") = 0 [pid 4997] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] rmdir("./5/file1") = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./5") = 0 [pid 4999] mkdir("./6", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 5080] <... write resumed>) = 2097152 [pid 5075] <... sendfile resumed>) = 1048576 [ 84.441086][ T5079] NILFS (loop5): recovery complete [pid 5075] exit_group(0 [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5075] <... exit_group resumed>) = ? [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5083 [pid 5075] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5075, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 4998] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5079] <... mount resumed>) = 0 [pid 5079] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5080] munmap(0x7f18ca796000, 2097152 [pid 5079] chdir("./file1"./strace-static-x86_64: Process 5083 attached [pid 5081] <... write resumed>) = 2097152 [pid 5079] <... chdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] chdir("./6" [pid 5081] munmap(0x7f18ca796000, 2097152 [pid 5080] <... munmap resumed>) = 0 [pid 5079] ioctl(4, LOOP_CLR_FD) = 0 [pid 5079] close(4 [pid 5080] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5079] <... close resumed>) = 0 [pid 5080] <... openat resumed>) = 4 [pid 5079] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5080] ioctl(4, LOOP_SET_FD, 3 [pid 4998] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5083] <... chdir resumed>) = 0 [pid 5081] <... munmap resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5083] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5081] <... openat resumed>) = 4 [pid 5079] <... open resumed>) = 4 [pid 4998] fstat(3, [pid 5083] <... prctl resumed>) = 0 [pid 5081] ioctl(4, LOOP_SET_FD, 3 [pid 5079] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5079] ftruncate(5, 33587195 [pid 5083] setpgid(0, 0 [pid 5079] <... ftruncate resumed>) = 0 [pid 5079] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5079] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5079] sendfile(6, 7, NULL, 281474978811909 [pid 5080] <... ioctl resumed>) = 0 [pid 5080] close(3) = 0 [pid 5080] mkdir("./file1", 0777 [pid 5083] <... setpgid resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] getdents64(3, [pid 5081] <... ioctl resumed>) = 0 [pid 5083] <... openat resumed>) = 3 [pid 5081] close(3 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5083] write(3, "1000", 4 [pid 5081] <... close resumed>) = 0 [pid 5080] <... mkdir resumed>) = 0 [pid 4998] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... write resumed>) = 4 [pid 5080] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5081] mkdir("./file1", 0777 [pid 5083] close(3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] <... mkdir resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5081] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] lstat("./5/binderfs", [pid 4997] <... umount2 resumed>) = 0 [ 84.490917][ T5082] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.511584][ T5080] loop4: detected capacity change from 0 to 4096 [ 84.523125][ T5081] loop3: detected capacity change from 0 to 4096 [pid 5083] symlink("/dev/binderfs", "./binderfs" [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] <... symlink resumed>) = 0 [pid 4998] unlink("./5/binderfs" [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... unlink resumed>) = 0 [pid 4997] lstat("./5/file1", [pid 5083] memfd_create("syzkaller", 0 [pid 4998] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5083] <... memfd_create resumed>) = 3 [pid 4997] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... mmap resumed>) = 0x7f18ca796000 [pid 4997] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./5/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./5") = 0 [pid 4997] mkdir("./6", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 84.573730][ T5080] NILFS (loop4): invalid segment: Checksum error in segment payload [ 84.574615][ T5081] NILFS (loop3): invalid segment: Checksum error in segment payload [ 84.604319][ T5080] NILFS (loop4): trying rollback from an earlier position [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5084 ./strace-static-x86_64: Process 5084 attached [pid 5084] chdir("./6") = 0 [pid 5084] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5084] setpgid(0, 0) = 0 [pid 5084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5084] write(3, "1000", 4) = 4 [pid 5084] close(3) = 0 [ 84.635229][ T5081] NILFS (loop3): trying rollback from an earlier position [pid 5084] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5084] memfd_create("syzkaller", 0) = 3 [pid 5084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5080] <... mount resumed>) = 0 [pid 5080] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5080] chdir("./file1") = 0 [pid 5080] ioctl(4, LOOP_CLR_FD) = 0 [pid 5080] close(4) = 0 [pid 5080] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5080] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5080] ftruncate(5, 33587195) = 0 [pid 5080] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5080] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5080] sendfile(6, 7, NULL, 281474978811909 [ 84.687072][ T5080] NILFS (loop4): recovery complete [ 84.705743][ T5085] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 84.728350][ T5081] NILFS (loop3): recovery complete [pid 5084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5081] <... mount resumed>) = 0 [pid 5081] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5081] chdir("./file1") = 0 [pid 5081] ioctl(4, LOOP_CLR_FD) = 0 [ 84.756132][ T5086] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5081] close(4 [pid 5084] <... write resumed>) = 2097152 [pid 5083] <... write resumed>) = 2097152 [pid 5081] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5084] munmap(0x7f18ca796000, 2097152 [pid 5083] munmap(0x7f18ca796000, 2097152 [pid 5081] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5084] <... munmap resumed>) = 0 [pid 5083] <... munmap resumed>) = 0 [pid 5081] <... open resumed>) = 4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5084] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5081] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] lstat("./5/file1", [pid 5084] <... openat resumed>) = 4 [pid 5083] <... openat resumed>) = 4 [pid 5081] <... open resumed>) = 5 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5084] ioctl(4, LOOP_SET_FD, 3 [pid 5083] ioctl(4, LOOP_SET_FD, 3 [pid 5081] ftruncate(5, 33587195 [pid 4998] umount2("./5/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5081] <... ftruncate resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5081] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4998] openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5081] <... open resumed>) = 6 [pid 4998] <... openat resumed>) = 4 [pid 5081] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4998] fstat(4, [pid 5081] <... open resumed>) = 7 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5081] sendfile(6, 7, NULL, 281474978811909 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./5/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 5084] <... ioctl resumed>) = 0 [pid 5083] <... ioctl resumed>) = 0 [pid 4998] rmdir("./5" [pid 5084] close(3 [pid 5083] close(3 [pid 4998] <... rmdir resumed>) = 0 [pid 5083] <... close resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 4998] mkdir("./6", 0777 [pid 5084] mkdir("./file1", 0777 [pid 5083] mkdir("./file1", 0777 [pid 4998] <... mkdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 5084] <... mkdir resumed>) = 0 [pid 5083] <... mkdir resumed>) = 0 [pid 5084] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5083] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [ 84.859856][ T5084] loop0: detected capacity change from 0 to 4096 [ 84.866648][ T5083] loop2: detected capacity change from 0 to 4096 [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5087 ./strace-static-x86_64: Process 5087 attached [pid 5087] chdir("./6") = 0 [pid 5087] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5087] setpgid(0, 0) = 0 [pid 5087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5087] write(3, "1000", 4) = 4 [pid 5087] close(3) = 0 [pid 5087] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5087] memfd_create("syzkaller", 0) = 3 [pid 5087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 84.954388][ T5084] NILFS (loop0): invalid segment: Checksum error in segment payload [ 84.963198][ T5083] NILFS (loop2): invalid segment: Checksum error in segment payload [ 84.971230][ T5083] NILFS (loop2): trying rollback from an earlier position [ 84.987643][ T5084] NILFS (loop0): trying rollback from an earlier position [ 85.049737][ T5084] NILFS (loop0): recovery complete [pid 5087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5084] <... mount resumed>) = 0 [pid 5084] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5083] <... mount resumed>) = 0 [pid 5084] <... openat resumed>) = 3 [pid 5083] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5084] chdir("./file1") = 0 [pid 5083] <... openat resumed>) = 3 [pid 5084] ioctl(4, LOOP_CLR_FD [pid 5083] chdir("./file1" [pid 5084] <... ioctl resumed>) = 0 [pid 5084] close(4 [pid 5083] <... chdir resumed>) = 0 [pid 5084] <... close resumed>) = 0 [pid 5083] ioctl(4, LOOP_CLR_FD [pid 5084] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5083] <... ioctl resumed>) = 0 [pid 5083] close(4 [pid 5087] <... write resumed>) = 2097152 [pid 5084] <... open resumed>) = 4 [ 85.073447][ T5083] NILFS (loop2): recovery complete [ 85.084629][ T5088] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.096062][ T5089] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5083] <... close resumed>) = 0 [pid 5087] munmap(0x7f18ca796000, 2097152 [pid 5084] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5083] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5084] <... open resumed>) = 5 [pid 5084] ftruncate(5, 33587195) = 0 [pid 5083] <... open resumed>) = 4 [pid 5084] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5083] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5084] <... open resumed>) = 6 [pid 5083] <... open resumed>) = 5 [pid 5084] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5083] ftruncate(5, 33587195 [pid 5084] <... open resumed>) = 7 [pid 5083] <... ftruncate resumed>) = 0 [pid 5084] sendfile(6, 7, NULL, 281474978811909 [pid 5083] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5087] <... munmap resumed>) = 0 [pid 5083] <... open resumed>) = 6 [pid 5087] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5083] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5087] <... openat resumed>) = 4 [pid 5083] <... open resumed>) = 7 [pid 5087] ioctl(4, LOOP_SET_FD, 3 [pid 5083] sendfile(6, 7, NULL, 281474978811909 [pid 5087] <... ioctl resumed>) = 0 [pid 5087] close(3) = 0 [pid 5087] mkdir("./file1", 0777) = 0 [ 85.186986][ T5087] loop1: detected capacity change from 0 to 4096 [ 85.277833][ T5087] NILFS (loop1): invalid segment: Checksum error in segment payload [ 85.314184][ T5087] NILFS (loop1): trying rollback from an earlier position [pid 5087] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 5087] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5087] chdir("./file1") = 0 [ 85.395044][ T5087] NILFS (loop1): recovery complete [pid 5087] ioctl(4, LOOP_CLR_FD) = 0 [pid 5087] close(4) = 0 [pid 5087] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5087] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5087] ftruncate(5, 33587195) = 0 [pid 5087] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5087] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 85.456510][ T5090] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5087] sendfile(6, 7, NULL, 281474978811909 [pid 5079] <... sendfile resumed>) = 1048576 [pid 5079] exit_group(0) = ? [pid 5079] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5079, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./6/binderfs") = 0 [pid 5002] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5002] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./6/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./6/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./6") = 0 [pid 5002] mkdir("./7", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5091 attached , child_tidptr=0x555556f7b690) = 5091 [pid 5091] chdir("./7") = 0 [pid 5091] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5091] setpgid(0, 0) = 0 [pid 5091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5091] write(3, "1000", 4) = 4 [pid 5091] close(3) = 0 [pid 5091] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5091] memfd_create("syzkaller", 0) = 3 [pid 5080] <... sendfile resumed>) = 1048576 [pid 5080] exit_group(0) = ? [pid 5080] +++ exited with 0 +++ [pid 5091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5080, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 5091] <... mmap resumed>) = 0x7f18ca796000 [pid 5001] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./6/binderfs") = 0 [pid 5001] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5091] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5081] <... sendfile resumed>) = 1048576 [pid 5081] exit_group(0) = ? [pid 5081] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5081, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5000] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5091] <... write resumed>) = 2097152 [pid 5000] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./6/binderfs") = 0 [pid 5000] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5091] munmap(0x7f18ca796000, 2097152) = 0 [pid 5091] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5091] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5091] close(3) = 0 [pid 5091] mkdir("./file1", 0777) = 0 [pid 5091] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./6/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 86.085301][ T5091] loop5: detected capacity change from 0 to 4096 [pid 5001] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./6/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./6") = 0 [pid 5001] mkdir("./7", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5092 ./strace-static-x86_64: Process 5092 attached [ 86.143925][ T5091] NILFS (loop5): invalid segment: Checksum error in segment payload [ 86.152414][ T5091] NILFS (loop5): trying rollback from an earlier position [pid 5092] chdir("./7") = 0 [pid 5092] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5092] setpgid(0, 0) = 0 [pid 5092] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5092] write(3, "1000", 4) = 4 [pid 5092] close(3) = 0 [pid 5092] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5092] memfd_create("syzkaller", 0) = 3 [pid 5092] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./6/file1", [pid 5083] <... sendfile resumed>) = 1048576 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5083] exit_group(0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5083] <... exit_group resumed>) = ? [pid 5000] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5092] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5083] +++ exited with 0 +++ [ 86.234436][ T5091] NILFS (loop5): recovery complete [pid 5091] <... mount resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5083, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5091] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5000] fstat(4, [pid 5091] <... openat resumed>) = 3 [pid 5091] chdir("./file1" [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5091] <... chdir resumed>) = 0 [pid 5000] getdents64(4, [pid 5091] ioctl(4, LOOP_CLR_FD [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5091] <... ioctl resumed>) = 0 [pid 5000] getdents64(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5091] close(4 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5091] <... close resumed>) = 0 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./6/binderfs") = 0 [pid 4999] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5091] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5000] close(4 [pid 5091] <... open resumed>) = 4 [pid 5000] <... close resumed>) = 0 [pid 5000] rmdir("./6/file1" [pid 5091] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5000] <... rmdir resumed>) = 0 [pid 5091] <... open resumed>) = 5 [pid 5000] getdents64(3, [pid 5091] ftruncate(5, 33587195 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5091] <... ftruncate resumed>) = 0 [pid 5000] close(3 [pid 5091] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] <... close resumed>) = 0 [pid 5091] <... open resumed>) = 6 [ 86.274436][ T5093] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] rmdir("./6" [pid 5091] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5000] <... rmdir resumed>) = 0 [pid 5091] <... open resumed>) = 7 [pid 5000] mkdir("./7", 0777) = 0 [pid 5091] sendfile(6, 7, NULL, 281474978811909 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5094 [pid 5092] <... write resumed>) = 2097152 ./strace-static-x86_64: Process 5094 attached [pid 5094] chdir("./7") = 0 [pid 5094] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5094] setpgid(0, 0) = 0 [pid 5094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5094] write(3, "1000", 4) = 4 [pid 5094] close(3) = 0 [pid 5094] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5094] memfd_create("syzkaller", 0 [pid 5084] <... sendfile resumed>) = 1048576 [pid 5094] <... memfd_create resumed>) = 3 [pid 5092] munmap(0x7f18ca796000, 2097152 [pid 5084] exit_group(0 [pid 5094] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5092] <... munmap resumed>) = 0 [pid 5084] <... exit_group resumed>) = ? [pid 5094] <... mmap resumed>) = 0x7f18ca796000 [pid 5092] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5084] +++ exited with 0 +++ [pid 5092] <... openat resumed>) = 4 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5084, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [pid 5092] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 4997] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./6/binderfs") = 0 [pid 4997] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5092] close(3) = 0 [pid 5092] mkdir("./file1", 0777) = 0 [ 86.415461][ T5092] loop4: detected capacity change from 0 to 4096 [pid 5092] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5094] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./6/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5087] <... sendfile resumed>) = 1048576 [pid 4999] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5087] exit_group(0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5087] <... exit_group resumed>) = ? [pid 4999] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 5087] +++ exited with 0 +++ [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5087, si_uid=0, si_status=0, si_utime=0, si_stime=33 /* 0.33 s */} --- [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4998] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] rmdir("./6/file1" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] fstat(3, [pid 4999] getdents64(3, [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 86.487276][ T5092] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 4998] getdents64(3, [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./6/binderfs" [pid 4999] close(3 [pid 4998] <... unlink resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] rmdir("./6") = 0 [pid 4999] mkdir("./7", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5095 ./strace-static-x86_64: Process 5095 attached [ 86.541618][ T5092] NILFS (loop4): trying rollback from an earlier position [pid 5095] chdir("./7") = 0 [pid 5095] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5095] setpgid(0, 0) = 0 [pid 5095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5092] <... mount resumed>) = 0 [pid 5094] <... write resumed>) = 2097152 [pid 5094] munmap(0x7f18ca796000, 2097152 [pid 5095] <... openat resumed>) = 3 [pid 5095] write(3, "1000", 4 [pid 5092] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5095] <... write resumed>) = 4 [pid 5092] <... openat resumed>) = 3 [pid 5095] close(3) = 0 [pid 5092] chdir("./file1" [pid 5095] symlink("/dev/binderfs", "./binderfs" [pid 5092] <... chdir resumed>) = 0 [pid 5094] <... munmap resumed>) = 0 [pid 5095] <... symlink resumed>) = 0 [pid 5092] ioctl(4, LOOP_CLR_FD [pid 5095] memfd_create("syzkaller", 0 [pid 5094] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5092] <... ioctl resumed>) = 0 [pid 5095] <... memfd_create resumed>) = 3 [pid 5094] <... openat resumed>) = 4 [pid 5092] close(4 [pid 5095] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5094] ioctl(4, LOOP_SET_FD, 3 [pid 5092] <... close resumed>) = 0 [pid 5094] <... ioctl resumed>) = 0 [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./6/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5095] <... mmap resumed>) = 0x7f18ca796000 [pid 5092] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4997] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5092] <... open resumed>) = 4 [pid 4997] <... openat resumed>) = 4 [pid 5092] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4997] fstat(4, [pid 5092] <... open resumed>) = 5 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5092] ftruncate(5, 33587195 [pid 4997] getdents64(4, [pid 5092] <... ftruncate resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5092] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4997] getdents64(4, [pid 5092] <... open resumed>) = 6 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5092] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4997] close(4 [pid 5092] <... open resumed>) = 7 [pid 4997] <... close resumed>) = 0 [pid 5092] sendfile(6, 7, NULL, 281474978811909 [pid 4997] rmdir("./6/file1" [pid 5094] close(3 [pid 4997] <... rmdir resumed>) = 0 [pid 5094] <... close resumed>) = 0 [pid 4997] getdents64(3, [pid 5094] mkdir("./file1", 0777 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5094] <... mkdir resumed>) = 0 [pid 4997] close(3 [pid 5094] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4997] <... close resumed>) = 0 [ 86.606908][ T5092] NILFS (loop4): recovery complete [ 86.612901][ T5096] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.643248][ T5094] loop3: detected capacity change from 0 to 4096 [pid 4997] rmdir("./6") = 0 [pid 4997] mkdir("./7", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5097 ./strace-static-x86_64: Process 5097 attached [pid 5095] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5097] chdir("./7") = 0 [pid 5097] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5097] setpgid(0, 0) = 0 [pid 5097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5097] write(3, "1000", 4) = 4 [pid 5097] close(3) = 0 [pid 5097] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5097] memfd_create("syzkaller", 0) = 3 [pid 5097] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4998] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./6/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./6/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 86.731059][ T5094] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./6/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./6") = 0 [pid 4998] mkdir("./7", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5098 [ 86.785433][ T5094] NILFS (loop3): trying rollback from an earlier position [pid 5097] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5098 attached [pid 5095] <... write resumed>) = 2097152 [pid 5098] chdir("./7" [pid 5095] munmap(0x7f18ca796000, 2097152 [pid 5098] <... chdir resumed>) = 0 [pid 5095] <... munmap resumed>) = 0 [pid 5098] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5095] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5098] setpgid(0, 0) = 0 [pid 5095] <... openat resumed>) = 4 [pid 5098] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5095] ioctl(4, LOOP_SET_FD, 3 [ 86.835466][ T5094] NILFS (loop3): recovery complete [pid 5098] write(3, "1000", 4) = 4 [pid 5098] close(3) = 0 [pid 5098] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5098] memfd_create("syzkaller", 0) = 3 [pid 5098] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5094] <... mount resumed>) = 0 [pid 5095] <... ioctl resumed>) = 0 [pid 5094] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5095] close(3 [pid 5094] <... openat resumed>) = 3 [pid 5094] chdir("./file1" [pid 5095] <... close resumed>) = 0 [pid 5094] <... chdir resumed>) = 0 [pid 5094] ioctl(4, LOOP_CLR_FD [pid 5095] mkdir("./file1", 0777 [pid 5094] <... ioctl resumed>) = 0 [pid 5094] close(4 [pid 5095] <... mkdir resumed>) = 0 [pid 5094] <... close resumed>) = 0 [pid 5094] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5095] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5094] <... open resumed>) = 4 [pid 5094] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5097] <... write resumed>) = 2097152 [pid 5094] <... open resumed>) = 5 [pid 5094] ftruncate(5, 33587195) = 0 [pid 5098] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5094] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5094] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 86.870209][ T5095] loop2: detected capacity change from 0 to 4096 [ 86.886978][ T5099] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5094] sendfile(6, 7, NULL, 281474978811909 [pid 5097] munmap(0x7f18ca796000, 2097152) = 0 [pid 5097] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5097] ioctl(4, LOOP_SET_FD, 3) = 0 [ 86.943425][ T5095] NILFS (loop2): invalid segment: Checksum error in segment payload [ 86.965558][ T5097] loop0: detected capacity change from 0 to 4096 [pid 5097] close(3) = 0 [pid 5097] mkdir("./file1", 0777) = 0 [ 86.988471][ T5095] NILFS (loop2): trying rollback from an earlier position [pid 5097] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5098] <... write resumed>) = 2097152 [pid 5098] munmap(0x7f18ca796000, 2097152) = 0 [pid 5098] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5098] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5098] close(3) = 0 [ 87.037944][ T5097] NILFS (loop0): invalid segment: Checksum error in segment payload [ 87.053272][ T5095] NILFS (loop2): recovery complete [ 87.062240][ T5098] loop1: detected capacity change from 0 to 4096 [ 87.077700][ T5097] NILFS (loop0): trying rollback from an earlier position [pid 5098] mkdir("./file1", 0777 [pid 5095] <... mount resumed>) = 0 [pid 5095] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5098] <... mkdir resumed>) = 0 [pid 5098] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5095] <... openat resumed>) = 3 [pid 5095] chdir("./file1") = 0 [pid 5095] ioctl(4, LOOP_CLR_FD) = 0 [pid 5095] close(4) = 0 [pid 5095] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5095] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5095] ftruncate(5, 33587195) = 0 [pid 5095] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5095] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 87.090553][ T5100] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.121859][ T5098] NILFS (loop1): invalid segment: Checksum error in segment payload [ 87.174888][ T5097] NILFS (loop0): recovery complete [ 87.193289][ T5098] NILFS (loop1): trying rollback from an earlier position [pid 5095] sendfile(6, 7, NULL, 281474978811909 [pid 5097] <... mount resumed>) = 0 [pid 5097] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5097] chdir("./file1") = 0 [pid 5097] ioctl(4, LOOP_CLR_FD) = 0 [pid 5097] close(4) = 0 [pid 5097] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5097] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5097] ftruncate(5, 33587195) = 0 [pid 5097] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5097] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 87.214785][ T5101] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5097] sendfile(6, 7, NULL, 281474978811909 [pid 5098] <... mount resumed>) = 0 [pid 5098] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [ 87.275291][ T5098] NILFS (loop1): recovery complete [pid 5098] chdir("./file1") = 0 [pid 5098] ioctl(4, LOOP_CLR_FD) = 0 [pid 5098] close(4) = 0 [pid 5098] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5098] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5098] ftruncate(5, 33587195) = 0 [pid 5098] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [ 87.313252][ T5102] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5098] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5098] sendfile(6, 7, NULL, 281474978811909 [pid 5091] <... sendfile resumed>) = 1048576 [pid 5091] exit_group(0) = ? [pid 5091] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5091, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./7/binderfs") = 0 [pid 5002] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5002] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./7/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./7/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./7") = 0 [pid 5002] mkdir("./8", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5092] <... sendfile resumed>) = 1048576 [pid 5002] <... openat resumed>) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 5092] exit_group(0 [pid 5002] <... close resumed>) = 0 [pid 5092] <... exit_group resumed>) = ? [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5092] +++ exited with 0 +++ [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5103 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5092, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 ./strace-static-x86_64: Process 5103 attached [pid 5103] chdir("./8") = 0 [pid 5001] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5103] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5103] <... prctl resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5103] setpgid(0, 0 [pid 5001] <... openat resumed>) = 3 [pid 5103] <... setpgid resumed>) = 0 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] getdents64(3, [pid 5103] <... openat resumed>) = 3 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5103] write(3, "1000", 4 [pid 5001] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5103] <... write resumed>) = 4 [pid 5001] lstat("./7/binderfs", [pid 5103] close(3 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5103] <... close resumed>) = 0 [pid 5001] unlink("./7/binderfs") = 0 [pid 5103] symlink("/dev/binderfs", "./binderfs" [pid 5001] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5103] <... symlink resumed>) = 0 [pid 5103] memfd_create("syzkaller", 0) = 3 [pid 5103] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5103] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5094] <... sendfile resumed>) = 1048576 [pid 5094] exit_group(0) = ? [pid 5094] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5094, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5000] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5103] <... write resumed>) = 2097152 [pid 5001] <... umount2 resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5000] fstat(3, [pid 5103] munmap(0x7f18ca796000, 2097152 [pid 5001] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./7/binderfs", [pid 5103] <... munmap resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] lstat("./7/file1", [pid 5000] unlink("./7/binderfs" [pid 5103] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 5001] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5103] <... openat resumed>) = 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5103] ioctl(4, LOOP_SET_FD, 3 [pid 5001] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./7/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./7") = 0 [pid 5001] mkdir("./8", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 88.104458][ T5103] loop5: detected capacity change from 0 to 4096 [pid 5001] close(3 [pid 5103] <... ioctl resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5103] close(3 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5103] <... close resumed>) = 0 [pid 5103] mkdir("./file1", 0777 [pid 5001] <... clone resumed>, child_tidptr=0x555556f7b690) = 5104 ./strace-static-x86_64: Process 5104 attached [pid 5103] <... mkdir resumed>) = 0 [pid 5000] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5103] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5104] chdir("./8" [pid 5000] lstat("./7/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./7/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5104] <... chdir resumed>) = 0 [pid 5000] close(3) = 0 [pid 5104] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] rmdir("./7" [pid 5104] <... prctl resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5000] mkdir("./8", 0777) = 0 [pid 5104] setpgid(0, 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5104] <... setpgid resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5105 ./strace-static-x86_64: Process 5105 attached [pid 5104] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5105] chdir("./8" [pid 5104] write(3, "1000", 4 [pid 5105] <... chdir resumed>) = 0 [pid 5105] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5104] <... write resumed>) = 4 [pid 5105] <... prctl resumed>) = 0 [pid 5104] close(3 [pid 5095] <... sendfile resumed>) = 1048576 [pid 5105] setpgid(0, 0 [pid 5095] exit_group(0 [pid 5105] <... setpgid resumed>) = 0 [pid 5104] <... close resumed>) = 0 [pid 5095] <... exit_group resumed>) = ? [pid 5105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5095] +++ exited with 0 +++ [pid 5105] <... openat resumed>) = 3 [pid 5105] write(3, "1000", 4 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5095, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- [pid 5105] <... write resumed>) = 4 [ 88.193088][ T5103] NILFS (loop5): invalid segment: Checksum error in segment payload [ 88.227223][ T5103] NILFS (loop5): trying rollback from an earlier position [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 5105] close(3 [pid 5104] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... restart_syscall resumed>) = 0 [pid 5105] <... close resumed>) = 0 [pid 5104] <... symlink resumed>) = 0 [pid 5105] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5104] memfd_create("syzkaller", 0 [pid 5103] <... mount resumed>) = 0 [pid 4999] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5105] memfd_create("syzkaller", 0 [pid 5103] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5105] <... memfd_create resumed>) = 3 [pid 5103] <... openat resumed>) = 3 [pid 4999] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5105] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5103] chdir("./file1" [pid 4999] <... openat resumed>) = 3 [pid 5105] <... mmap resumed>) = 0x7f18ca796000 [pid 5104] <... memfd_create resumed>) = 3 [pid 5103] <... chdir resumed>) = 0 [pid 4999] fstat(3, [pid 5104] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5103] ioctl(4, LOOP_CLR_FD [pid 5097] <... sendfile resumed>) = 1048576 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5103] <... ioctl resumed>) = 0 [pid 5097] exit_group(0 [pid 4999] getdents64(3, [pid 5103] close(4 [pid 5097] <... exit_group resumed>) = ? [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5103] <... close resumed>) = 0 [pid 5097] +++ exited with 0 +++ [pid 4999] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5103] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5103] <... open resumed>) = 4 [pid 4999] lstat("./7/binderfs", [pid 5103] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5097, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5103] <... open resumed>) = 5 [pid 4999] unlink("./7/binderfs" [pid 4997] restart_syscall(<... resuming interrupted clone ...> [pid 5103] ftruncate(5, 33587195 [pid 4999] <... unlink resumed>) = 0 [pid 4997] <... restart_syscall resumed>) = 0 [pid 5103] <... ftruncate resumed>) = 0 [pid 4999] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5103] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5104] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5103] <... open resumed>) = 6 [pid 5103] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 88.263494][ T5103] NILFS (loop5): recovery complete [ 88.282414][ T5106] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5103] sendfile(6, 7, NULL, 281474978811909 [pid 4997] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5105] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4997] unlink("./7/binderfs") = 0 [pid 4997] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5104] <... write resumed>) = 2097152 [pid 5105] <... write resumed>) = 2097152 [pid 5105] munmap(0x7f18ca796000, 2097152 [pid 5104] munmap(0x7f18ca796000, 2097152 [pid 5105] <... munmap resumed>) = 0 [pid 5104] <... munmap resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5105] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5105] ioctl(4, LOOP_SET_FD, 3 [pid 5104] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4999] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5104] <... openat resumed>) = 4 [pid 5104] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./7/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 5098] <... sendfile resumed>) = 1048576 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4 [pid 5105] <... ioctl resumed>) = 0 [pid 5105] close(3 [pid 4999] <... close resumed>) = 0 [pid 5105] <... close resumed>) = 0 [pid 5104] <... ioctl resumed>) = 0 [pid 5098] exit_group(0 [pid 4999] rmdir("./7/file1" [pid 5105] mkdir("./file1", 0777 [pid 5104] close(3 [pid 5098] <... exit_group resumed>) = ? [pid 4999] <... rmdir resumed>) = 0 [pid 5105] <... mkdir resumed>) = 0 [pid 5104] <... close resumed>) = 0 [pid 5098] +++ exited with 0 +++ [pid 4999] getdents64(3, [pid 5105] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5104] mkdir("./file1", 0777 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5098, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 4997] <... umount2 resumed>) = 0 [pid 5104] <... mkdir resumed>) = 0 [pid 4999] close(3 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5104] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4999] <... close resumed>) = 0 [pid 4998] <... restart_syscall resumed>) = 0 [pid 4997] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] rmdir("./7") = 0 [ 88.476920][ T5105] loop3: detected capacity change from 0 to 4096 [ 88.497105][ T5104] loop4: detected capacity change from 0 to 4096 [pid 4999] mkdir("./8", 0777 [pid 4998] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... mkdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... openat resumed>) = 3 [pid 4998] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4998] fstat(3, [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] lstat("./7/file1", [pid 4999] close(3 [pid 4998] getdents64(3, [pid 4999] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5107 [pid 4998] lstat("./7/binderfs", [pid 4997] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] unlink("./7/binderfs" [pid 4997] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... unlink resumed>) = 0 [pid 4997] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5107 attached [pid 4998] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] fstat(4, [pid 5107] chdir("./8") = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5107] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4997] getdents64(4, [pid 5107] setpgid(0, 0) = 0 [pid 5107] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5107] write(3, "1000", 4) = 4 [pid 5107] close(3) = 0 [pid 5107] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5107] memfd_create("syzkaller", 0) = 3 [pid 5107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./7/file1") = 0 [ 88.550218][ T5104] NILFS (loop4): invalid segment: Checksum error in segment payload [ 88.556396][ T5105] NILFS (loop3): invalid segment: Checksum error in segment payload [ 88.573099][ T5104] NILFS (loop4): trying rollback from an earlier position [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./7") = 0 [pid 4997] mkdir("./8", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5108 ./strace-static-x86_64: Process 5108 attached [pid 5108] chdir("./8") = 0 [pid 5107] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5108] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5108] setpgid(0, 0) = 0 [pid 5108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5108] write(3, "1000", 4) = 4 [pid 5108] close(3) = 0 [pid 5108] symlink("/dev/binderfs", "./binderfs") = 0 [ 88.624303][ T5105] NILFS (loop3): trying rollback from an earlier position [ 88.646872][ T5104] NILFS (loop4): recovery complete [pid 5104] <... mount resumed>) = 0 [pid 5108] memfd_create("syzkaller", 0 [pid 5104] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5108] <... memfd_create resumed>) = 3 [pid 5104] <... openat resumed>) = 3 [pid 5108] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5104] chdir("./file1" [pid 4998] <... umount2 resumed>) = 0 [pid 5108] <... mmap resumed>) = 0x7f18ca796000 [pid 5104] <... chdir resumed>) = 0 [pid 4998] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5104] ioctl(4, LOOP_CLR_FD) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5104] close(4 [pid 4998] lstat("./7/file1", [pid 5104] <... close resumed>) = 0 [pid 5104] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5104] <... open resumed>) = 4 [pid 4998] umount2("./7/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5104] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5104] <... open resumed>) = 5 [pid 4998] openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5107] <... write resumed>) = 2097152 [ 88.693326][ T5109] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.733330][ T5105] NILFS (loop3): recovery complete [pid 5104] ftruncate(5, 33587195 [pid 4998] <... openat resumed>) = 4 [pid 5104] <... ftruncate resumed>) = 0 [pid 5105] <... mount resumed>) = 0 [pid 4998] fstat(4, [pid 5104] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5105] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5105] <... openat resumed>) = 3 [pid 5104] <... open resumed>) = 6 [pid 4998] getdents64(4, [pid 5105] chdir("./file1" [pid 5104] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5105] <... chdir resumed>) = 0 [pid 5104] <... open resumed>) = 7 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5105] ioctl(4, LOOP_CLR_FD [pid 5104] sendfile(6, 7, NULL, 281474978811909 [pid 4998] getdents64(4, [pid 5105] <... ioctl resumed>) = 0 [pid 5108] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5107] munmap(0x7f18ca796000, 2097152 [pid 5105] close(4 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5107] <... munmap resumed>) = 0 [pid 5105] <... close resumed>) = 0 [pid 5105] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] close(4 [pid 5107] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5105] <... open resumed>) = 4 [pid 5107] <... openat resumed>) = 4 [pid 5105] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] <... close resumed>) = 0 [pid 5107] ioctl(4, LOOP_SET_FD, 3 [pid 5105] <... open resumed>) = 5 [ 88.760895][ T5110] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] rmdir("./7/file1" [pid 5107] <... ioctl resumed>) = 0 [pid 5105] ftruncate(5, 33587195 [pid 5107] close(3 [pid 5105] <... ftruncate resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5107] <... close resumed>) = 0 [pid 5105] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4998] getdents64(3, [pid 5107] mkdir("./file1", 0777 [pid 5105] <... open resumed>) = 6 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5107] <... mkdir resumed>) = 0 [pid 5105] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4998] close(3 [pid 5107] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5105] <... open resumed>) = 7 [pid 4998] <... close resumed>) = 0 [pid 5105] sendfile(6, 7, NULL, 281474978811909 [pid 4998] rmdir("./7" [pid 5108] <... write resumed>) = 2097152 [pid 4998] <... rmdir resumed>) = 0 [pid 5108] munmap(0x7f18ca796000, 2097152 [pid 4998] mkdir("./8", 0777 [pid 5108] <... munmap resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5108] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5108] <... openat resumed>) = 4 [pid 4998] <... openat resumed>) = 3 [ 88.803825][ T5107] loop2: detected capacity change from 0 to 4096 [pid 5108] ioctl(4, LOOP_SET_FD, 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5108] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5111 attached [pid 5108] close(3 [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5111 [pid 5108] <... close resumed>) = 0 [pid 5108] mkdir("./file1", 0777) = 0 [pid 5108] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5111] chdir("./8") = 0 [pid 5111] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5111] setpgid(0, 0) = 0 [ 88.862479][ T5108] loop0: detected capacity change from 0 to 4096 [ 88.872433][ T5107] NILFS (loop2): invalid segment: Checksum error in segment payload [ 88.896504][ T5107] NILFS (loop2): trying rollback from an earlier position [pid 5111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5111] write(3, "1000", 4) = 4 [pid 5111] close(3) = 0 [pid 5111] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5111] memfd_create("syzkaller", 0 [pid 5107] <... mount resumed>) = 0 [pid 5111] <... memfd_create resumed>) = 3 [pid 5107] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5111] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5107] <... openat resumed>) = 3 [ 88.939219][ T5107] NILFS (loop2): recovery complete [ 88.955869][ T5108] NILFS (loop0): invalid segment: Checksum error in segment payload [ 88.964492][ T5112] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5107] chdir("./file1") = 0 [pid 5107] ioctl(4, LOOP_CLR_FD) = 0 [pid 5107] close(4 [pid 5111] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5107] <... close resumed>) = 0 [pid 5107] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5107] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5107] ftruncate(5, 33587195) = 0 [ 88.995371][ T5108] NILFS (loop0): trying rollback from an earlier position [pid 5107] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5107] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5107] sendfile(6, 7, NULL, 281474978811909 [pid 5111] <... write resumed>) = 2097152 [pid 5111] munmap(0x7f18ca796000, 2097152) = 0 [pid 5111] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 89.128040][ T5108] NILFS (loop0): recovery complete [pid 5111] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5108] <... mount resumed>) = 0 [pid 5108] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5108] chdir("./file1") = 0 [pid 5108] ioctl(4, LOOP_CLR_FD) = 0 [pid 5108] close(4 [pid 5111] close(3 [pid 5108] <... close resumed>) = 0 [pid 5108] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5111] <... close resumed>) = 0 [pid 5111] mkdir("./file1", 0777 [pid 5108] <... open resumed>) = 4 [pid 5108] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5111] <... mkdir resumed>) = 0 [pid 5108] ftruncate(5, 33587195 [pid 5111] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5108] <... ftruncate resumed>) = 0 [pid 5108] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [ 89.163651][ T5111] loop1: detected capacity change from 0 to 4096 [pid 5108] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 89.217909][ T5113] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.222901][ T5111] NILFS (loop1): invalid segment: Checksum error in segment payload [ 89.309068][ T5111] NILFS (loop1): trying rollback from an earlier position [ 89.393261][ T5111] NILFS (loop1): recovery complete [pid 5108] sendfile(6, 7, NULL, 281474978811909 [pid 5111] <... mount resumed>) = 0 [pid 5111] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5111] chdir("./file1") = 0 [pid 5111] ioctl(4, LOOP_CLR_FD) = 0 [pid 5111] close(4) = 0 [pid 5111] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5111] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5111] ftruncate(5, 33587195) = 0 [pid 5111] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5111] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 89.430869][ T5114] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5111] sendfile(6, 7, NULL, 281474978811909 [pid 5103] <... sendfile resumed>) = 1048576 [pid 5103] exit_group(0) = ? [pid 5103] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5103, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./8/binderfs") = 0 [pid 5002] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5002] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./8/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./8/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./8") = 0 [pid 5002] mkdir("./9", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5115 [pid 5104] <... sendfile resumed>) = 1048576 [pid 5104] exit_group(0) = ? [pid 5104] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5104, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5115 attached ) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5115] chdir("./9" [pid 5001] <... openat resumed>) = 3 [pid 5115] <... chdir resumed>) = 0 [pid 5001] fstat(3, [pid 5115] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5115] <... prctl resumed>) = 0 [pid 5001] getdents64(3, [pid 5115] setpgid(0, 0) = 0 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5115] <... openat resumed>) = 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5115] write(3, "1000", 4 [pid 5001] lstat("./8/binderfs", [pid 5115] <... write resumed>) = 4 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5115] close(3 [pid 5001] unlink("./8/binderfs" [pid 5115] <... close resumed>) = 0 [pid 5115] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5001] <... unlink resumed>) = 0 [pid 5115] memfd_create("syzkaller", 0 [pid 5001] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5115] <... memfd_create resumed>) = 3 [pid 5115] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5115] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5105] <... sendfile resumed>) = 1048576 [pid 5105] exit_group(0 [pid 5115] <... write resumed>) = 2097152 [pid 5105] <... exit_group resumed>) = ? [pid 5105] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5105, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5000] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 5115] munmap(0x7f18ca796000, 2097152 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./8/binderfs") = 0 [pid 5115] <... munmap resumed>) = 0 [pid 5000] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5115] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5115] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5115] close(3) = 0 [pid 5115] mkdir("./file1", 0777) = 0 [pid 5115] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./8/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 89.993181][ T5115] loop5: detected capacity change from 0 to 4096 [pid 5001] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./8/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./8") = 0 [pid 5001] mkdir("./9", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5116 ./strace-static-x86_64: Process 5116 attached [pid 5116] chdir("./9") = 0 [pid 5116] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5116] setpgid(0, 0) = 0 [pid 5116] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 90.058021][ T5115] NILFS (loop5): invalid segment: Checksum error in segment payload [ 90.091769][ T5115] NILFS (loop5): trying rollback from an earlier position [pid 5116] write(3, "1000", 4) = 4 [pid 5116] close(3) = 0 [pid 5116] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5116] memfd_create("syzkaller", 0) = 3 [pid 5116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5107] <... sendfile resumed>) = 1048576 [pid 5107] exit_group(0) = ? [pid 5107] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5107, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 4999] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 4999] getdents64(3, [pid 5000] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] lstat("./8/file1", [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./8/binderfs", [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] unlink("./8/binderfs" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... unlink resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... openat resumed>) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [ 90.193731][ T5115] NILFS (loop5): recovery complete [pid 5000] rmdir("./8/file1") = 0 [pid 5000] getdents64(3, [pid 5116] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./8" [pid 5115] <... mount resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5115] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5115] chdir("./file1") = 0 [pid 5115] ioctl(4, LOOP_CLR_FD) = 0 [pid 5115] close(4) = 0 [pid 5115] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5115] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5115] ftruncate(5, 33587195) = 0 [pid 5115] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5115] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5115] sendfile(6, 7, NULL, 281474978811909 [pid 5000] mkdir("./9", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5118 [ 90.248029][ T5117] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds ./strace-static-x86_64: Process 5118 attached [pid 5118] chdir("./9") = 0 [pid 5118] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5118] setpgid(0, 0) = 0 [pid 5118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5118] write(3, "1000", 4) = 4 [pid 5118] close(3) = 0 [pid 5118] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5116] <... write resumed>) = 2097152 [pid 5118] memfd_create("syzkaller", 0) = 3 [pid 5118] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5116] munmap(0x7f18ca796000, 2097152) = 0 [pid 5116] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5116] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5108] <... sendfile resumed>) = 1048576 [pid 5108] exit_group(0) = ? [pid 5118] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5108] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5108, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 4997] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4997] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5116] close(3 [pid 4997] getdents64(3, [pid 5116] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5116] mkdir("./file1", 0777 [pid 4997] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5116] <... mkdir resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5116] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4997] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./8/binderfs") = 0 [pid 4999] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 90.384239][ T5116] loop4: detected capacity change from 0 to 4096 [pid 4999] lstat("./8/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./8/file1" [pid 5111] <... sendfile resumed>) = 1048576 [pid 4999] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5111] exit_group(0 [pid 4999] close(3 [pid 5111] <... exit_group resumed>) = ? [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./8" [pid 5111] +++ exited with 0 +++ [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./9", 0777 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5111, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4998] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5118] <... write resumed>) = 2097152 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5118] munmap(0x7f18ca796000, 2097152 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] close(3 [pid 4998] <... openat resumed>) = 3 [pid 4999] <... close resumed>) = 0 [pid 4998] fstat(3, [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5119 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5118] <... munmap resumed>) = 0 [pid 4998] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5118] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4998] lstat("./8/binderfs", [pid 5118] <... openat resumed>) = 4 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5118] ioctl(4, LOOP_SET_FD, 3 [ 90.455145][ T5116] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 4998] unlink("./8/binderfs") = 0 ./strace-static-x86_64: Process 5119 attached [pid 4998] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5119] chdir("./9") = 0 [pid 5119] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5119] setpgid(0, 0) = 0 [pid 5119] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5119] write(3, "1000", 4) = 4 [pid 5119] close(3) = 0 [pid 5119] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5119] memfd_create("syzkaller", 0) = 3 [pid 5119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5118] <... ioctl resumed>) = 0 [pid 5118] close(3) = 0 [pid 5118] mkdir("./file1", 0777) = 0 [ 90.509320][ T5118] loop3: detected capacity change from 0 to 4096 [ 90.512309][ T5116] NILFS (loop4): trying rollback from an earlier position [pid 5118] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4997] <... umount2 resumed>) = 0 [ 90.586453][ T5118] NILFS (loop3): invalid segment: Checksum error in segment payload [ 90.620386][ T5116] NILFS (loop4): recovery complete [pid 4997] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./8/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 4997] close(4 [pid 4998] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] rmdir("./8/file1" [pid 4998] lstat("./8/file1", [pid 4997] <... rmdir resumed>) = 0 [ 90.636576][ T5118] NILFS (loop3): trying rollback from an earlier position [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, [pid 5116] <... mount resumed>) = 0 [pid 4998] umount2("./8/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5116] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] close(3 [pid 5116] <... openat resumed>) = 3 [pid 4998] openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5116] chdir("./file1" [pid 4997] <... close resumed>) = 0 [pid 5116] <... chdir resumed>) = 0 [pid 4998] <... openat resumed>) = 4 [pid 5116] ioctl(4, LOOP_CLR_FD) = 0 [pid 5116] close(4) = 0 [pid 5116] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4997] rmdir("./8" [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 5116] <... open resumed>) = 4 [pid 4998] getdents64(4, [pid 4997] mkdir("./9", 0777 [pid 5116] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5116] <... open resumed>) = 5 [pid 4998] getdents64(4, [pid 4997] <... mkdir resumed>) = 0 [pid 5116] ftruncate(5, 33587195 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5116] <... ftruncate resumed>) = 0 [pid 4998] close(4 [pid 5116] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4997] <... openat resumed>) = 3 [pid 4998] <... close resumed>) = 0 [pid 5119] <... write resumed>) = 2097152 [pid 5116] <... open resumed>) = 6 [pid 4998] rmdir("./8/file1" [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5119] munmap(0x7f18ca796000, 2097152 [pid 5116] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5119] <... munmap resumed>) = 0 [pid 5116] <... open resumed>) = 7 [ 90.682519][ T5120] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.703178][ T5118] NILFS (loop3): recovery complete [pid 4998] <... rmdir resumed>) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5118] <... mount resumed>) = 0 [pid 5116] sendfile(6, 7, NULL, 281474978811909 [pid 4998] getdents64(3, [pid 4997] close(3 [pid 5119] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5119] ioctl(4, LOOP_SET_FD, 3 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] <... close resumed>) = 0 [pid 5118] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4998] close(3 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5118] <... openat resumed>) = 3 [pid 4998] <... close resumed>) = 0 [pid 4998] rmdir("./8" [pid 5118] chdir("./file1" [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5122 [pid 5118] <... chdir resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5118] ioctl(4, LOOP_CLR_FD [pid 4998] mkdir("./9", 0777 [pid 5118] <... ioctl resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5118] close(4 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5118] <... close resumed>) = 0 [pid 5118] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] <... openat resumed>) = 3 [pid 5118] <... open resumed>) = 4 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5118] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5118] <... open resumed>) = 5 [pid 4998] close(3 [pid 5118] ftruncate(5, 33587195 [pid 4998] <... close resumed>) = 0 [pid 5118] <... ftruncate resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5122 attached [pid 5118] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5119] <... ioctl resumed>) = 0 [pid 5119] close(3 [pid 5118] <... open resumed>) = 6 [pid 5122] chdir("./9" [pid 5119] <... close resumed>) = 0 [pid 5118] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5123 [pid 5122] <... chdir resumed>) = 0 [pid 5119] mkdir("./file1", 0777 [pid 5118] <... open resumed>) = 7 [pid 5122] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5119] <... mkdir resumed>) = 0 [pid 5118] sendfile(6, 7, NULL, 281474978811909./strace-static-x86_64: Process 5123 attached [pid 5122] <... prctl resumed>) = 0 [pid 5119] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5123] chdir("./9" [pid 5122] setpgid(0, 0 [pid 5123] <... chdir resumed>) = 0 [pid 5122] <... setpgid resumed>) = 0 [pid 5123] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5122] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 90.734777][ T5121] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.750347][ T5119] loop2: detected capacity change from 0 to 4096 [pid 5123] setpgid(0, 0 [pid 5122] <... openat resumed>) = 3 [pid 5123] <... setpgid resumed>) = 0 [pid 5122] write(3, "1000", 4 [pid 5123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5122] <... write resumed>) = 4 [pid 5123] <... openat resumed>) = 3 [pid 5122] close(3 [pid 5123] write(3, "1000", 4 [pid 5122] <... close resumed>) = 0 [pid 5123] <... write resumed>) = 4 [pid 5122] symlink("/dev/binderfs", "./binderfs" [pid 5123] close(3 [pid 5122] <... symlink resumed>) = 0 [pid 5123] <... close resumed>) = 0 [pid 5122] memfd_create("syzkaller", 0 [pid 5123] symlink("/dev/binderfs", "./binderfs" [pid 5122] <... memfd_create resumed>) = 3 [pid 5123] <... symlink resumed>) = 0 [pid 5122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5123] memfd_create("syzkaller", 0 [pid 5122] <... mmap resumed>) = 0x7f18ca796000 [pid 5123] <... memfd_create resumed>) = 3 [pid 5123] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 90.817575][ T5119] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5122] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 90.879012][ T5119] NILFS (loop2): trying rollback from an earlier position [pid 5123] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5122] <... write resumed>) = 2097152 [pid 5123] <... write resumed>) = 2097152 [pid 5123] munmap(0x7f18ca796000, 2097152) = 0 [pid 5122] munmap(0x7f18ca796000, 2097152) = 0 [pid 5122] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 90.958057][ T5119] NILFS (loop2): recovery complete [pid 5122] ioctl(4, LOOP_SET_FD, 3 [pid 5123] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5123] ioctl(4, LOOP_SET_FD, 3 [pid 5119] <... mount resumed>) = 0 [pid 5119] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5122] <... ioctl resumed>) = 0 [pid 5122] close(3) = 0 [pid 5122] mkdir("./file1", 0777) = 0 [pid 5122] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5123] <... ioctl resumed>) = 0 [pid 5123] close(3) = 0 [pid 5123] mkdir("./file1", 0777) = 0 [ 90.994499][ T5122] loop0: detected capacity change from 0 to 4096 [ 91.013451][ T5123] loop1: detected capacity change from 0 to 4096 [ 91.020869][ T5124] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5123] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5119] <... openat resumed>) = 3 [ 91.043676][ T5122] NILFS (loop0): invalid segment: Checksum error in segment payload [ 91.053556][ T5122] NILFS (loop0): trying rollback from an earlier position [ 91.074614][ T5122] NILFS (loop0): recovery complete [ 91.080096][ T5123] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5119] chdir("./file1" [pid 5122] <... mount resumed>) = 0 [pid 5119] <... chdir resumed>) = 0 [pid 5122] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5119] ioctl(4, LOOP_CLR_FD) = 0 [pid 5122] <... openat resumed>) = 3 [pid 5119] close(4 [pid 5122] chdir("./file1" [pid 5119] <... close resumed>) = 0 [pid 5122] <... chdir resumed>) = 0 [pid 5119] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5122] ioctl(4, LOOP_CLR_FD) = 0 [pid 5119] <... open resumed>) = 4 [pid 5122] close(4 [pid 5119] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5122] <... close resumed>) = 0 [pid 5119] ftruncate(5, 33587195 [pid 5122] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5119] <... ftruncate resumed>) = 0 [pid 5119] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5122] <... open resumed>) = 4 [pid 5119] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5119] sendfile(6, 7, NULL, 281474978811909 [pid 5122] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5122] ftruncate(5, 33587195) = 0 [pid 5122] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5122] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 91.082110][ T5125] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.100696][ T5123] NILFS (loop1): trying rollback from an earlier position [ 91.121860][ T5123] NILFS (loop1): recovery complete [pid 5122] sendfile(6, 7, NULL, 281474978811909 [pid 5123] <... mount resumed>) = 0 [pid 5123] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5123] chdir("./file1") = 0 [pid 5123] ioctl(4, LOOP_CLR_FD) = 0 [pid 5123] close(4) = 0 [pid 5123] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5123] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5123] ftruncate(5, 33587195) = 0 [pid 5123] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5123] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 91.186107][ T5126] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5123] sendfile(6, 7, NULL, 281474978811909 [pid 5115] <... sendfile resumed>) = 1048576 [pid 5115] exit_group(0) = ? [pid 5115] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5115, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./9/binderfs") = 0 [pid 5002] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5002] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./9/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./9/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./9") = 0 [pid 5002] mkdir("./10", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5127 ./strace-static-x86_64: Process 5127 attached [pid 5127] chdir("./10") = 0 [pid 5127] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5127] setpgid(0, 0) = 0 [pid 5127] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5127] write(3, "1000", 4) = 4 [pid 5127] close(3) = 0 [pid 5127] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5127] memfd_create("syzkaller", 0) = 3 [pid 5127] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5127] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5127] munmap(0x7f18ca796000, 2097152) = 0 [pid 5127] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5127] ioctl(4, LOOP_SET_FD, 3 [pid 5116] <... sendfile resumed>) = 1048576 [pid 5127] <... ioctl resumed>) = 0 [pid 5127] close(3) = 0 [pid 5127] mkdir("./file1", 0777) = 0 [pid 5116] exit_group(0 [pid 5127] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5116] <... exit_group resumed>) = ? [pid 5118] <... sendfile resumed>) = 1048576 [pid 5116] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5116, si_uid=0, si_status=0, si_utime=0, si_stime=33 /* 0.33 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 91.890510][ T5127] loop5: detected capacity change from 0 to 4096 [pid 5001] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5118] exit_group(0 [pid 5001] fstat(3, [pid 5118] <... exit_group resumed>) = ? [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5118] +++ exited with 0 +++ [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5118, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [pid 5001] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./9/binderfs", [pid 5000] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] unlink("./9/binderfs" [pid 5000] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... unlink resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5001] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./9/binderfs") = 0 [ 91.949190][ T5127] NILFS (loop5): invalid segment: Checksum error in segment payload [ 92.014075][ T5127] NILFS (loop5): trying rollback from an earlier position [ 92.113462][ T5127] NILFS (loop5): recovery complete [pid 5000] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5127] <... mount resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5127] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5001] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5127] chdir("./file1") = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = 0 [pid 5127] ioctl(4, LOOP_CLR_FD [pid 5001] lstat("./9/file1", [pid 5127] <... ioctl resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5127] close(4 [pid 5001] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5127] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5127] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5000] lstat("./9/file1", [pid 5127] <... open resumed>) = 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5127] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5001] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5127] <... open resumed>) = 5 [pid 5001] <... openat resumed>) = 4 [pid 5000] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5127] ftruncate(5, 33587195 [pid 5001] fstat(4, [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5127] <... ftruncate resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5127] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5001] getdents64(4, [pid 5000] <... openat resumed>) = 4 [pid 5127] <... open resumed>) = 6 [pid 5001] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] fstat(4, [pid 5127] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5127] <... open resumed>) = 7 [pid 5000] getdents64(4, [pid 5127] sendfile(6, 7, NULL, 281474978811909 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, [pid 5000] getdents64(4, [pid 5001] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [ 92.146418][ T5128] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] close(4 [pid 5000] close(4 [pid 5001] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5001] rmdir("./9/file1" [pid 5000] rmdir("./9/file1" [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, [pid 5000] getdents64(3, [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3 [pid 5001] close(3 [pid 5000] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5000] rmdir("./9" [pid 5001] rmdir("./9" [pid 5000] <... rmdir resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] mkdir("./10", 0777 [pid 5001] mkdir("./10", 0777 [pid 5000] <... mkdir resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] <... openat resumed>) = 3 [pid 5001] <... openat resumed>) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5122] <... sendfile resumed>) = 1048576 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5129 [pid 5122] exit_group(0 [pid 5001] close(3 [pid 5122] <... exit_group resumed>) = ? [pid 5001] <... close resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5129 attached , child_tidptr=0x555556f7b690) = 5130 [pid 5129] chdir("./10"./strace-static-x86_64: Process 5130 attached ) = 0 [pid 5122] +++ exited with 0 +++ [pid 5130] chdir("./10" [pid 5129] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5129] setpgid(0, 0) = 0 [pid 5119] <... sendfile resumed>) = 1048576 [pid 5130] <... chdir resumed>) = 0 [pid 5129] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5122, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5129] <... openat resumed>) = 3 [pid 5129] write(3, "1000", 4) = 4 [pid 5129] close(3) = 0 [pid 5129] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5129] memfd_create("syzkaller", 0) = 3 [pid 5129] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5130] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4997] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5130] <... prctl resumed>) = 0 [pid 5129] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5119] exit_group(0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5130] setpgid(0, 0 [pid 5119] <... exit_group resumed>) = ? [pid 4997] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5130] <... setpgid resumed>) = 0 [pid 5119] +++ exited with 0 +++ [pid 4997] <... openat resumed>) = 3 [pid 5130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5119, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 4997] fstat(3, [pid 5130] <... openat resumed>) = 3 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5130] write(3, "1000", 4 [pid 4999] <... restart_syscall resumed>) = 0 [pid 4997] getdents64(3, [pid 5130] <... write resumed>) = 4 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5130] close(3 [pid 4997] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5130] <... close resumed>) = 0 [pid 4999] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5130] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./9/binderfs", [pid 5130] <... symlink resumed>) = 0 [pid 5123] <... sendfile resumed>) = 1048576 [pid 4999] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5130] memfd_create("syzkaller", 0 [pid 5123] exit_group(0 [pid 4999] <... openat resumed>) = 3 [pid 4997] unlink("./9/binderfs" [pid 5130] <... memfd_create resumed>) = 3 [pid 5123] <... exit_group resumed>) = ? [pid 4999] fstat(3, [pid 4997] <... unlink resumed>) = 0 [pid 5130] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5123] +++ exited with 0 +++ [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5130] <... mmap resumed>) = 0x7f18ca796000 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./9/binderfs") = 0 [pid 4999] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5129] <... write resumed>) = 2097152 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5123, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=28 /* 0.28 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5129] munmap(0x7f18ca796000, 2097152 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5129] <... munmap resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5129] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4998] lstat("./9/binderfs", [pid 5129] <... openat resumed>) = 4 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5129] ioctl(4, LOOP_SET_FD, 3 [pid 4998] unlink("./9/binderfs") = 0 [pid 4998] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5130] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5129] <... ioctl resumed>) = 0 [pid 5129] close(3) = 0 [pid 5129] mkdir("./file1", 0777) = 0 [ 92.381266][ T5129] loop3: detected capacity change from 0 to 4096 [pid 5129] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5130] <... write resumed>) = 2097152 [pid 4999] <... umount2 resumed>) = 0 [pid 4997] <... umount2 resumed>) = 0 [pid 5130] munmap(0x7f18ca796000, 2097152 [pid 4999] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5130] <... munmap resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5130] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4999] lstat("./9/file1", [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5130] <... openat resumed>) = 4 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] lstat("./9/file1", [pid 5130] ioctl(4, LOOP_SET_FD, 3 [pid 4999] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 92.448574][ T5129] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 4997] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... openat resumed>) = 4 [pid 4997] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] fstat(4, [pid 4997] <... openat resumed>) = 4 [pid 4997] fstat(4, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, [pid 4999] getdents64(4, [pid 5130] <... ioctl resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5130] close(3 [pid 4998] <... umount2 resumed>) = 0 [pid 5130] <... close resumed>) = 0 [pid 4999] close(4 [pid 4998] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] getdents64(4, [pid 5130] mkdir("./file1", 0777 [pid 4999] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5130] <... mkdir resumed>) = 0 [pid 4999] rmdir("./9/file1" [ 92.499697][ T5130] loop4: detected capacity change from 0 to 4096 [ 92.534069][ T5129] NILFS (loop3): trying rollback from an earlier position [pid 4998] lstat("./9/file1", [pid 4997] close(4 [pid 5130] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... close resumed>) = 0 [pid 4999] getdents64(3, [pid 4998] umount2("./9/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] rmdir("./9/file1" [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... rmdir resumed>) = 0 [pid 4999] close(3 [pid 4998] openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] getdents64(3, [pid 4999] <... close resumed>) = 0 [pid 4998] <... openat resumed>) = 4 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] rmdir("./9" [pid 4998] fstat(4, [pid 4997] close(3 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... close resumed>) = 0 [pid 4999] mkdir("./10", 0777 [pid 4998] getdents64(4, [pid 4997] rmdir("./9" [pid 4999] <... mkdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] <... rmdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] getdents64(4, [pid 4997] mkdir("./10", 0777 [pid 4999] <... openat resumed>) = 3 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] <... mkdir resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4998] close(4 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... close resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [pid 4999] close(3 [pid 4998] rmdir("./9/file1" [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4999] <... close resumed>) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] close(3) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5132 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5133 ./strace-static-x86_64: Process 5133 attached [pid 5133] chdir("./10") = 0 [pid 5133] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5132 attached ) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5133] setpgid(0, 0 [pid 5132] chdir("./10" [pid 4998] getdents64(3, [pid 5133] <... setpgid resumed>) = 0 [pid 5132] <... chdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5132] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] close(3 [pid 5133] <... openat resumed>) = 3 [pid 5132] <... prctl resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5133] write(3, "1000", 4 [pid 5132] setpgid(0, 0 [pid 5129] <... mount resumed>) = 0 [pid 4998] rmdir("./9" [pid 5133] <... write resumed>) = 4 [pid 5132] <... setpgid resumed>) = 0 [pid 5129] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4998] <... rmdir resumed>) = 0 [pid 5133] close(3 [pid 5132] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5129] <... openat resumed>) = 3 [pid 4998] mkdir("./10", 0777 [pid 5133] <... close resumed>) = 0 [pid 5132] <... openat resumed>) = 3 [pid 5129] chdir("./file1" [pid 4998] <... mkdir resumed>) = 0 [pid 5133] symlink("/dev/binderfs", "./binderfs" [pid 5132] write(3, "1000", 4 [pid 5129] <... chdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5133] <... symlink resumed>) = 0 [pid 5132] <... write resumed>) = 4 [pid 5129] ioctl(4, LOOP_CLR_FD [pid 4998] <... openat resumed>) = 3 [pid 5133] memfd_create("syzkaller", 0 [pid 5132] close(3 [pid 5129] <... ioctl resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5133] <... memfd_create resumed>) = 3 [pid 5132] <... close resumed>) = 0 [pid 5129] close(4 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5133] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5132] symlink("/dev/binderfs", "./binderfs" [pid 5129] <... close resumed>) = 0 [pid 4998] close(3 [pid 5133] <... mmap resumed>) = 0x7f18ca796000 [ 92.556844][ T5129] NILFS (loop3): recovery complete [ 92.575317][ T5130] NILFS (loop4): invalid segment: Checksum error in segment payload [ 92.596563][ T5131] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5132] <... symlink resumed>) = 0 [pid 5129] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] <... close resumed>) = 0 [pid 5132] memfd_create("syzkaller", 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5132] <... memfd_create resumed>) = 3 [pid 5132] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5134 [pid 5132] <... mmap resumed>) = 0x7f18ca796000 [pid 5133] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5132] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5129] <... open resumed>) = 4 [pid 5129] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 ./strace-static-x86_64: Process 5134 attached [pid 5129] ftruncate(5, 33587195 [pid 5134] chdir("./10" [pid 5129] <... ftruncate resumed>) = 0 [pid 5134] <... chdir resumed>) = 0 [pid 5129] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5134] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5129] <... open resumed>) = 6 [pid 5134] <... prctl resumed>) = 0 [pid 5129] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5134] setpgid(0, 0 [pid 5129] <... open resumed>) = 7 [pid 5134] <... setpgid resumed>) = 0 [pid 5129] sendfile(6, 7, NULL, 281474978811909 [pid 5134] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5134] write(3, "1000", 4) = 4 [pid 5134] close(3) = 0 [pid 5134] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5134] memfd_create("syzkaller", 0) = 3 [pid 5134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 92.630421][ T5130] NILFS (loop4): trying rollback from an earlier position [ 92.697868][ T5130] NILFS (loop4): recovery complete [pid 5134] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5130] <... mount resumed>) = 0 [pid 5130] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5130] chdir("./file1") = 0 [pid 5130] ioctl(4, LOOP_CLR_FD) = 0 [pid 5133] <... write resumed>) = 2097152 [pid 5130] close(4) = 0 [pid 5130] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5130] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5130] ftruncate(5, 33587195) = 0 [pid 5130] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5130] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5130] sendfile(6, 7, NULL, 281474978811909 [ 92.743621][ T5135] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5133] munmap(0x7f18ca796000, 2097152) = 0 [pid 5132] <... write resumed>) = 2097152 [pid 5133] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5133] ioctl(4, LOOP_SET_FD, 3 [pid 5132] munmap(0x7f18ca796000, 2097152) = 0 [pid 5132] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5132] ioctl(4, LOOP_SET_FD, 3 [pid 5133] <... ioctl resumed>) = 0 [pid 5133] close(3) = 0 [pid 5133] mkdir("./file1", 0777) = 0 [pid 5133] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5132] <... ioctl resumed>) = 0 [pid 5134] <... write resumed>) = 2097152 [pid 5132] close(3 [pid 5134] munmap(0x7f18ca796000, 2097152 [pid 5132] <... close resumed>) = 0 [pid 5132] mkdir("./file1", 0777 [pid 5134] <... munmap resumed>) = 0 [pid 5132] <... mkdir resumed>) = 0 [pid 5134] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5132] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [ 92.824242][ T5133] loop0: detected capacity change from 0 to 4096 [ 92.830892][ T5132] loop2: detected capacity change from 0 to 4096 [pid 5134] <... openat resumed>) = 4 [pid 5134] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5134] close(3) = 0 [pid 5134] mkdir("./file1", 0777) = 0 [ 92.881495][ T5133] NILFS (loop0): invalid segment: Checksum error in segment payload [ 92.891871][ T5134] loop1: detected capacity change from 0 to 4096 [ 92.905114][ T5133] NILFS (loop0): trying rollback from an earlier position [ 92.914385][ T5132] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5134] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5133] <... mount resumed>) = 0 [pid 5133] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5133] chdir("./file1") = 0 [pid 5133] ioctl(4, LOOP_CLR_FD) = 0 [pid 5133] close(4) = 0 [pid 5133] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5133] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [ 92.933818][ T5133] NILFS (loop0): recovery complete [ 92.939388][ T5134] NILFS (loop1): invalid segment: Checksum error in segment payload [ 92.940186][ T5132] NILFS (loop2): trying rollback from an earlier position [ 92.972337][ T5134] NILFS (loop1): trying rollback from an earlier position [pid 5133] ftruncate(5, 33587195) = 0 [pid 5133] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5133] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 92.999012][ T5136] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.040982][ T5134] NILFS (loop1): recovery complete [ 93.048320][ T5132] NILFS (loop2): recovery complete [ 93.071977][ T5137] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5133] sendfile(6, 7, NULL, 281474978811909 [pid 5134] <... mount resumed>) = 0 [pid 5132] <... mount resumed>) = 0 [pid 5134] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5132] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5134] <... openat resumed>) = 3 [pid 5132] <... openat resumed>) = 3 [pid 5134] chdir("./file1" [pid 5132] chdir("./file1" [pid 5134] <... chdir resumed>) = 0 [pid 5132] <... chdir resumed>) = 0 [pid 5134] ioctl(4, LOOP_CLR_FD [pid 5132] ioctl(4, LOOP_CLR_FD [pid 5134] <... ioctl resumed>) = 0 [pid 5132] <... ioctl resumed>) = 0 [pid 5134] close(4 [pid 5132] close(4 [pid 5134] <... close resumed>) = 0 [pid 5132] <... close resumed>) = 0 [pid 5134] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5132] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5134] <... open resumed>) = 4 [pid 5132] <... open resumed>) = 4 [pid 5134] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [ 93.088565][ T5138] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5132] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5134] <... open resumed>) = 5 [pid 5132] <... open resumed>) = 5 [pid 5134] ftruncate(5, 33587195 [pid 5132] ftruncate(5, 33587195 [pid 5134] <... ftruncate resumed>) = 0 [pid 5134] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5132] <... ftruncate resumed>) = 0 [pid 5132] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5134] <... open resumed>) = 6 [pid 5132] <... open resumed>) = 6 [pid 5134] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5132] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5134] <... open resumed>) = 7 [pid 5132] <... open resumed>) = 7 [pid 5134] sendfile(6, 7, NULL, 281474978811909 [pid 5132] sendfile(6, 7, NULL, 281474978811909 [pid 5127] <... sendfile resumed>) = 1048576 [pid 5127] exit_group(0) = ? [pid 5127] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5127, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./10/binderfs") = 0 [pid 5002] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5002] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./10/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./10/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./10") = 0 [pid 5002] mkdir("./11", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5139 ./strace-static-x86_64: Process 5139 attached [pid 5139] chdir("./11") = 0 [pid 5139] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5139] setpgid(0, 0) = 0 [pid 5139] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5139] write(3, "1000", 4) = 4 [pid 5139] close(3) = 0 [pid 5139] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5139] memfd_create("syzkaller", 0) = 3 [pid 5139] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5139] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5129] <... sendfile resumed>) = 1048576 [pid 5129] exit_group(0) = ? [pid 5129] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5129, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 5130] <... sendfile resumed>) = 1048576 [pid 5000] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5139] <... write resumed>) = 2097152 [pid 5130] exit_group(0 [pid 5000] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5130] <... exit_group resumed>) = ? [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./10/binderfs", [pid 5130] +++ exited with 0 +++ [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5139] munmap(0x7f18ca796000, 2097152) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5130, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5000] unlink("./10/binderfs" [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... unlink resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5139] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5139] <... openat resumed>) = 4 [pid 5001] <... openat resumed>) = 3 [pid 5139] ioctl(4, LOOP_SET_FD, 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./10/binderfs") = 0 [pid 5001] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5139] <... ioctl resumed>) = 0 [pid 5139] close(3) = 0 [pid 5139] mkdir("./file1", 0777) = 0 [ 93.871274][ T5139] loop5: detected capacity change from 0 to 4096 [pid 5139] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./10/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 93.953874][ T5139] NILFS (loop5): invalid segment: Checksum error in segment payload [ 93.990151][ T5139] NILFS (loop5): trying rollback from an earlier position [pid 5000] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./10/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./10") = 0 [pid 5000] mkdir("./11", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5140 ./strace-static-x86_64: Process 5140 attached [pid 5140] chdir("./11") = 0 [ 94.097722][ T5139] NILFS (loop5): recovery complete [pid 5001] <... umount2 resumed>) = 0 [pid 5140] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5001] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5140] setpgid(0, 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5132] <... sendfile resumed>) = 1048576 [pid 5140] <... setpgid resumed>) = 0 [pid 5133] <... sendfile resumed>) = 1048576 [pid 5001] lstat("./10/file1", [pid 5140] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5139] <... mount resumed>) = 0 [pid 5001] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5140] <... openat resumed>) = 3 [pid 5139] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5140] write(3, "1000", 4 [pid 5139] <... openat resumed>) = 3 [pid 5001] <... openat resumed>) = 4 [pid 5140] <... write resumed>) = 4 [pid 5139] chdir("./file1" [pid 5001] fstat(4, [pid 5140] close(3 [pid 5139] <... chdir resumed>) = 0 [pid 5133] exit_group(0 [pid 5132] exit_group(0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5140] <... close resumed>) = 0 [pid 5139] ioctl(4, LOOP_CLR_FD [pid 5133] <... exit_group resumed>) = ? [pid 5132] <... exit_group resumed>) = ? [pid 5001] getdents64(4, [pid 5140] symlink("/dev/binderfs", "./binderfs" [pid 5139] <... ioctl resumed>) = 0 [pid 5133] +++ exited with 0 +++ [pid 5132] +++ exited with 0 +++ [pid 5001] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5140] <... symlink resumed>) = 0 [pid 5139] close(4 [pid 5001] getdents64(4, [pid 5140] memfd_create("syzkaller", 0 [pid 5139] <... close resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5140] <... memfd_create resumed>) = 3 [pid 5139] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5001] close(4 [pid 5140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] <... close resumed>) = 0 [pid 5139] <... open resumed>) = 4 [pid 5140] <... mmap resumed>) = 0x7f18ca796000 [pid 5139] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5001] rmdir("./10/file1" [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5132, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5133, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5139] <... open resumed>) = 5 [pid 5001] <... rmdir resumed>) = 0 [pid 4999] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5139] ftruncate(5, 33587195 [pid 5001] getdents64(3, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5139] <... ftruncate resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 94.142417][ T5141] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5139] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5001] close(3 [pid 4999] <... openat resumed>) = 3 [pid 4997] <... openat resumed>) = 3 [pid 5139] <... open resumed>) = 6 [pid 5134] <... sendfile resumed>) = 1048576 [pid 5001] <... close resumed>) = 0 [pid 4999] fstat(3, [pid 4997] fstat(3, [pid 5139] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5134] exit_group(0 [pid 5001] rmdir("./10" [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5139] <... open resumed>) = 7 [pid 5134] <... exit_group resumed>) = ? [pid 5001] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5139] sendfile(6, 7, NULL, 281474978811909 [pid 5001] mkdir("./11", 0777 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] getdents64(3, [pid 5134] +++ exited with 0 +++ [pid 5001] <... mkdir resumed>) = 0 [pid 4999] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5134, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] <... openat resumed>) = 3 [pid 4999] lstat("./10/binderfs", [pid 4997] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] unlink("./10/binderfs" [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] close(3) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 4997] lstat("./10/binderfs", [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5140] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... clone resumed>, child_tidptr=0x555556f7b690) = 5142 [pid 4998] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] unlink("./10/binderfs" [pid 4998] <... openat resumed>) = 3 [pid 4998] fstat(3, [pid 4997] <... unlink resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./10/binderfs") = 0 [pid 4998] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5142 attached [pid 5142] chdir("./11") = 0 [pid 5142] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5142] setpgid(0, 0) = 0 [pid 5142] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5142] write(3, "1000", 4) = 4 [pid 5142] close(3) = 0 [pid 5140] <... write resumed>) = 2097152 [pid 5142] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5142] memfd_create("syzkaller", 0) = 3 [pid 5142] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5140] munmap(0x7f18ca796000, 2097152) = 0 [pid 5140] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5140] ioctl(4, LOOP_SET_FD, 3 [pid 5142] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5140] <... ioctl resumed>) = 0 [pid 5140] close(3) = 0 [pid 5140] mkdir("./file1", 0777) = 0 [pid 5140] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4997] <... umount2 resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./10/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 94.372658][ T5140] loop3: detected capacity change from 0 to 4096 [pid 4999] <... openat resumed>) = 4 [pid 4997] lstat("./10/file1", [pid 4999] fstat(4, [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] getdents64(4, [pid 4997] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4 [pid 4997] <... openat resumed>) = 4 [pid 5142] <... write resumed>) = 2097152 [pid 4999] <... close resumed>) = 0 [pid 4997] fstat(4, [pid 5142] munmap(0x7f18ca796000, 2097152 [pid 4999] rmdir("./10/file1" [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5142] <... munmap resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5142] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4999] getdents64(3, [pid 5142] <... openat resumed>) = 4 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5142] ioctl(4, LOOP_SET_FD, 3 [pid 4999] close(3 [pid 5142] <... ioctl resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] getdents64(4, [pid 5142] close(3 [pid 4999] rmdir("./10" [pid 5142] <... close resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] lstat("./10/file1", [pid 5142] mkdir("./file1", 0777 [pid 4999] mkdir("./11", 0777 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5142] <... mkdir resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 4998] umount2("./10/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5142] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] <... openat resumed>) = 3 [pid 4998] openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4998] <... openat resumed>) = 4 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] fstat(4, [pid 4997] getdents64(4, [pid 4999] close(3 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] getdents64(4, [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [ 94.455170][ T5140] NILFS (loop3): invalid segment: Checksum error in segment payload [ 94.462551][ T5142] loop4: detected capacity change from 0 to 4096 [ 94.464114][ T5140] NILFS (loop3): trying rollback from an earlier position [ 94.490903][ T5142] NILFS (loop4): invalid segment: Checksum error in segment payload ./strace-static-x86_64: Process 5143 attached [pid 4998] getdents64(4, [pid 4997] close(4 [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5143 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./10/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 5143] chdir("./11" [pid 4998] rmdir("./10" [pid 4997] <... close resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] mkdir("./11", 0777 [pid 5143] <... chdir resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 4997] rmdir("./10/file1" [pid 5143] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5143] <... prctl resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] <... rmdir resumed>) = 0 [pid 5143] setpgid(0, 0 [pid 4998] close(3 [pid 5143] <... setpgid resumed>) = 0 [pid 5140] <... mount resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 4997] getdents64(3, [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5145 ./strace-static-x86_64: Process 5145 attached [pid 5145] chdir("./11" [pid 5143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5140] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5143] <... openat resumed>) = 3 [pid 5145] <... chdir resumed>) = 0 [pid 5145] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5143] write(3, "1000", 4 [pid 5140] <... openat resumed>) = 3 [pid 4997] close(3 [pid 5145] <... prctl resumed>) = 0 [pid 5145] setpgid(0, 0) = 0 [pid 5145] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5143] <... write resumed>) = 4 [ 94.512066][ T5140] NILFS (loop3): recovery complete [ 94.518800][ T5142] NILFS (loop4): trying rollback from an earlier position [ 94.536566][ T5144] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5140] chdir("./file1" [pid 4997] <... close resumed>) = 0 [pid 5145] write(3, "1000", 4 [pid 5143] close(3 [pid 5140] <... chdir resumed>) = 0 [pid 5145] <... write resumed>) = 4 [pid 5145] close(3) = 0 [pid 5145] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5143] <... close resumed>) = 0 [pid 5140] ioctl(4, LOOP_CLR_FD [pid 4997] rmdir("./10" [pid 5145] memfd_create("syzkaller", 0 [pid 5143] symlink("/dev/binderfs", "./binderfs" [pid 5140] <... ioctl resumed>) = 0 [pid 5145] <... memfd_create resumed>) = 3 [pid 5145] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5143] <... symlink resumed>) = 0 [pid 5142] <... mount resumed>) = 0 [pid 5140] close(4 [pid 4997] <... rmdir resumed>) = 0 [pid 5143] memfd_create("syzkaller", 0) = 3 [pid 5142] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5140] <... close resumed>) = 0 [pid 4997] mkdir("./11", 0777 [pid 5143] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5142] <... openat resumed>) = 3 [pid 5140] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5143] <... mmap resumed>) = 0x7f18ca796000 [pid 5142] chdir("./file1" [pid 4997] <... mkdir resumed>) = 0 [pid 5140] <... open resumed>) = 4 [pid 5145] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5142] <... chdir resumed>) = 0 [pid 5140] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5142] ioctl(4, LOOP_CLR_FD [pid 5140] <... open resumed>) = 5 [pid 4997] <... openat resumed>) = 3 [pid 5142] <... ioctl resumed>) = 0 [pid 5140] ftruncate(5, 33587195 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5142] close(4 [pid 5140] <... ftruncate resumed>) = 0 [pid 5142] <... close resumed>) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5142] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5140] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4997] close(3 [pid 5142] <... open resumed>) = 4 [pid 5140] <... open resumed>) = 6 [pid 4997] <... close resumed>) = 0 [ 94.559814][ T5142] NILFS (loop4): recovery complete [ 94.571566][ T5146] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5142] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5140] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5143] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5142] ftruncate(5, 33587195 [pid 5140] <... open resumed>) = 7 [pid 5142] <... ftruncate resumed>) = 0 [pid 5142] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5140] sendfile(6, 7, NULL, 281474978811909 [pid 5142] <... open resumed>) = 6 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5147 [pid 5142] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 ./strace-static-x86_64: Process 5147 attached [pid 5142] sendfile(6, 7, NULL, 281474978811909 [pid 5147] chdir("./11") = 0 [pid 5147] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5147] setpgid(0, 0 [pid 5143] <... write resumed>) = 2097152 [pid 5147] <... setpgid resumed>) = 0 [pid 5145] <... write resumed>) = 2097152 [pid 5147] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5145] munmap(0x7f18ca796000, 2097152 [pid 5147] <... openat resumed>) = 3 [pid 5147] write(3, "1000", 4) = 4 [pid 5147] close(3) = 0 [pid 5147] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5147] memfd_create("syzkaller", 0) = 3 [pid 5147] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5145] <... munmap resumed>) = 0 [pid 5147] <... mmap resumed>) = 0x7f18ca796000 [pid 5145] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5143] munmap(0x7f18ca796000, 2097152 [pid 5145] <... openat resumed>) = 4 [pid 5143] <... munmap resumed>) = 0 [pid 5145] ioctl(4, LOOP_SET_FD, 3 [pid 5143] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 94.736853][ T5145] loop1: detected capacity change from 0 to 4096 [ 94.756654][ T5143] loop2: detected capacity change from 0 to 4096 [ 94.773136][ T5146] NILFS (loop4): nilfs_direct_assign (ino=6): invalid key: 130 [pid 5143] ioctl(4, LOOP_SET_FD, 3 [pid 5145] <... ioctl resumed>) = 0 [pid 5143] <... ioctl resumed>) = 0 [pid 5147] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5145] close(3 [pid 5143] close(3 [pid 5142] <... sendfile resumed>) = 65536 [pid 5142] exit_group(0 [pid 5145] <... close resumed>) = 0 [pid 5143] <... close resumed>) = 0 [pid 5142] <... exit_group resumed>) = ? [pid 5145] mkdir("./file1", 0777 [pid 5143] mkdir("./file1", 0777 [pid 5142] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5142, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5001] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5145] <... mkdir resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5145] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5143] <... mkdir resumed>) = 0 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5143] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./11/binderfs") = 0 [ 94.792628][ T5146] NILFS error (device loop4): nilfs_bmap_assign: broken bmap (inode number=6) [ 94.805631][ T5146] Remounting filesystem read-only [ 94.845128][ T5145] NILFS (loop1): invalid segment: Checksum error in segment payload [ 94.855085][ T5143] NILFS (loop2): invalid segment: Checksum error in segment payload [ 94.855700][ T5001] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 94.867488][ T5145] NILFS (loop1): trying rollback from an earlier position [pid 5001] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5147] <... write resumed>) = 2097152 [pid 5147] munmap(0x7f18ca796000, 2097152) = 0 [pid 5147] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 94.893047][ T5143] NILFS (loop2): trying rollback from an earlier position [ 94.900378][ T5001] NILFS (loop4): discard dirty page: offset=94208, ino=12 [ 94.921309][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 94.930298][ T5147] loop0: detected capacity change from 0 to 4096 [pid 5147] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5147] close(3) = 0 [pid 5147] mkdir("./file1", 0777) = 0 [pid 5147] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5143] <... mount resumed>) = 0 [pid 5143] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5143] chdir("./file1") = 0 [ 94.943476][ T5143] NILFS (loop2): recovery complete [ 94.958231][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 94.966666][ T5148] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.972311][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 94.989353][ T5145] NILFS (loop1): recovery complete [pid 5143] ioctl(4, LOOP_CLR_FD [pid 5145] <... mount resumed>) = 0 [pid 5143] <... ioctl resumed>) = 0 [pid 5145] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5143] close(4 [pid 5145] <... openat resumed>) = 3 [pid 5143] <... close resumed>) = 0 [pid 5143] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5145] chdir("./file1") = 0 [pid 5145] ioctl(4, LOOP_CLR_FD) = 0 [pid 5145] close(4 [pid 5143] <... open resumed>) = 4 [pid 5145] <... close resumed>) = 0 [ 95.002555][ T5149] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.014256][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 95.020483][ T5147] NILFS (loop0): invalid segment: Checksum error in segment payload [ 95.022070][ T5001] NILFS (loop4): discard dirty page: offset=98304, ino=12 [pid 5143] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5145] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5143] <... open resumed>) = 5 [pid 5145] <... open resumed>) = 4 [pid 5143] ftruncate(5, 33587195 [pid 5145] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5143] <... ftruncate resumed>) = 0 [pid 5145] <... open resumed>) = 5 [pid 5143] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5145] ftruncate(5, 33587195 [pid 5143] <... open resumed>) = 6 [pid 5145] <... ftruncate resumed>) = 0 [pid 5143] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5145] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5143] sendfile(6, 7, NULL, 281474978811909 [pid 5145] <... open resumed>) = 6 [pid 5145] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 95.050446][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 95.059339][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 95.090604][ T5147] NILFS (loop0): trying rollback from an earlier position [ 95.121457][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 95.160638][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 95.172561][ T5147] NILFS (loop0): recovery complete [pid 5145] sendfile(6, 7, NULL, 281474978811909 [pid 5147] <... mount resumed>) = 0 [pid 5147] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5147] chdir("./file1") = 0 [pid 5147] ioctl(4, LOOP_CLR_FD) = 0 [pid 5147] close(4) = 0 [ 95.217560][ T5001] NILFS (loop4): discard dirty page: offset=102400, ino=12 [ 95.225411][ T5150] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.255618][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [pid 5147] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5147] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5147] ftruncate(5, 33587195) = 0 [pid 5147] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5147] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5147] sendfile(6, 7, NULL, 281474978811909 [pid 5139] <... sendfile resumed>) = 1048576 [pid 5139] exit_group(0) = ? [pid 5139] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5139, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5002] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./11/binderfs") = 0 [ 95.263359][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 95.271989][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 95.282651][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 95.322323][ T5001] NILFS (loop4): discard dirty page: offset=106496, ino=12 [ 95.330034][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 95.338445][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 95.370749][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 95.378366][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 95.412111][ T5001] NILFS (loop4): discard dirty page: offset=110592, ino=12 [ 95.430224][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [pid 5002] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5002] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 95.507481][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 95.539523][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [pid 5002] lstat("./11/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./11/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./11") = 0 [pid 5002] mkdir("./12", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5151 [ 95.555617][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 95.567489][ T5001] NILFS (loop4): discard dirty page: offset=114688, ino=12 [ 95.591982][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 95.599789][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 ./strace-static-x86_64: Process 5151 attached [pid 5151] chdir("./12") = 0 [pid 5151] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5151] setpgid(0, 0) = 0 [pid 5151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5151] write(3, "1000", 4) = 4 [pid 5151] close(3) = 0 [pid 5151] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5151] memfd_create("syzkaller", 0) = 3 [pid 5151] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5140] <... sendfile resumed>) = 1048576 [pid 5140] exit_group(0) = ? [pid 5140] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5140, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [ 95.621431][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 95.640338][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 95.652357][ T5001] NILFS (loop4): discard dirty page: offset=118784, ino=12 [pid 5000] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5151] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./11/binderfs") = 0 [ 95.684949][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 95.740079][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 95.775105][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 95.803221][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 95.816127][ T5001] NILFS (loop4): discard dirty page: offset=122880, ino=12 [pid 5000] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5151] <... write resumed>) = 2097152 [pid 5151] munmap(0x7f18ca796000, 2097152) = 0 [pid 5151] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5151] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5151] <... ioctl resumed>) = 0 [pid 5000] lstat("./11/file1", [pid 5151] close(3) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5151] mkdir("./file1", 0777) = 0 [pid 5000] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5151] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 95.875874][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 95.884775][ T5151] loop5: detected capacity change from 0 to 4096 [pid 5145] <... sendfile resumed>) = 1048576 [pid 5000] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./11/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5145] exit_group(0 [pid 5000] close(3 [pid 5145] <... exit_group resumed>) = ? [pid 5000] <... close resumed>) = 0 [pid 5145] +++ exited with 0 +++ [pid 5000] rmdir("./11") = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5145, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [ 95.926025][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 95.949846][ T5151] NILFS (loop5): invalid segment: Checksum error in segment payload [ 95.959714][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 95.968225][ T5151] NILFS (loop5): trying rollback from an earlier position [pid 5000] mkdir("./12", 0777) = 0 [pid 4998] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... openat resumed>) = 3 [pid 4998] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] <... openat resumed>) = 3 [pid 5000] close(3 [pid 4998] fstat(3, [pid 5000] <... close resumed>) = 0 [ 95.983550][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 95.993214][ T5001] NILFS (loop4): discard dirty page: offset=126976, ino=12 [ 96.000466][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 96.016212][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 96.024973][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, ./strace-static-x86_64: Process 5152 attached [pid 5143] <... sendfile resumed>) = 1048576 [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5152 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5152] chdir("./12" [pid 5143] exit_group(0 [pid 4998] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5152] <... chdir resumed>) = 0 [pid 5143] <... exit_group resumed>) = ? [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5152] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5143] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5143, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 4998] lstat("./11/binderfs", [pid 5152] <... prctl resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5152] setpgid(0, 0) = 0 [ 96.032236][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 96.048571][ T5001] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 96.057331][ T5151] NILFS (loop5): recovery complete [ 96.057481][ T5001] NILFS (loop4): discard dirty block: blocknr=6, size=1024 [ 96.070662][ T5001] NILFS (loop4): discard dirty block: blocknr=7, size=1024 [pid 4998] unlink("./11/binderfs" [pid 5152] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] <... unlink resumed>) = 0 [pid 5151] <... mount resumed>) = 0 [pid 5151] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5151] chdir("./file1") = 0 [pid 5151] ioctl(4, LOOP_CLR_FD) = 0 [pid 5151] close(4 [pid 5152] <... openat resumed>) = 3 [pid 5151] <... close resumed>) = 0 [pid 4998] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5152] write(3, "1000", 4) = 4 [pid 5151] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5152] close(3 [pid 4999] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5152] <... close resumed>) = 0 [pid 5151] <... open resumed>) = 4 [pid 5152] symlink("/dev/binderfs", "./binderfs" [pid 5151] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5152] <... symlink resumed>) = 0 [pid 5151] <... open resumed>) = 5 [pid 4999] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5152] memfd_create("syzkaller", 0 [pid 5151] ftruncate(5, 33587195) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5151] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5151] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5151] sendfile(6, 7, NULL, 281474978811909 [pid 5152] <... memfd_create resumed>) = 3 [pid 4999] fstat(3, [pid 5152] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 96.081096][ T5001] NILFS (loop4): discard dirty block: blocknr=8, size=1024 [ 96.084156][ T5153] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.090018][ T5001] NILFS (loop4): discard dirty block: blocknr=9, size=1024 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./11/binderfs") = 0 [pid 4999] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 96.140368][ T5001] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 96.164926][ T5001] NILFS (loop4): discard dirty block: blocknr=11, size=1024 [ 96.172566][ T5001] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.208301][ T5001] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5152] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... umount2 resumed>) = 0 [pid 5152] <... write resumed>) = 2097152 [pid 5152] munmap(0x7f18ca796000, 2097152 [pid 4998] <... umount2 resumed>) = 0 [pid 5152] <... munmap resumed>) = 0 [pid 4999] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5152] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4998] lstat("./11/file1", [pid 5152] <... openat resumed>) = 4 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 96.275500][ T5001] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5152] ioctl(4, LOOP_SET_FD, 3 [pid 4998] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./11/file1", [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./11/file1" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... rmdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] getdents64(3, [pid 5152] <... ioctl resumed>) = 0 [pid 5147] <... sendfile resumed>) = 1048576 [pid 4999] <... openat resumed>) = 4 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5152] close(3 [pid 5147] exit_group(0 [pid 4999] fstat(4, [pid 4998] close(3 [pid 5152] <... close resumed>) = 0 [pid 5147] <... exit_group resumed>) = ? [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... close resumed>) = 0 [pid 5152] mkdir("./file1", 0777 [pid 5147] +++ exited with 0 +++ [pid 4999] getdents64(4, [pid 4998] rmdir("./11") = 0 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5147, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 4998] mkdir("./12", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5152] <... mkdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 96.318657][ T5152] loop3: detected capacity change from 0 to 4096 [ 96.340271][ T5001] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 96.354355][ T5001] NILFS (loop4): discard dirty block: blocknr=10, size=1024 [pid 5152] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4999] getdents64(4, [pid 4998] close(3 [pid 4997] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... close resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] close(4 [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5154 [pid 4997] fstat(3, [pid 4999] <... close resumed>) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] rmdir("./11/file1" [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./11/binderfs", ./strace-static-x86_64: Process 5154 attached {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5154] chdir("./12" [pid 4997] unlink("./11/binderfs" [pid 5154] <... chdir resumed>) = 0 [pid 4997] <... unlink resumed>) = 0 [pid 5154] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] <... rmdir resumed>) = 0 [pid 4997] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5154] <... prctl resumed>) = 0 [pid 4999] getdents64(3, [pid 5154] setpgid(0, 0) = 0 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5154] write(3, "1000", 4) = 4 [pid 5154] close(3) = 0 [pid 5154] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4999] close(3 [pid 5154] memfd_create("syzkaller", 0 [pid 4999] <... close resumed>) = 0 [pid 5154] <... memfd_create resumed>) = 3 [pid 4999] rmdir("./11" [pid 5154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./12", 0777) = 0 [ 96.365147][ T5001] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.384965][ T5152] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5155 ./strace-static-x86_64: Process 5155 attached [pid 5155] chdir("./12") = 0 [pid 5155] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5154] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5155] setpgid(0, 0) = 0 [pid 5155] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5155] write(3, "1000", 4) = 4 [pid 5155] close(3) = 0 [pid 5155] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5155] memfd_create("syzkaller", 0) = 3 [ 96.417242][ T5152] NILFS (loop3): trying rollback from an earlier position [ 96.428205][ T5001] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.457061][ T5001] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [pid 5155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 96.497112][ T5152] NILFS (loop3): recovery complete [pid 5152] <... mount resumed>) = 0 [pid 5152] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4997] <... umount2 resumed>) = 0 [pid 5152] <... openat resumed>) = 3 [pid 5152] chdir("./file1" [pid 4997] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5155] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5154] <... write resumed>) = 2097152 [pid 5152] <... chdir resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5154] munmap(0x7f18ca796000, 2097152) = 0 [pid 5152] ioctl(4, LOOP_CLR_FD [pid 4997] lstat("./11/file1", [pid 5154] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5154] ioctl(4, LOOP_SET_FD, 3 [ 96.520420][ T5156] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.521829][ T5001] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 96.546826][ T5001] NILFS (loop4): discard dirty block: blocknr=12, size=1024 [pid 5152] <... ioctl resumed>) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5155] <... write resumed>) = 2097152 [pid 5152] close(4 [pid 4997] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5154] <... ioctl resumed>) = 0 [pid 5154] close(3) = 0 [pid 5154] mkdir("./file1", 0777) = 0 [pid 5154] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5155] munmap(0x7f18ca796000, 2097152 [pid 5152] <... close resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5155] <... munmap resumed>) = 0 [pid 5152] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [ 96.573284][ T5001] NILFS (loop4): discard dirty block: blocknr=13, size=1024 [ 96.580644][ T5001] NILFS (loop4): discard dirty block: blocknr=14, size=1024 [ 96.585326][ T5154] loop1: detected capacity change from 0 to 4096 [ 96.594578][ T5001] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.609937][ T5001] NILFS (loop4): discard dirty page: offset=131072, ino=3 [pid 4997] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5155] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 4997] <... openat resumed>) = 4 [pid 5152] <... open resumed>) = 4 [pid 5155] ioctl(4, LOOP_SET_FD, 3 [pid 4997] fstat(4, [pid 5152] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5155] <... ioctl resumed>) = 0 [pid 5152] <... open resumed>) = 5 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5155] close(3 [pid 5152] ftruncate(5, 33587195 [ 96.617308][ T5001] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.630317][ T5001] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.639910][ T5155] loop2: detected capacity change from 0 to 4096 [ 96.648350][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 96.655887][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 96.659717][ T5154] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 4997] getdents64(4, [pid 5155] <... close resumed>) = 0 [pid 5152] <... ftruncate resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5155] mkdir("./file1", 0777 [pid 5152] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4997] getdents64(4, [pid 5155] <... mkdir resumed>) = 0 [pid 5152] <... open resumed>) = 6 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5155] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5152] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4997] close(4 [pid 5152] <... open resumed>) = 7 [pid 5152] sendfile(6, 7, NULL, 281474978811909 [pid 4997] <... close resumed>) = 0 [ 96.663643][ T5001] NILFS (loop4): discard dirty page: offset=135168, ino=3 [pid 4997] rmdir("./11/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./11") = 0 [pid 4997] mkdir("./12", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5157 ./strace-static-x86_64: Process 5157 attached [pid 5157] chdir("./12") = 0 [pid 5157] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5157] setpgid(0, 0) = 0 [ 96.696737][ T5154] NILFS (loop1): trying rollback from an earlier position [ 96.734658][ T5155] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5157] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5157] write(3, "1000", 4) = 4 [pid 5157] close(3) = 0 [pid 5157] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5157] memfd_create("syzkaller", 0) = 3 [pid 5157] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 96.743353][ T5155] NILFS (loop2): trying rollback from an earlier position [ 96.750908][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 96.773230][ T5154] NILFS (loop1): recovery complete [ 96.783634][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 96.794099][ T5155] NILFS (loop2): recovery complete [ 96.799824][ T5001] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 96.826199][ T5001] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 96.835312][ T5158] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5157] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5155] <... mount resumed>) = 0 [pid 5154] <... mount resumed>) = 0 [pid 5155] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5154] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5155] <... openat resumed>) = 3 [pid 5154] <... openat resumed>) = 3 [pid 5154] chdir("./file1" [pid 5155] chdir("./file1" [pid 5154] <... chdir resumed>) = 0 [pid 5155] <... chdir resumed>) = 0 [pid 5154] ioctl(4, LOOP_CLR_FD [pid 5155] ioctl(4, LOOP_CLR_FD [pid 5154] <... ioctl resumed>) = 0 [pid 5155] <... ioctl resumed>) = 0 [pid 5154] close(4 [pid 5155] close(4 [pid 5154] <... close resumed>) = 0 [pid 5154] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5155] <... close resumed>) = 0 [pid 5155] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5154] <... open resumed>) = 4 [pid 5155] <... open resumed>) = 4 [pid 5154] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5155] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5154] <... open resumed>) = 5 [pid 5155] <... open resumed>) = 5 [ 96.846180][ T5159] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5154] ftruncate(5, 33587195 [pid 5155] ftruncate(5, 33587195 [pid 5154] <... ftruncate resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5155] <... ftruncate resumed>) = 0 [pid 5154] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5001] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5155] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5154] <... open resumed>) = 6 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5155] <... open resumed>) = 6 [pid 5154] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5001] lstat("./11/file1", [pid 5157] <... write resumed>) = 2097152 [pid 5155] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5154] <... open resumed>) = 7 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5155] <... open resumed>) = 7 [pid 5154] sendfile(6, 7, NULL, 281474978811909 [pid 5001] umount2("./11/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5155] sendfile(6, 7, NULL, 281474978811909 [pid 5157] munmap(0x7f18ca796000, 2097152) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5157] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5001] openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, [pid 5157] <... openat resumed>) = 4 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5157] ioctl(4, LOOP_SET_FD, 3 [pid 5001] getdents64(4, [pid 5157] <... ioctl resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5157] close(3 [pid 5001] close(4 [pid 5157] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5157] mkdir("./file1", 0777 [pid 5001] rmdir("./11/file1" [pid 5157] <... mkdir resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5157] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [ 96.963433][ T5157] loop0: detected capacity change from 0 to 4096 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./11") = 0 [pid 5001] mkdir("./12", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5160 ./strace-static-x86_64: Process 5160 attached [pid 5160] chdir("./12") = 0 [pid 5160] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5160] setpgid(0, 0) = 0 [pid 5160] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5160] write(3, "1000", 4) = 4 [pid 5160] close(3) = 0 [pid 5160] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5160] memfd_create("syzkaller", 0) = 3 [pid 5160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 97.042593][ T5157] NILFS (loop0): invalid segment: Checksum error in segment payload [ 97.081288][ T5157] NILFS (loop0): trying rollback from an earlier position [ 97.153463][ T5157] NILFS (loop0): recovery complete [pid 5160] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5157] <... mount resumed>) = 0 [pid 5157] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5157] chdir("./file1") = 0 [pid 5157] ioctl(4, LOOP_CLR_FD) = 0 [pid 5157] close(4 [pid 5160] <... write resumed>) = 2097152 [pid 5157] <... close resumed>) = 0 [pid 5160] munmap(0x7f18ca796000, 2097152 [pid 5157] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [ 97.175295][ T5161] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5160] <... munmap resumed>) = 0 [pid 5157] <... open resumed>) = 4 [pid 5160] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5157] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5160] <... openat resumed>) = 4 [pid 5160] ioctl(4, LOOP_SET_FD, 3 [pid 5157] <... open resumed>) = 5 [pid 5157] ftruncate(5, 33587195) = 0 [pid 5157] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5157] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5160] <... ioctl resumed>) = 0 [pid 5157] sendfile(6, 7, NULL, 281474978811909 [pid 5160] close(3) = 0 [pid 5160] mkdir("./file1", 0777) = 0 [ 97.240458][ T5160] loop4: detected capacity change from 0 to 4096 [pid 5160] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5151] <... sendfile resumed>) = 1048576 [pid 5151] exit_group(0) = ? [pid 5151] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5151, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./12/binderfs") = 0 [ 97.320548][ T5160] NILFS (loop4): invalid segment: Checksum error in segment payload [ 97.353862][ T5160] NILFS (loop4): trying rollback from an earlier position [ 97.416535][ T5160] NILFS (loop4): recovery complete [pid 5002] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5160] <... mount resumed>) = 0 [pid 5160] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5160] chdir("./file1" [pid 5002] <... umount2 resumed>) = 0 [pid 5160] <... chdir resumed>) = 0 [pid 5160] ioctl(4, LOOP_CLR_FD) = 0 [pid 5160] close(4) = 0 [pid 5160] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5002] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5160] <... open resumed>) = 4 [pid 5160] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5160] <... open resumed>) = 5 [pid 5160] ftruncate(5, 33587195 [pid 5002] lstat("./12/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 97.439587][ T5162] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, [pid 5160] <... ftruncate resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5160] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] getdents64(4, [pid 5160] <... open resumed>) = 6 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5160] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5160] sendfile(6, 7, NULL, 281474978811909 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./12/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./12") = 0 [pid 5002] mkdir("./13", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5163 ./strace-static-x86_64: Process 5163 attached [pid 5163] chdir("./13") = 0 [pid 5163] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5163] setpgid(0, 0) = 0 [pid 5163] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5163] write(3, "1000", 4) = 4 [pid 5163] close(3) = 0 [pid 5163] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5163] memfd_create("syzkaller", 0) = 3 [pid 5163] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5152] <... sendfile resumed>) = 1048576 [pid 5152] exit_group(0) = ? [pid 5152] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5152, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [pid 5000] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 5163] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./12/binderfs") = 0 [pid 5000] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5163] <... write resumed>) = 2097152 [pid 5163] munmap(0x7f18ca796000, 2097152 [pid 5000] <... umount2 resumed>) = 0 [pid 5163] <... munmap resumed>) = 0 [pid 5163] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5163] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5163] close(3) = 0 [pid 5163] mkdir("./file1", 0777) = 0 [pid 5163] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5000] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./12/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 97.866005][ T5163] loop5: detected capacity change from 0 to 4096 [pid 5000] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./12/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./12") = 0 [pid 5000] mkdir("./13", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5164 [ 97.928702][ T5163] NILFS (loop5): invalid segment: Checksum error in segment payload ./strace-static-x86_64: Process 5164 attached [pid 5164] chdir("./13") = 0 [pid 5164] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5164] setpgid(0, 0) = 0 [pid 5164] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5164] write(3, "1000", 4) = 4 [pid 5164] close(3) = 0 [pid 5164] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5164] memfd_create("syzkaller", 0) = 3 [pid 5164] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 97.984557][ T5163] NILFS (loop5): trying rollback from an earlier position [pid 5163] <... mount resumed>) = 0 [pid 5163] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5163] chdir("./file1") = 0 [pid 5163] ioctl(4, LOOP_CLR_FD) = 0 [pid 5163] close(4) = 0 [pid 5163] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5163] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5163] ftruncate(5, 33587195) = 0 [pid 5163] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5164] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5163] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5163] sendfile(6, 7, NULL, 281474978811909 [pid 5154] <... sendfile resumed>) = 1048576 [ 98.055626][ T5163] NILFS (loop5): recovery complete [ 98.073189][ T5165] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5155] <... sendfile resumed>) = 1048576 [pid 5154] exit_group(0) = ? [pid 5155] exit_group(0 [pid 5154] +++ exited with 0 +++ [pid 5155] <... exit_group resumed>) = ? [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5154, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, [pid 5155] +++ exited with 0 +++ [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5155, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./12/binderfs") = 0 [pid 4999] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5164] <... write resumed>) = 2097152 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./12/binderfs") = 0 [pid 4999] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5164] munmap(0x7f18ca796000, 2097152) = 0 [pid 5164] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5164] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5164] close(3) = 0 [pid 5164] mkdir("./file1", 0777) = 0 [ 98.231560][ T5164] loop3: detected capacity change from 0 to 4096 [ 98.275032][ T5164] NILFS (loop3): invalid segment: Checksum error in segment payload [ 98.304266][ T5164] NILFS (loop3): trying rollback from an earlier position [pid 5164] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] <... umount2 resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 4998] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./12/file1", [pid 4999] lstat("./12/file1", [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5157] <... sendfile resumed>) = 1048576 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 98.375610][ T5164] NILFS (loop3): recovery complete [pid 5157] exit_group(0) = ? [pid 4999] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5157] +++ exited with 0 +++ [pid 4998] <... openat resumed>) = 4 [pid 4999] <... openat resumed>) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4 [pid 5164] <... mount resumed>) = 0 [pid 4999] fstat(4, [pid 4998] <... close resumed>) = 0 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5157, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5164] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] rmdir("./12/file1" [pid 4997] restart_syscall(<... resuming interrupted clone ...> [pid 5164] <... openat resumed>) = 3 [pid 4999] getdents64(4, [pid 4998] <... rmdir resumed>) = 0 [pid 4997] <... restart_syscall resumed>) = 0 [pid 5164] chdir("./file1" [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(3, [pid 5164] <... chdir resumed>) = 0 [pid 4999] getdents64(4, [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5164] ioctl(4, LOOP_CLR_FD [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(3 [pid 5164] <... ioctl resumed>) = 0 [pid 4999] close(4 [pid 4998] <... close resumed>) = 0 [pid 4997] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5164] close(4 [pid 4999] <... close resumed>) = 0 [pid 4998] rmdir("./12" [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5164] <... close resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] mkdir("./13", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5164] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4999] rmdir("./12/file1" [pid 4997] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5167 [pid 4999] <... rmdir resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [pid 5164] <... open resumed>) = 4 [pid 4999] getdents64(3, [pid 4997] fstat(3, [pid 5164] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5164] <... open resumed>) = 5 [pid 4999] close(3 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5164] ftruncate(5, 33587195 [pid 4999] <... close resumed>) = 0 [pid 4997] getdents64(3, ./strace-static-x86_64: Process 5167 attached [pid 5164] <... ftruncate resumed>) = 0 [pid 4999] rmdir("./12" [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5167] chdir("./13" [pid 5164] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5167] <... chdir resumed>) = 0 [pid 5164] <... open resumed>) = 6 [pid 4999] <... rmdir resumed>) = 0 [pid 4997] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5167] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5164] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4999] mkdir("./13", 0777 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5167] <... prctl resumed>) = 0 [pid 5164] <... open resumed>) = 7 [pid 5167] setpgid(0, 0) = 0 [pid 5164] sendfile(6, 7, NULL, 281474978811909 [pid 4999] <... mkdir resumed>) = 0 [pid 4997] lstat("./12/binderfs", [pid 5167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5167] <... openat resumed>) = 3 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5167] write(3, "1000", 4 [pid 4999] <... openat resumed>) = 3 [pid 4997] unlink("./12/binderfs" [pid 5167] <... write resumed>) = 4 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5167] close(3 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] <... unlink resumed>) = 0 [pid 5167] <... close resumed>) = 0 [ 98.420545][ T5166] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] close(3 [pid 4997] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5167] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... close resumed>) = 0 [pid 5167] <... symlink resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5167] memfd_create("syzkaller", 0) = 3 [pid 5167] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5168 ./strace-static-x86_64: Process 5168 attached [pid 5168] chdir("./13") = 0 [pid 5168] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5168] setpgid(0, 0) = 0 [pid 5167] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5168] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5168] write(3, "1000", 4) = 4 [pid 5168] close(3) = 0 [pid 5168] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5168] memfd_create("syzkaller", 0) = 3 [pid 5168] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5160] <... sendfile resumed>) = 1048576 [pid 5168] <... mmap resumed>) = 0x7f18ca796000 [pid 5160] exit_group(0) = ? [pid 5160] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5160, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5167] <... write resumed>) = 2097152 [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./12/binderfs", [pid 5168] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./12/binderfs") = 0 [pid 5001] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5167] munmap(0x7f18ca796000, 2097152) = 0 [pid 5167] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5167] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5167] close(3) = 0 [pid 5167] mkdir("./file1", 0777) = 0 [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5167] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 98.676448][ T5167] loop1: detected capacity change from 0 to 4096 [pid 4997] lstat("./12/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, [pid 5168] <... write resumed>) = 2097152 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5168] munmap(0x7f18ca796000, 2097152) = 0 [pid 4997] getdents64(4, [pid 5168] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5168] ioctl(4, LOOP_SET_FD, 3 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 5168] <... ioctl resumed>) = 0 [pid 4997] rmdir("./12/file1" [pid 5168] close(3) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 5168] mkdir("./file1", 0777 [pid 5001] <... umount2 resumed>) = 0 [pid 4997] getdents64(3, [pid 5168] <... mkdir resumed>) = 0 [pid 5001] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5168] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] close(3 [pid 5001] lstat("./12/file1", [pid 4997] <... close resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] rmdir("./12" [pid 5001] umount2("./12/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] <... rmdir resumed>) = 0 [ 98.769755][ T5168] loop2: detected capacity change from 0 to 4096 [ 98.772237][ T5167] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5001] openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] mkdir("./13", 0777 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... mkdir resumed>) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] <... openat resumed>) = 3 [pid 5001] close(4) = 0 [pid 5001] rmdir("./12/file1" [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5001] <... rmdir resumed>) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] getdents64(3, [pid 4997] close(3 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] <... close resumed>) = 0 [pid 5001] close(3 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./12") = 0 [pid 5001] mkdir("./13", 0777 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5169 [pid 5001] <... mkdir resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 ./strace-static-x86_64: Process 5169 attached [pid 5169] chdir("./13" [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5169] <... chdir resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5169] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] close(3 [pid 5169] <... prctl resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5169] setpgid(0, 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5169] <... setpgid resumed>) = 0 [pid 5169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5001] <... clone resumed>, child_tidptr=0x555556f7b690) = 5170 [ 98.824200][ T5168] NILFS (loop2): invalid segment: Checksum error in segment payload [ 98.840126][ T5168] NILFS (loop2): trying rollback from an earlier position [ 98.853538][ T5167] NILFS (loop1): trying rollback from an earlier position [pid 5169] write(3, "1000", 4) = 4 [pid 5169] close(3) = 0 [pid 5169] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 5170 attached [pid 5169] memfd_create("syzkaller", 0 [pid 5170] chdir("./13" [pid 5169] <... memfd_create resumed>) = 3 [pid 5170] <... chdir resumed>) = 0 [pid 5169] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5170] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5169] <... mmap resumed>) = 0x7f18ca796000 [pid 5170] <... prctl resumed>) = 0 [pid 5170] setpgid(0, 0) = 0 [pid 5170] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 98.915510][ T5168] NILFS (loop2): recovery complete [pid 5170] write(3, "1000", 4) = 4 [pid 5170] close(3 [pid 5168] <... mount resumed>) = 0 [pid 5170] <... close resumed>) = 0 [pid 5168] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5170] symlink("/dev/binderfs", "./binderfs" [pid 5169] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5168] <... openat resumed>) = 3 [pid 5170] <... symlink resumed>) = 0 [pid 5168] chdir("./file1" [pid 5170] memfd_create("syzkaller", 0 [pid 5168] <... chdir resumed>) = 0 [pid 5170] <... memfd_create resumed>) = 3 [pid 5168] ioctl(4, LOOP_CLR_FD [pid 5170] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5168] <... ioctl resumed>) = 0 [pid 5170] <... mmap resumed>) = 0x7f18ca796000 [pid 5168] close(4) = 0 [pid 5168] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5168] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5168] ftruncate(5, 33587195) = 0 [pid 5168] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5168] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 98.941500][ T5171] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.973964][ T5167] NILFS (loop1): recovery complete [pid 5168] sendfile(6, 7, NULL, 281474978811909 [pid 5170] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5167] <... mount resumed>) = 0 [pid 5167] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5167] chdir("./file1") = 0 [pid 5167] ioctl(4, LOOP_CLR_FD) = 0 [pid 5167] close(4) = 0 [pid 5167] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5167] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5163] <... sendfile resumed>) = 1048576 [pid 5167] <... open resumed>) = 5 [pid 5167] ftruncate(5, 33587195) = 0 [pid 5167] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5163] exit_group(0 [pid 5167] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5163] <... exit_group resumed>) = ? [pid 5167] <... open resumed>) = 7 [ 99.034521][ T5172] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5167] sendfile(6, 7, NULL, 281474978811909 [pid 5163] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5163, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=22 /* 0.22 s */} --- [pid 5169] <... write resumed>) = 2097152 [pid 5002] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5169] munmap(0x7f18ca796000, 2097152 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5169] <... munmap resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5169] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5002] fstat(3, [pid 5169] <... openat resumed>) = 4 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5169] ioctl(4, LOOP_SET_FD, 3 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5170] <... write resumed>) = 2097152 [pid 5169] <... ioctl resumed>) = 0 [pid 5002] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5169] close(3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5169] <... close resumed>) = 0 [pid 5002] lstat("./13/binderfs", [pid 5170] munmap(0x7f18ca796000, 2097152 [pid 5169] mkdir("./file1", 0777 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./13/binderfs" [pid 5169] <... mkdir resumed>) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 5170] <... munmap resumed>) = 0 [pid 5169] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [ 99.127929][ T5169] loop0: detected capacity change from 0 to 4096 [pid 5002] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5170] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5170] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5170] close(3) = 0 [pid 5170] mkdir("./file1", 0777) = 0 [ 99.183769][ T5169] NILFS (loop0): invalid segment: Checksum error in segment payload [ 99.201280][ T5170] loop4: detected capacity change from 0 to 4096 [ 99.219737][ T5169] NILFS (loop0): trying rollback from an earlier position [ 99.263127][ T5170] NILFS (loop4): invalid segment: Checksum error in segment payload [ 99.272638][ T5170] NILFS (loop4): trying rollback from an earlier position [pid 5170] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./13/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./13/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./13") = 0 [pid 5002] mkdir("./14", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [ 99.310032][ T5169] NILFS (loop0): recovery complete [ 99.315732][ T5170] NILFS (loop4): recovery complete [pid 5169] <... mount resumed>) = 0 [pid 5169] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5169] <... openat resumed>) = 3 [pid 5169] chdir("./file1") = 0 [pid 5169] ioctl(4, LOOP_CLR_FD) = 0 [pid 5169] close(4 [pid 5170] <... mount resumed>) = 0 [pid 5169] <... close resumed>) = 0 [pid 5169] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5170] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5169] <... open resumed>) = 4 [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5175 [pid 5169] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5170] <... openat resumed>) = 3 [pid 5169] <... open resumed>) = 5 [pid 5170] chdir("./file1" [pid 5169] ftruncate(5, 33587195 [pid 5170] <... chdir resumed>) = 0 [pid 5169] <... ftruncate resumed>) = 0 [pid 5169] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5169] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5170] ioctl(4, LOOP_CLR_FD [pid 5169] sendfile(6, 7, NULL, 281474978811909./strace-static-x86_64: Process 5175 attached [pid 5170] <... ioctl resumed>) = 0 [pid 5175] chdir("./14" [pid 5170] close(4) = 0 [ 99.361136][ T5173] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.372725][ T5174] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5170] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5175] <... chdir resumed>) = 0 [pid 5170] <... open resumed>) = 4 [pid 5175] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5170] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5175] setpgid(0, 0) = 0 [pid 5175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5170] <... open resumed>) = 5 [pid 5175] <... openat resumed>) = 3 [pid 5170] ftruncate(5, 33587195 [pid 5175] write(3, "1000", 4 [pid 5170] <... ftruncate resumed>) = 0 [pid 5175] <... write resumed>) = 4 [pid 5170] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5175] close(3 [pid 5170] <... open resumed>) = 6 [pid 5175] <... close resumed>) = 0 [pid 5170] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5175] symlink("/dev/binderfs", "./binderfs" [pid 5170] <... open resumed>) = 7 [pid 5175] <... symlink resumed>) = 0 [pid 5170] sendfile(6, 7, NULL, 281474978811909 [pid 5175] memfd_create("syzkaller", 0) = 3 [pid 5175] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5175] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5175] munmap(0x7f18ca796000, 2097152) = 0 [pid 5175] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5175] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5175] close(3) = 0 [pid 5175] mkdir("./file1", 0777) = 0 [pid 5164] <... sendfile resumed>) = 1048576 [ 99.654969][ T5175] loop5: detected capacity change from 0 to 4096 [pid 5175] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5164] exit_group(0) = ? [pid 5164] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5164, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5000] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./13/binderfs") = 0 [ 99.695346][ T5175] NILFS (loop5): invalid segment: Checksum error in segment payload [ 99.762217][ T5175] NILFS (loop5): trying rollback from an earlier position [ 99.846341][ T5175] NILFS (loop5): recovery complete [pid 5000] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5175] <... mount resumed>) = 0 [pid 5175] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5000] <... umount2 resumed>) = 0 [pid 5175] chdir("./file1") = 0 [pid 5175] ioctl(4, LOOP_CLR_FD) = 0 [pid 5175] close(4) = 0 [pid 5175] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5000] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5175] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5175] ftruncate(5, 33587195) = 0 [ 99.880088][ T5176] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] lstat("./13/file1", [pid 5175] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5175] <... open resumed>) = 6 [pid 5000] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5175] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5175] <... open resumed>) = 7 [pid 5000] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, [pid 5175] sendfile(6, 7, NULL, 281474978811909 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./13/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./13") = 0 [pid 5000] mkdir("./14", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5177 attached , child_tidptr=0x555556f7b690) = 5177 [pid 5177] chdir("./14") = 0 [pid 5177] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5177] setpgid(0, 0) = 0 [pid 5177] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5177] write(3, "1000", 4) = 4 [pid 5177] close(3) = 0 [pid 5177] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5177] memfd_create("syzkaller", 0) = 3 [pid 5177] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5177] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5167] <... sendfile resumed>) = 1048576 [pid 5167] exit_group(0) = ? [pid 5167] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5167, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 4998] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./13/binderfs") = 0 [pid 4998] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5168] <... sendfile resumed>) = 1048576 [pid 5168] exit_group(0) = ? [pid 5168] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5168, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5177] <... write resumed>) = 2097152 [pid 4999] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5177] munmap(0x7f18ca796000, 2097152 [pid 4999] unlink("./13/binderfs" [pid 5177] <... munmap resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5177] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5177] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5177] close(3) = 0 [pid 5177] mkdir("./file1", 0777) = 0 [ 100.265233][ T5177] loop3: detected capacity change from 0 to 4096 [pid 5177] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./13/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [ 100.336059][ T5177] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./13/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./13") = 0 [pid 4998] mkdir("./14", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3 [pid 4999] <... umount2 resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 4999] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5178 [pid 4999] lstat("./13/file1", ./strace-static-x86_64: Process 5178 attached {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 100.403669][ T5177] NILFS (loop3): trying rollback from an earlier position [pid 5178] chdir("./14") = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5178] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5178] <... prctl resumed>) = 0 [pid 5169] <... sendfile resumed>) = 1048576 [pid 5178] setpgid(0, 0 [pid 5169] exit_group(0 [pid 4999] <... openat resumed>) = 4 [pid 5178] <... setpgid resumed>) = 0 [pid 5170] <... sendfile resumed>) = 1048576 [pid 5169] <... exit_group resumed>) = ? [pid 4999] fstat(4, [pid 5178] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5170] exit_group(0 [pid 5178] <... openat resumed>) = 3 [pid 5169] +++ exited with 0 +++ [pid 5178] write(3, "1000", 4 [pid 5170] <... exit_group resumed>) = ? [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5169, si_uid=0, si_status=0, si_utime=0, si_stime=34 /* 0.34 s */} --- [pid 5178] <... write resumed>) = 4 [pid 4997] restart_syscall(<... resuming interrupted clone ...> [pid 5178] close(3 [pid 5170] +++ exited with 0 +++ [pid 4999] getdents64(4, [pid 4997] <... restart_syscall resumed>) = 0 [pid 5178] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5178] symlink("/dev/binderfs", "./binderfs" [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5170, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 4999] getdents64(4, [pid 5178] <... symlink resumed>) = 0 [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5178] memfd_create("syzkaller", 0 [pid 5001] <... restart_syscall resumed>) = 0 [pid 4999] close(4 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5178] <... memfd_create resumed>) = 3 [pid 5177] <... mount resumed>) = 0 [pid 4997] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5178] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4997] <... openat resumed>) = 3 [pid 5178] <... mmap resumed>) = 0x7f18ca796000 [pid 5001] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] fstat(3, [pid 5177] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... close resumed>) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] getdents64(3, [pid 5001] <... openat resumed>) = 3 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] fstat(3, [pid 4997] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] getdents64(3, [pid 4997] lstat("./13/binderfs", [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5177] <... openat resumed>) = 3 [pid 5001] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] rmdir("./13/file1" [pid 4997] unlink("./13/binderfs" [pid 5177] chdir("./file1" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... unlink resumed>) = 0 [pid 5177] <... chdir resumed>) = 0 [pid 5001] lstat("./13/binderfs", [pid 4999] <... rmdir resumed>) = 0 [pid 4997] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5177] ioctl(4, LOOP_CLR_FD [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] getdents64(3, [pid 5001] unlink("./13/binderfs" [pid 5177] <... ioctl resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5177] close(4 [pid 5001] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] close(3 [pid 5178] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5177] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5177] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [ 100.495526][ T5177] NILFS (loop3): recovery complete [ 100.503176][ T5179] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] rmdir("./13" [pid 5177] <... open resumed>) = 4 [pid 4999] <... rmdir resumed>) = 0 [pid 5177] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4999] mkdir("./14", 0777 [pid 5177] <... open resumed>) = 5 [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5180 [pid 5177] ftruncate(5, 33587195) = 0 [pid 5177] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5177] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5177] sendfile(6, 7, NULL, 281474978811909 [pid 5178] <... write resumed>) = 2097152 ./strace-static-x86_64: Process 5180 attached [pid 5180] chdir("./14" [pid 5178] munmap(0x7f18ca796000, 2097152) = 0 [pid 5180] <... chdir resumed>) = 0 [pid 5180] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5180] setpgid(0, 0) = 0 [pid 5178] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5180] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5178] <... openat resumed>) = 4 [pid 5178] ioctl(4, LOOP_SET_FD, 3 [pid 5180] <... openat resumed>) = 3 [pid 5180] write(3, "1000", 4) = 4 [pid 5180] close(3) = 0 [pid 5180] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5180] memfd_create("syzkaller", 0) = 3 [pid 5180] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5178] <... ioctl resumed>) = 0 [pid 5178] close(3) = 0 [pid 5178] mkdir("./file1", 0777) = 0 [ 100.637972][ T5178] loop1: detected capacity change from 0 to 4096 [pid 5178] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5180] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4997] <... umount2 resumed>) = 0 [ 100.717679][ T5178] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5180] <... write resumed>) = 2097152 [pid 5001] <... umount2 resumed>) = 0 [pid 4997] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5180] munmap(0x7f18ca796000, 2097152 [pid 5001] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5180] <... munmap resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./13/file1", [pid 5180] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5001] lstat("./13/file1", [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5180] <... openat resumed>) = 4 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5180] ioctl(4, LOOP_SET_FD, 3 [pid 5001] umount2("./13/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5180] <... ioctl resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... openat resumed>) = 4 [pid 5001] <... openat resumed>) = 4 [pid 4997] fstat(4, [pid 5180] close(3 [pid 5001] fstat(4, [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5180] <... close resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, [pid 5180] mkdir("./file1", 0777 [pid 5001] getdents64(4, [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [ 100.758145][ T5178] NILFS (loop1): trying rollback from an earlier position [ 100.779814][ T5178] NILFS (loop1): recovery complete [ 100.785308][ T5180] loop2: detected capacity change from 0 to 4096 [pid 5180] <... mkdir resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, [pid 5180] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5178] <... mount resumed>) = 0 [pid 5001] getdents64(4, [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4 [pid 5001] close(4 [pid 4997] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 4997] rmdir("./13/file1" [pid 5001] rmdir("./13/file1" [pid 4997] <... rmdir resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4997] getdents64(3, [pid 5001] getdents64(3, [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3 [pid 5001] close(3 [pid 4997] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 4997] rmdir("./13" [pid 5001] rmdir("./13" [pid 4997] <... rmdir resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 4997] mkdir("./14", 0777 [pid 5001] mkdir("./14", 0777 [pid 4997] <... mkdir resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4997] <... openat resumed>) = 3 [pid 5001] <... openat resumed>) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5178] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] close(3 [pid 5178] <... openat resumed>) = 3 [pid 5001] close(3 [pid 4997] <... close resumed>) = 0 [pid 5178] chdir("./file1" [pid 5001] <... close resumed>) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5178] <... chdir resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5182 [pid 5178] ioctl(4, LOOP_CLR_FD [pid 5001] <... clone resumed>, child_tidptr=0x555556f7b690) = 5183 [pid 5178] <... ioctl resumed>) = 0 [ 100.804376][ T5181] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.820798][ T5180] NILFS (loop2): invalid segment: Checksum error in segment payload [ 100.835701][ T5180] NILFS (loop2): trying rollback from an earlier position [pid 5178] close(4) = 0 [pid 5178] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000./strace-static-x86_64: Process 5182 attached [pid 5182] chdir("./14"./strace-static-x86_64: Process 5183 attached ) = 0 [pid 5178] <... open resumed>) = 4 [pid 5183] chdir("./14" [pid 5182] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5178] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5183] <... chdir resumed>) = 0 [pid 5182] <... prctl resumed>) = 0 [pid 5178] <... open resumed>) = 5 [pid 5183] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5182] setpgid(0, 0 [pid 5178] ftruncate(5, 33587195 [pid 5183] <... prctl resumed>) = 0 [pid 5182] <... setpgid resumed>) = 0 [pid 5178] <... ftruncate resumed>) = 0 [pid 5183] setpgid(0, 0 [pid 5182] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5178] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5183] <... setpgid resumed>) = 0 [pid 5182] <... openat resumed>) = 3 [pid 5178] <... open resumed>) = 6 [pid 5183] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5182] write(3, "1000", 4 [pid 5178] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5183] <... openat resumed>) = 3 [pid 5182] <... write resumed>) = 4 [pid 5178] <... open resumed>) = 7 [pid 5183] write(3, "1000", 4 [ 100.862499][ T5180] NILFS (loop2): recovery complete [pid 5182] close(3 [pid 5178] sendfile(6, 7, NULL, 281474978811909 [pid 5183] <... write resumed>) = 4 [pid 5182] <... close resumed>) = 0 [pid 5183] close(3 [pid 5182] symlink("/dev/binderfs", "./binderfs" [pid 5183] <... close resumed>) = 0 [pid 5182] <... symlink resumed>) = 0 [pid 5183] symlink("/dev/binderfs", "./binderfs" [pid 5182] memfd_create("syzkaller", 0 [pid 5183] <... symlink resumed>) = 0 [pid 5182] <... memfd_create resumed>) = 3 [pid 5183] memfd_create("syzkaller", 0 [pid 5182] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5183] <... memfd_create resumed>) = 3 [pid 5182] <... mmap resumed>) = 0x7f18ca796000 [pid 5183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5180] <... mount resumed>) = 0 [pid 5183] <... mmap resumed>) = 0x7f18ca796000 [pid 5180] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5180] chdir("./file1") = 0 [pid 5175] <... sendfile resumed>) = 1048576 [pid 5180] ioctl(4, LOOP_CLR_FD [pid 5175] exit_group(0 [pid 5180] <... ioctl resumed>) = 0 [pid 5175] <... exit_group resumed>) = ? [pid 5180] close(4) = 0 [pid 5175] +++ exited with 0 +++ [pid 5180] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5175, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5180] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5180] <... open resumed>) = 5 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5180] ftruncate(5, 33587195 [ 100.919653][ T5184] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5180] <... ftruncate resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5180] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] fstat(3, [pid 5180] <... open resumed>) = 6 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5180] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5002] getdents64(3, [pid 5180] <... open resumed>) = 7 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5180] sendfile(6, 7, NULL, 281474978811909 [pid 5002] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5182] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5183] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] unlink("./14/binderfs") = 0 [pid 5002] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5182] <... write resumed>) = 2097152 [pid 5182] munmap(0x7f18ca796000, 2097152) = 0 [pid 5182] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5183] <... write resumed>) = 2097152 [pid 5183] munmap(0x7f18ca796000, 2097152 [pid 5182] <... openat resumed>) = 4 [pid 5182] ioctl(4, LOOP_SET_FD, 3 [pid 5183] <... munmap resumed>) = 0 [pid 5182] <... ioctl resumed>) = 0 [pid 5182] close(3) = 0 [pid 5182] mkdir("./file1", 0777 [pid 5183] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5183] ioctl(4, LOOP_SET_FD, 3 [pid 5182] <... mkdir resumed>) = 0 [pid 5182] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5183] <... ioctl resumed>) = 0 [pid 5183] close(3) = 0 [pid 5183] mkdir("./file1", 0777 [pid 5002] <... umount2 resumed>) = 0 [pid 5183] <... mkdir resumed>) = 0 [pid 5183] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5002] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 101.139262][ T5182] loop0: detected capacity change from 0 to 4096 [ 101.164494][ T5183] loop4: detected capacity change from 0 to 4096 [pid 5002] lstat("./14/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./14/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./14") = 0 [pid 5002] mkdir("./15", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5185 ./strace-static-x86_64: Process 5185 attached [pid 5185] chdir("./15") = 0 [pid 5185] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5185] setpgid(0, 0) = 0 [ 101.221515][ T5182] NILFS (loop0): invalid segment: Checksum error in segment payload [ 101.239407][ T5183] NILFS (loop4): invalid segment: Checksum error in segment payload [ 101.251354][ T5182] NILFS (loop0): trying rollback from an earlier position [ 101.257718][ T5183] NILFS (loop4): trying rollback from an earlier position [pid 5185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5185] write(3, "1000", 4) = 4 [pid 5185] close(3) = 0 [pid 5185] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5185] memfd_create("syzkaller", 0) = 3 [pid 5185] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 101.302347][ T5183] NILFS (loop4): recovery complete [pid 5183] <... mount resumed>) = 0 [pid 5183] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5183] chdir("./file1") = 0 [pid 5183] ioctl(4, LOOP_CLR_FD) = 0 [pid 5183] close(4 [pid 5185] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5183] <... close resumed>) = 0 [pid 5183] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5183] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5183] ftruncate(5, 33587195) = 0 [pid 5183] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5183] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 101.337320][ T5186] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.369241][ T5182] NILFS (loop0): recovery complete [pid 5183] sendfile(6, 7, NULL, 281474978811909 [pid 5182] <... mount resumed>) = 0 [pid 5182] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5182] chdir("./file1") = 0 [pid 5182] ioctl(4, LOOP_CLR_FD) = 0 [pid 5182] close(4) = 0 [pid 5182] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5182] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5182] ftruncate(5, 33587195) = 0 [pid 5182] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [ 101.421616][ T5187] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5185] <... write resumed>) = 2097152 [pid 5182] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5182] sendfile(6, 7, NULL, 281474978811909 [pid 5185] munmap(0x7f18ca796000, 2097152) = 0 [pid 5185] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5185] ioctl(4, LOOP_SET_FD, 3) = 0 [ 101.530220][ T5185] loop5: detected capacity change from 0 to 4096 [pid 5185] close(3) = 0 [pid 5185] mkdir("./file1", 0777) = 0 [pid 5185] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5177] <... sendfile resumed>) = 1048576 [pid 5177] exit_group(0) = ? [pid 5177] +++ exited with 0 +++ [ 101.602488][ T5185] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5177, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./14/binderfs") = 0 [ 101.655604][ T5185] NILFS (loop5): trying rollback from an earlier position [ 101.737314][ T5185] NILFS (loop5): recovery complete [pid 5000] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5185] <... mount resumed>) = 0 [pid 5185] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5185] chdir("./file1") = 0 [pid 5185] ioctl(4, LOOP_CLR_FD) = 0 [pid 5185] close(4) = 0 [pid 5185] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5185] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5185] ftruncate(5, 33587195) = 0 [ 101.761302][ T5188] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5185] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5185] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5000] <... umount2 resumed>) = 0 [pid 5185] sendfile(6, 7, NULL, 281474978811909 [pid 5000] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./14/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./14/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./14") = 0 [pid 5000] mkdir("./15", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5189 ./strace-static-x86_64: Process 5189 attached [pid 5189] chdir("./15") = 0 [pid 5189] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5189] setpgid(0, 0) = 0 [pid 5189] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5189] write(3, "1000", 4) = 4 [pid 5189] close(3) = 0 [pid 5189] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5189] memfd_create("syzkaller", 0) = 3 [pid 5189] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5189] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5178] <... sendfile resumed>) = 1048576 [pid 5178] exit_group(0) = ? [pid 5180] <... sendfile resumed>) = 1048576 [pid 5180] exit_group(0) = ? [pid 5189] <... write resumed>) = 2097152 [pid 5178] +++ exited with 0 +++ [pid 5189] munmap(0x7f18ca796000, 2097152 [pid 5180] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5178, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5180, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, [pid 4998] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] unlink("./14/binderfs") = 0 [pid 4998] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... openat resumed>) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5189] <... munmap resumed>) = 0 [pid 4998] getdents64(3, [pid 5189] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5189] <... openat resumed>) = 4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./14/binderfs", [pid 5189] ioctl(4, LOOP_SET_FD, 3 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5189] <... ioctl resumed>) = 0 [pid 4998] unlink("./14/binderfs" [pid 5189] close(3 [pid 4998] <... unlink resumed>) = 0 [pid 4998] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5189] <... close resumed>) = 0 [pid 5189] mkdir("./file1", 0777) = 0 [ 102.150914][ T5189] loop3: detected capacity change from 0 to 4096 [ 102.197374][ T5189] NILFS (loop3): invalid segment: Checksum error in segment payload [ 102.231741][ T5189] NILFS (loop3): trying rollback from an earlier position [pid 5189] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./14/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./14/file1") = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [ 102.317575][ T5189] NILFS (loop3): recovery complete [pid 4999] rmdir("./14") = 0 [pid 4999] mkdir("./15", 0777 [pid 4998] <... umount2 resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 5189] <... mount resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5191 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./14/file1", [pid 5189] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5189] <... openat resumed>) = 3 [pid 5189] chdir("./file1" [pid 4998] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5191 attached ) = -1 EINVAL (Invalid argument) [pid 5191] chdir("./15" [pid 4998] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5191] <... chdir resumed>) = 0 [pid 4998] <... openat resumed>) = 4 [pid 5191] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] fstat(4, [pid 5191] <... prctl resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5191] setpgid(0, 0 [pid 4998] getdents64(4, [pid 5191] <... setpgid resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] getdents64(4, [pid 5191] <... openat resumed>) = 3 [pid 5189] <... chdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5191] write(3, "1000", 4 [pid 5189] ioctl(4, LOOP_CLR_FD [pid 4998] close(4 [pid 5191] <... write resumed>) = 4 [pid 4998] <... close resumed>) = 0 [pid 5191] close(3 [pid 4998] rmdir("./14/file1" [pid 5191] <... close resumed>) = 0 [pid 5189] <... ioctl resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5191] symlink("/dev/binderfs", "./binderfs" [pid 5189] close(4 [pid 4998] getdents64(3, [pid 5191] <... symlink resumed>) = 0 [pid 5189] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5191] memfd_create("syzkaller", 0 [pid 5189] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] close(3 [pid 5191] <... memfd_create resumed>) = 3 [pid 4998] <... close resumed>) = 0 [pid 5191] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] rmdir("./14" [pid 5191] <... mmap resumed>) = 0x7f18ca796000 [ 102.359950][ T5190] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5189] <... open resumed>) = 4 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] mkdir("./15", 0777 [pid 5189] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] <... mkdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5189] <... open resumed>) = 5 [pid 4998] <... openat resumed>) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3 [pid 5189] ftruncate(5, 33587195 [pid 4998] <... close resumed>) = 0 [pid 5189] <... ftruncate resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5189] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5192 [pid 5189] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5189] sendfile(6, 7, NULL, 281474978811909./strace-static-x86_64: Process 5192 attached [pid 5192] chdir("./15") = 0 [pid 5192] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5192] setpgid(0, 0) = 0 [pid 5192] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5192] write(3, "1000", 4) = 4 [pid 5192] close(3) = 0 [pid 5192] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5192] memfd_create("syzkaller", 0) = 3 [pid 5192] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5191] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5183] <... sendfile resumed>) = 1048576 [pid 5183] exit_group(0) = ? [pid 5183] +++ exited with 0 +++ [pid 5192] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5183, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5001] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5182] <... sendfile resumed>) = 1048576 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./14/binderfs" [pid 5191] <... write resumed>) = 2097152 [pid 5191] munmap(0x7f18ca796000, 2097152 [pid 5001] <... unlink resumed>) = 0 [pid 5182] exit_group(0 [pid 5001] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5182] <... exit_group resumed>) = ? [pid 5182] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5182, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [pid 4997] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./14/binderfs") = 0 [pid 4997] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5191] <... munmap resumed>) = 0 [pid 5191] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5191] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5191] close(3) = 0 [pid 5191] mkdir("./file1", 0777 [pid 5192] <... write resumed>) = 2097152 [pid 5192] munmap(0x7f18ca796000, 2097152 [pid 5191] <... mkdir resumed>) = 0 [pid 5192] <... munmap resumed>) = 0 [ 102.615699][ T5191] loop2: detected capacity change from 0 to 4096 [pid 5191] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5192] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5192] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5192] close(3) = 0 [pid 5192] mkdir("./file1", 0777) = 0 [ 102.661360][ T5191] NILFS (loop2): invalid segment: Checksum error in segment payload [ 102.671870][ T5192] loop1: detected capacity change from 0 to 4096 [pid 5192] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./14/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [ 102.733421][ T5191] NILFS (loop2): trying rollback from an earlier position [ 102.743855][ T5192] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5001] rmdir("./14/file1" [pid 4997] <... umount2 resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./14") = 0 [pid 5001] mkdir("./15", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... clone resumed>, child_tidptr=0x555556f7b690) = 5193 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5193 attached [pid 4997] lstat("./14/file1", [pid 5193] chdir("./15" [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5193] <... chdir resumed>) = 0 [pid 5193] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5193] setpgid(0, 0) = 0 [pid 5193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4997] umount2("./14/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5193] <... openat resumed>) = 3 [pid 5193] write(3, "1000", 4 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5193] <... write resumed>) = 4 [pid 4997] openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5193] close(3) = 0 [pid 4997] <... openat resumed>) = 4 [pid 5193] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4997] fstat(4, [ 102.786735][ T5191] NILFS (loop2): recovery complete [ 102.804494][ T5192] NILFS (loop1): trying rollback from an earlier position [pid 5193] memfd_create("syzkaller", 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5193] <... memfd_create resumed>) = 3 [pid 5193] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4997] getdents64(4, [pid 5193] <... mmap resumed>) = 0x7f18ca796000 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./14/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3 [pid 5191] <... mount resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 5191] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4997] rmdir("./14" [pid 5191] <... openat resumed>) = 3 [pid 5191] chdir("./file1") = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 5191] ioctl(4, LOOP_CLR_FD [pid 4997] mkdir("./15", 0777 [pid 5191] <... ioctl resumed>) = 0 [pid 5191] close(4 [pid 5185] <... sendfile resumed>) = 1048576 [pid 4997] <... mkdir resumed>) = 0 [pid 5193] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5191] <... close resumed>) = 0 [pid 5191] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5185] exit_group(0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5191] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5191] ftruncate(5, 33587195 [pid 4997] <... openat resumed>) = 3 [pid 5185] <... exit_group resumed>) = ? [pid 5191] <... ftruncate resumed>) = 0 [pid 5191] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5191] <... open resumed>) = 6 [pid 5191] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5185] +++ exited with 0 +++ [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 102.870430][ T5194] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.887791][ T5192] NILFS (loop1): recovery complete [pid 5191] sendfile(6, 7, NULL, 281474978811909 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5185, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5196 [pid 5002] <... openat resumed>) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, ./strace-static-x86_64: Process 5196 attached 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5196] chdir("./15" [pid 5192] <... mount resumed>) = 0 [pid 5002] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5196] <... chdir resumed>) = 0 [pid 5192] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5192] chdir("./file1") = 0 [pid 5192] ioctl(4, LOOP_CLR_FD) = 0 [pid 5196] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5192] close(4 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5196] <... prctl resumed>) = 0 [pid 5192] <... close resumed>) = 0 [pid 5192] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5192] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5196] setpgid(0, 0 [pid 5192] <... open resumed>) = 5 [pid 5002] lstat("./15/binderfs", [pid 5196] <... setpgid resumed>) = 0 [pid 5192] ftruncate(5, 33587195 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5192] <... ftruncate resumed>) = 0 [pid 5192] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5196] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5192] <... open resumed>) = 6 [pid 5002] unlink("./15/binderfs" [pid 5192] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5192] sendfile(6, 7, NULL, 281474978811909 [pid 5196] <... openat resumed>) = 3 [pid 5002] <... unlink resumed>) = 0 [pid 5196] write(3, "1000", 4 [pid 5002] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5196] <... write resumed>) = 4 [pid 5196] close(3) = 0 [pid 5196] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5196] memfd_create("syzkaller", 0 [pid 5193] <... write resumed>) = 2097152 [pid 5196] <... memfd_create resumed>) = 3 [pid 5196] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 102.955042][ T5195] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5193] munmap(0x7f18ca796000, 2097152 [pid 5196] <... mmap resumed>) = 0x7f18ca796000 [pid 5193] <... munmap resumed>) = 0 [pid 5193] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5193] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5193] close(3) = 0 [pid 5193] mkdir("./file1", 0777 [pid 5196] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5193] <... mkdir resumed>) = 0 [ 103.037400][ T5193] loop4: detected capacity change from 0 to 4096 [ 103.114333][ T5193] NILFS (loop4): invalid segment: Checksum error in segment payload [ 103.122394][ T5193] NILFS (loop4): trying rollback from an earlier position [pid 5193] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5196] <... write resumed>) = 2097152 [pid 5002] <... umount2 resumed>) = 0 [pid 5196] munmap(0x7f18ca796000, 2097152) = 0 [pid 5196] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5196] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5002] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./15/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5196] close(3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5196] <... close resumed>) = 0 [pid 5196] mkdir("./file1", 0777 [pid 5002] <... openat resumed>) = 4 [pid 5196] <... mkdir resumed>) = 0 [pid 5002] fstat(4, [pid 5196] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./15/file1") = 0 [ 103.206023][ T5196] loop0: detected capacity change from 0 to 4096 [ 103.233401][ T5193] NILFS (loop4): recovery complete [pid 5002] getdents64(3, [pid 5193] <... mount resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5193] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5002] rmdir("./15" [pid 5193] <... openat resumed>) = 3 [pid 5002] <... rmdir resumed>) = 0 [pid 5193] chdir("./file1" [pid 5002] mkdir("./16", 0777) = 0 [pid 5193] <... chdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5193] ioctl(4, LOOP_CLR_FD [pid 5002] <... openat resumed>) = 3 [pid 5193] <... ioctl resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5193] close(4 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 5193] <... close resumed>) = 0 [pid 5193] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5002] <... close resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5199 [pid 5193] <... open resumed>) = 4 [pid 5193] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5193] ftruncate(5, 33587195) = 0 ./strace-static-x86_64: Process 5199 attached [ 103.255932][ T5198] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.258372][ T5196] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5193] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5199] chdir("./16" [pid 5193] <... open resumed>) = 6 [pid 5199] <... chdir resumed>) = 0 [pid 5199] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5199] setpgid(0, 0 [pid 5193] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5199] <... setpgid resumed>) = 0 [pid 5199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5193] <... open resumed>) = 7 [pid 5199] write(3, "1000", 4) = 4 [pid 5193] sendfile(6, 7, NULL, 281474978811909 [pid 5199] close(3) = 0 [pid 5199] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5199] memfd_create("syzkaller", 0) = 3 [pid 5199] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 103.402081][ T5196] NILFS (loop0): trying rollback from an earlier position [pid 5199] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5189] <... sendfile resumed>) = 1048576 [pid 5189] exit_group(0) = ? [pid 5199] <... write resumed>) = 2097152 [pid 5199] munmap(0x7f18ca796000, 2097152 [pid 5189] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5189, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=25 /* 0.25 s */} --- [pid 5199] <... munmap resumed>) = 0 [pid 5199] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5199] ioctl(4, LOOP_SET_FD, 3 [pid 5000] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5199] <... ioctl resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5199] close(3) = 0 [pid 5199] mkdir("./file1", 0777 [pid 5000] <... openat resumed>) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 5199] <... mkdir resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./15/binderfs", [pid 5199] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./15/binderfs") = 0 [pid 5000] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5196] <... mount resumed>) = 0 [ 103.505879][ T5199] loop5: detected capacity change from 0 to 4096 [ 103.513305][ T5196] NILFS (loop0): recovery complete [ 103.535414][ T5200] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5196] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5196] chdir("./file1") = 0 [pid 5196] ioctl(4, LOOP_CLR_FD) = 0 [pid 5196] close(4) = 0 [pid 5196] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5196] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5196] ftruncate(5, 33587195) = 0 [pid 5196] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5196] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 103.551331][ T5199] NILFS (loop5): invalid segment: Checksum error in segment payload [ 103.600188][ T5199] NILFS (loop5): trying rollback from an earlier position [pid 5196] sendfile(6, 7, NULL, 281474978811909 [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./15/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 103.718112][ T5199] NILFS (loop5): recovery complete [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./15/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3 [pid 5199] <... mount resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5199] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5000] rmdir("./15" [pid 5199] <... openat resumed>) = 3 [pid 5000] <... rmdir resumed>) = 0 [pid 5199] chdir("./file1" [pid 5000] mkdir("./16", 0777 [pid 5199] <... chdir resumed>) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 5199] ioctl(4, LOOP_CLR_FD [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5199] <... ioctl resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5199] close(4 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5199] <... close resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5202 ./strace-static-x86_64: Process 5202 attached [pid 5199] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5202] chdir("./16" [pid 5199] <... open resumed>) = 4 [pid 5202] <... chdir resumed>) = 0 [pid 5199] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5202] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5199] <... open resumed>) = 5 [pid 5202] setpgid(0, 0 [ 103.779989][ T5201] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5199] ftruncate(5, 33587195 [pid 5202] <... setpgid resumed>) = 0 [pid 5202] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5199] <... ftruncate resumed>) = 0 [pid 5202] <... openat resumed>) = 3 [pid 5199] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5202] write(3, "1000", 4 [pid 5199] <... open resumed>) = 6 [pid 5202] <... write resumed>) = 4 [pid 5199] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5202] close(3 [pid 5199] <... open resumed>) = 7 [pid 5202] <... close resumed>) = 0 [pid 5199] sendfile(6, 7, NULL, 281474978811909 [pid 5202] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5202] memfd_create("syzkaller", 0) = 3 [pid 5202] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5202] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5192] <... sendfile resumed>) = 1048576 [pid 5192] exit_group(0) = ? [pid 5192] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5192, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 4998] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5202] <... write resumed>) = 2097152 [pid 4998] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5191] <... sendfile resumed>) = 1048576 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5191] exit_group(0 [pid 4998] lstat("./15/binderfs", [pid 5191] <... exit_group resumed>) = ? [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./15/binderfs" [pid 5191] +++ exited with 0 +++ [pid 4998] <... unlink resumed>) = 0 [pid 5202] munmap(0x7f18ca796000, 2097152 [pid 4998] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5191, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5202] <... munmap resumed>) = 0 [pid 4999] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5202] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5202] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./15/binderfs") = 0 [pid 4999] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5202] <... ioctl resumed>) = 0 [pid 5202] close(3) = 0 [pid 5202] mkdir("./file1", 0777) = 0 [ 104.077992][ T5202] loop3: detected capacity change from 0 to 4096 [ 104.159401][ T5202] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5202] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] <... umount2 resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [ 104.201951][ T5202] NILFS (loop3): trying rollback from an earlier position [pid 4998] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./15/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] lstat("./15/file1", [pid 4998] <... openat resumed>) = 4 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] fstat(4, [pid 4999] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] getdents64(4, [pid 4999] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] <... openat resumed>) = 4 [pid 4998] getdents64(4, [pid 4999] fstat(4, [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] close(4 [pid 4999] getdents64(4, [pid 4998] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] rmdir("./15/file1" [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 4999] close(4 [pid 4998] getdents64(3, [pid 4999] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] rmdir("./15/file1" [pid 4998] close(3 [pid 4999] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, [pid 4998] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] rmdir("./15" [pid 4999] close(3) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 4999] rmdir("./15" [pid 4998] mkdir("./16", 0777 [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./16", 0777 [pid 4998] <... mkdir resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] <... openat resumed>) = 3 [pid 4999] <... openat resumed>) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] close(3 [pid 4999] close(3 [pid 4998] <... close resumed>) = 0 [ 104.322732][ T5202] NILFS (loop3): recovery complete [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5206 [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5207 ./strace-static-x86_64: Process 5206 attached ./strace-static-x86_64: Process 5207 attached [pid 5202] <... mount resumed>) = 0 [pid 5202] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5206] chdir("./16" [pid 5202] <... openat resumed>) = 3 [pid 5207] chdir("./16" [pid 5206] <... chdir resumed>) = 0 [pid 5202] chdir("./file1" [pid 5206] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5207] <... chdir resumed>) = 0 [pid 5202] <... chdir resumed>) = 0 [pid 5207] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5206] <... prctl resumed>) = 0 [pid 5202] ioctl(4, LOOP_CLR_FD [pid 5207] <... prctl resumed>) = 0 [pid 5206] setpgid(0, 0 [pid 5202] <... ioctl resumed>) = 0 [pid 5207] setpgid(0, 0 [pid 5206] <... setpgid resumed>) = 0 [pid 5202] close(4 [pid 5207] <... setpgid resumed>) = 0 [pid 5206] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5202] <... close resumed>) = 0 [pid 5207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5206] <... openat resumed>) = 3 [pid 5202] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5207] <... openat resumed>) = 3 [pid 5206] write(3, "1000", 4) = 4 [pid 5206] close(3) = 0 [pid 5206] symlink("/dev/binderfs", "./binderfs" [pid 5207] write(3, "1000", 4 [pid 5206] <... symlink resumed>) = 0 [pid 5202] <... open resumed>) = 4 [pid 5207] <... write resumed>) = 4 [pid 5206] memfd_create("syzkaller", 0 [pid 5202] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5193] <... sendfile resumed>) = 1048576 [pid 5207] close(3 [pid 5206] <... memfd_create resumed>) = 3 [pid 5202] <... open resumed>) = 5 [ 104.379723][ T5205] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5207] <... close resumed>) = 0 [pid 5206] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5202] ftruncate(5, 33587195 [pid 5193] exit_group(0 [pid 5207] symlink("/dev/binderfs", "./binderfs" [pid 5206] <... mmap resumed>) = 0x7f18ca796000 [pid 5202] <... ftruncate resumed>) = 0 [pid 5193] <... exit_group resumed>) = ? [pid 5207] <... symlink resumed>) = 0 [pid 5202] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5193] +++ exited with 0 +++ [pid 5207] memfd_create("syzkaller", 0 [pid 5202] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5207] <... memfd_create resumed>) = 3 [pid 5202] <... open resumed>) = 7 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5193, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5207] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5202] sendfile(6, 7, NULL, 281474978811909 [pid 5001] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, [pid 5207] <... mmap resumed>) = 0x7f18ca796000 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5206] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] unlink("./15/binderfs") = 0 [pid 5001] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5207] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5206] <... write resumed>) = 2097152 [pid 5206] munmap(0x7f18ca796000, 2097152) = 0 [pid 5206] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5206] ioctl(4, LOOP_SET_FD, 3 [pid 5207] <... write resumed>) = 2097152 [pid 5206] <... ioctl resumed>) = 0 [pid 5206] close(3) = 0 [pid 5206] mkdir("./file1", 0777) = 0 [pid 5206] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [ 104.607299][ T5206] loop2: detected capacity change from 0 to 4096 [pid 5207] munmap(0x7f18ca796000, 2097152) = 0 [pid 5207] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5207] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./15/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5207] <... ioctl resumed>) = 0 [pid 5001] rmdir("./15/file1" [pid 5207] close(3) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5207] mkdir("./file1", 0777) = 0 [pid 5207] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [ 104.679338][ T5207] loop1: detected capacity change from 0 to 4096 [ 104.703784][ T5206] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./15") = 0 [pid 5001] mkdir("./16", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5208 ./strace-static-x86_64: Process 5208 attached [pid 5208] chdir("./16") = 0 [pid 5196] <... sendfile resumed>) = 1048576 [pid 5196] exit_group(0) = ? [pid 5208] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5196] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5196, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 4997] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 104.732823][ T5206] NILFS (loop2): trying rollback from an earlier position [ 104.757930][ T5207] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5208] <... prctl resumed>) = 0 [pid 5208] setpgid(0, 0) = 0 [pid 5208] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5208] write(3, "1000", 4) = 4 [pid 5208] close(3) = 0 [pid 5208] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5208] memfd_create("syzkaller", 0) = 3 [pid 5208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5206] <... mount resumed>) = 0 [pid 5199] <... sendfile resumed>) = 1048576 [pid 4997] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5199] exit_group(0) = ? [pid 5199] +++ exited with 0 +++ [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5199, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 4997] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5206] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 4997] <... openat resumed>) = 3 [pid 5206] chdir("./file1" [pid 4997] fstat(3, [pid 5002] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5206] <... chdir resumed>) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] getdents64(3, [ 104.803681][ T5207] NILFS (loop1): trying rollback from an earlier position [ 104.815598][ T5206] NILFS (loop2): recovery complete [ 104.828342][ T5209] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5208] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5206] ioctl(4, LOOP_CLR_FD [pid 5002] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5206] <... ioctl resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 4997] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5207] <... mount resumed>) = 0 [pid 5206] close(4 [pid 5002] fstat(3, [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5206] <... close resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] lstat("./15/binderfs", [pid 5206] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5002] getdents64(3, [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] unlink("./15/binderfs" [pid 5002] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... unlink resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./16/binderfs") = 0 [pid 5206] <... open resumed>) = 4 [pid 5207] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5206] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5207] <... openat resumed>) = 3 [pid 5206] <... open resumed>) = 5 [pid 5207] chdir("./file1" [pid 5206] ftruncate(5, 33587195 [pid 5207] <... chdir resumed>) = 0 [pid 5206] <... ftruncate resumed>) = 0 [pid 5207] ioctl(4, LOOP_CLR_FD [pid 5206] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5207] <... ioctl resumed>) = 0 [pid 5206] <... open resumed>) = 6 [pid 5207] close(4 [pid 5206] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5207] <... close resumed>) = 0 [pid 5206] <... open resumed>) = 7 [pid 5207] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [ 104.854436][ T5207] NILFS (loop1): recovery complete [ 104.867357][ T5210] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5206] sendfile(6, 7, NULL, 281474978811909 [pid 5207] <... open resumed>) = 4 [pid 5207] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5207] ftruncate(5, 33587195) = 0 [pid 5207] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5207] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5207] sendfile(6, 7, NULL, 281474978811909 [pid 5208] <... write resumed>) = 2097152 [pid 5208] munmap(0x7f18ca796000, 2097152) = 0 [pid 5208] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5208] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5208] close(3) = 0 [pid 4997] <... umount2 resumed>) = 0 [ 105.021079][ T5208] loop4: detected capacity change from 0 to 4096 [pid 4997] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./15/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5208] mkdir("./file1", 0777 [pid 4997] umount2("./15/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5208] <... mkdir resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5208] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4997] openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./15/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./15" [pid 5002] <... umount2 resumed>) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 4997] mkdir("./16", 0777 [pid 5002] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... mkdir resumed>) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] close(3 [pid 5002] lstat("./16/file1", [pid 4997] <... close resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5213 [pid 5002] rmdir("./16/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./16") = 0 [ 105.126778][ T5208] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5002] mkdir("./17", 0777./strace-static-x86_64: Process 5213 attached ) = 0 [pid 5213] chdir("./16" [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5213] <... chdir resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5213] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5213] <... prctl resumed>) = 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5213] setpgid(0, 0 [pid 5002] close(3 [pid 5213] <... setpgid resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5214 [pid 5213] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5213] write(3, "1000", 4) = 4 [pid 5213] close(3./strace-static-x86_64: Process 5214 attached ) = 0 [pid 5214] chdir("./17" [pid 5213] symlink("/dev/binderfs", "./binderfs" [pid 5214] <... chdir resumed>) = 0 [pid 5213] <... symlink resumed>) = 0 [pid 5214] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5213] memfd_create("syzkaller", 0 [pid 5214] <... prctl resumed>) = 0 [pid 5213] <... memfd_create resumed>) = 3 [pid 5214] setpgid(0, 0 [pid 5213] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5214] <... setpgid resumed>) = 0 [pid 5213] <... mmap resumed>) = 0x7f18ca796000 [pid 5214] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5214] write(3, "1000", 4) = 4 [pid 5214] close(3) = 0 [ 105.188271][ T5208] NILFS (loop4): trying rollback from an earlier position [pid 5214] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5214] memfd_create("syzkaller", 0) = 3 [pid 5214] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5213] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 105.281081][ T5208] NILFS (loop4): recovery complete [pid 5214] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5208] <... mount resumed>) = 0 [pid 5208] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5208] chdir("./file1") = 0 [pid 5208] ioctl(4, LOOP_CLR_FD) = 0 [pid 5208] close(4) = 0 [pid 5208] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5208] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5208] ftruncate(5, 33587195) = 0 [pid 5208] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5208] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 105.321473][ T5215] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5208] sendfile(6, 7, NULL, 281474978811909 [pid 5214] <... write resumed>) = 2097152 [pid 5214] munmap(0x7f18ca796000, 2097152) = 0 [pid 5214] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5214] ioctl(4, LOOP_SET_FD, 3 [pid 5213] <... write resumed>) = 2097152 [pid 5213] munmap(0x7f18ca796000, 2097152) = 0 [pid 5214] <... ioctl resumed>) = 0 [pid 5213] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5213] ioctl(4, LOOP_SET_FD, 3 [pid 5214] close(3) = 0 [pid 5214] mkdir("./file1", 0777) = 0 [pid 5202] <... sendfile resumed>) = 1048576 [pid 5214] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5213] <... ioctl resumed>) = 0 [pid 5202] exit_group(0 [pid 5213] close(3 [pid 5202] <... exit_group resumed>) = ? [pid 5213] <... close resumed>) = 0 [pid 5213] mkdir("./file1", 0777 [pid 5202] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5202, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [ 105.432545][ T5214] loop5: detected capacity change from 0 to 4096 [ 105.449935][ T5213] loop0: detected capacity change from 0 to 4096 [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 5213] <... mkdir resumed>) = 0 [pid 5000] <... restart_syscall resumed>) = 0 [pid 5213] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5000] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./16/binderfs") = 0 [ 105.500776][ T5214] NILFS (loop5): invalid segment: Checksum error in segment payload [ 105.510421][ T5213] NILFS (loop0): invalid segment: Checksum error in segment payload [ 105.524818][ T5214] NILFS (loop5): trying rollback from an earlier position [ 105.557698][ T5213] NILFS (loop0): trying rollback from an earlier position [pid 5000] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5000] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./16/file1", [pid 5213] <... mount resumed>) = 0 [pid 5213] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5213] <... openat resumed>) = 3 [pid 5000] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5213] chdir("./file1") = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5213] ioctl(4, LOOP_CLR_FD [pid 5000] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5213] <... ioctl resumed>) = 0 [pid 5000] fstat(4, [pid 5213] close(4 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5214] <... mount resumed>) = 0 [pid 5213] <... close resumed>) = 0 [ 105.614063][ T5214] NILFS (loop5): recovery complete [ 105.624968][ T5213] NILFS (loop0): recovery complete [ 105.645402][ T5216] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] getdents64(4, [pid 5214] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5213] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5214] <... openat resumed>) = 3 [pid 5213] <... open resumed>) = 4 [pid 5000] getdents64(4, [pid 5214] chdir("./file1" [pid 5213] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5214] <... chdir resumed>) = 0 [pid 5213] <... open resumed>) = 5 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5214] ioctl(4, LOOP_CLR_FD [pid 5213] ftruncate(5, 33587195 [pid 5000] close(4 [pid 5214] <... ioctl resumed>) = 0 [pid 5213] <... ftruncate resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5214] close(4 [pid 5213] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] rmdir("./16/file1" [pid 5214] <... close resumed>) = 0 [pid 5213] <... open resumed>) = 6 [pid 5214] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5000] <... rmdir resumed>) = 0 [pid 5213] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5214] <... open resumed>) = 4 [pid 5213] <... open resumed>) = 7 [pid 5000] getdents64(3, [pid 5214] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5213] sendfile(6, 7, NULL, 281474978811909 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5214] <... open resumed>) = 5 [ 105.687797][ T5217] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] close(3 [pid 5214] ftruncate(5, 33587195 [pid 5000] <... close resumed>) = 0 [pid 5214] <... ftruncate resumed>) = 0 [pid 5000] rmdir("./16" [pid 5214] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5000] <... rmdir resumed>) = 0 [pid 5214] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5000] mkdir("./17", 0777 [pid 5214] <... open resumed>) = 7 [pid 5214] sendfile(6, 7, NULL, 281474978811909 [pid 5000] <... mkdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5218 ./strace-static-x86_64: Process 5218 attached [pid 5218] chdir("./17") = 0 [pid 5218] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5218] setpgid(0, 0) = 0 [pid 5218] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5218] write(3, "1000", 4) = 4 [pid 5218] close(3) = 0 [pid 5218] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5218] memfd_create("syzkaller", 0) = 3 [pid 5218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5218] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5218] munmap(0x7f18ca796000, 2097152) = 0 [pid 5218] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5218] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5218] close(3) = 0 [pid 5218] mkdir("./file1", 0777) = 0 [pid 5218] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5206] <... sendfile resumed>) = 1048576 [pid 5206] exit_group(0) = ? [pid 5206] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5206, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 4999] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 105.961907][ T5218] loop3: detected capacity change from 0 to 4096 [pid 4999] unlink("./16/binderfs") = 0 [pid 4999] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5207] <... sendfile resumed>) = 1048576 [pid 5207] exit_group(0) = ? [ 106.031755][ T5218] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5207] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5207, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./16/binderfs") = 0 [ 106.072120][ T5218] NILFS (loop3): trying rollback from an earlier position [ 106.147160][ T5218] NILFS (loop3): recovery complete [pid 4998] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5218] <... mount resumed>) = 0 [pid 5218] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5218] chdir("./file1") = 0 [pid 5218] ioctl(4, LOOP_CLR_FD) = 0 [pid 5218] close(4 [pid 4999] <... umount2 resumed>) = 0 [pid 5218] <... close resumed>) = 0 [pid 5218] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5218] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 4999] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5218] ftruncate(5, 33587195 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 106.189809][ T5219] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5218] <... ftruncate resumed>) = 0 [pid 4999] lstat("./16/file1", [pid 5218] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5218] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4999] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5218] <... open resumed>) = 7 [pid 4998] <... umount2 resumed>) = 0 [pid 5218] sendfile(6, 7, NULL, 281474978811909 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... openat resumed>) = 4 [pid 4998] lstat("./16/file1", [pid 4999] fstat(4, [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 4998] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] getdents64(4, [pid 4998] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] <... openat resumed>) = 4 [pid 4999] close(4 [pid 4998] fstat(4, [pid 4999] <... close resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] rmdir("./16/file1" [pid 4998] getdents64(4, [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(3, [pid 4998] getdents64(4, [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(3 [pid 4998] close(4 [pid 4999] <... close resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 4999] rmdir("./16" [pid 4998] rmdir("./16/file1" [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 4999] mkdir("./17", 0777 [pid 4998] getdents64(3, [pid 4999] <... mkdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] close(3 [pid 4999] <... openat resumed>) = 3 [pid 4998] <... close resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4998] rmdir("./16" [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 4998] <... rmdir resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] mkdir("./17", 0777./strace-static-x86_64: Process 5221 attached ) = 0 [pid 5221] chdir("./17" [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5221 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5221] <... chdir resumed>) = 0 [pid 5221] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] <... openat resumed>) = 3 [pid 5221] <... prctl resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5221] setpgid(0, 0) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] close(3 [pid 5221] <... openat resumed>) = 3 [pid 4998] <... close resumed>) = 0 [pid 5221] write(3, "1000", 4) = 4 [pid 5221] close(3) = 0 [pid 5221] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5221] memfd_create("syzkaller", 0) = 3 [pid 5221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5222 ./strace-static-x86_64: Process 5222 attached [pid 5222] chdir("./17") = 0 [pid 5222] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5222] setpgid(0, 0) = 0 [pid 5222] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5222] write(3, "1000", 4) = 4 [pid 5221] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5222] close(3) = 0 [pid 5222] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5222] memfd_create("syzkaller", 0) = 3 [pid 5221] <... write resumed>) = 2097152 [pid 5222] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5221] munmap(0x7f18ca796000, 2097152 [pid 5222] <... mmap resumed>) = 0x7f18ca796000 [pid 5222] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5221] <... munmap resumed>) = 0 [pid 5221] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5221] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5221] close(3) = 0 [pid 5221] mkdir("./file1", 0777) = 0 [ 106.563879][ T5221] loop2: detected capacity change from 0 to 4096 [pid 5221] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5208] <... sendfile resumed>) = 1048576 [pid 5208] exit_group(0) = ? [pid 5208] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5208, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5001] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5222] <... write resumed>) = 2097152 [pid 5222] munmap(0x7f18ca796000, 2097152) = 0 [pid 5222] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5222] ioctl(4, LOOP_SET_FD, 3 [pid 5001] lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./16/binderfs") = 0 [pid 5001] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5214] <... sendfile resumed>) = 1048576 [pid 5214] exit_group(0) = ? [pid 5214] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5214, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 5002] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./17/binderfs") = 0 [pid 5002] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5222] <... ioctl resumed>) = 0 [pid 5222] close(3) = 0 [pid 5222] mkdir("./file1", 0777) = 0 [ 106.636609][ T5221] NILFS (loop2): invalid segment: Checksum error in segment payload [ 106.654774][ T5221] NILFS (loop2): trying rollback from an earlier position [ 106.670429][ T5222] loop1: detected capacity change from 0 to 4096 [pid 5222] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5221] <... mount resumed>) = 0 [pid 5221] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5221] chdir("./file1") = 0 [pid 5221] ioctl(4, LOOP_CLR_FD) = 0 [pid 5221] close(4) = 0 [pid 5221] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [ 106.728000][ T5221] NILFS (loop2): recovery complete [ 106.746577][ T5222] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5221] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5221] ftruncate(5, 33587195) = 0 [pid 5221] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5221] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 106.774040][ T5223] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.793909][ T5222] NILFS (loop1): trying rollback from an earlier position [pid 5221] sendfile(6, 7, NULL, 281474978811909 [pid 5002] <... umount2 resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5002] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] lstat("./17/file1", [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] lstat("./16/file1", [pid 5002] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] <... openat resumed>) = 4 [pid 5002] fstat(4, [pid 5001] fstat(4, [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, [pid 5001] getdents64(4, [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4 [pid 5001] close(4 [pid 5002] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5002] rmdir("./17/file1" [pid 5001] rmdir("./16/file1" [pid 5002] <... rmdir resumed>) = 0 [pid 5002] getdents64(3, [pid 5001] <... rmdir resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3 [pid 5001] getdents64(3, [pid 5002] <... close resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] rmdir("./17" [pid 5001] close(3 [pid 5002] <... rmdir resumed>) = 0 [pid 5002] mkdir("./18", 0777 [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./16" [pid 5002] <... mkdir resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5001] mkdir("./17", 0777) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] <... openat resumed>) = 3 [pid 5002] close(3 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5002] <... close resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 106.917927][ T5222] NILFS (loop1): recovery complete [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] close(3 [pid 5213] <... sendfile resumed>) = 1048576 [pid 5001] <... close resumed>) = 0 [pid 5222] <... mount resumed>) = 0 [pid 5222] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5225 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5222] <... openat resumed>) = 3 [pid 5222] chdir("./file1") = 0 [pid 5222] ioctl(4, LOOP_CLR_FD) = 0 [pid 5222] close(4) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x555556f7b690) = 5226 [pid 5222] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000./strace-static-x86_64: Process 5225 attached ) = 4 [pid 5213] exit_group(0 [pid 5222] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5222] ftruncate(5, 33587195) = 0 [pid 5222] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5222] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 ./strace-static-x86_64: Process 5226 attached [pid 5222] sendfile(6, 7, NULL, 281474978811909 [pid 5225] chdir("./18" [pid 5213] <... exit_group resumed>) = ? [pid 5226] chdir("./17" [pid 5213] +++ exited with 0 +++ [pid 5226] <... chdir resumed>) = 0 [pid 5225] <... chdir resumed>) = 0 [pid 5226] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5225] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5213, si_uid=0, si_status=0, si_utime=0, si_stime=33 /* 0.33 s */} --- [pid 5226] <... prctl resumed>) = 0 [pid 4997] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5226] setpgid(0, 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5226] <... setpgid resumed>) = 0 [pid 4997] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5226] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5225] <... prctl resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [ 106.948029][ T5224] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5226] <... openat resumed>) = 3 [pid 5225] setpgid(0, 0 [pid 4997] fstat(3, [pid 5226] write(3, "1000", 4 [pid 5225] <... setpgid resumed>) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5226] <... write resumed>) = 4 [pid 4997] getdents64(3, [pid 5226] close(3 [pid 5225] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5226] <... close resumed>) = 0 [pid 4997] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5226] symlink("/dev/binderfs", "./binderfs" [pid 5225] <... openat resumed>) = 3 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5226] <... symlink resumed>) = 0 [pid 5225] write(3, "1000", 4 [pid 4997] lstat("./16/binderfs", [pid 5226] memfd_create("syzkaller", 0 [pid 5225] <... write resumed>) = 4 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5226] <... memfd_create resumed>) = 3 [pid 5225] close(3 [pid 4997] unlink("./16/binderfs" [pid 5226] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5225] <... close resumed>) = 0 [pid 4997] <... unlink resumed>) = 0 [pid 5226] <... mmap resumed>) = 0x7f18ca796000 [pid 5225] symlink("/dev/binderfs", "./binderfs" [pid 4997] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5225] <... symlink resumed>) = 0 [pid 5225] memfd_create("syzkaller", 0) = 3 [pid 5225] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5226] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5225] <... mmap resumed>) = 0x7f18ca796000 [pid 5225] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5226] <... write resumed>) = 2097152 [pid 5226] munmap(0x7f18ca796000, 2097152) = 0 [pid 5226] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5226] ioctl(4, LOOP_SET_FD, 3) = 0 [ 107.146958][ T5226] loop4: detected capacity change from 0 to 4096 [pid 5226] close(3) = 0 [pid 5225] <... write resumed>) = 2097152 [pid 4997] <... umount2 resumed>) = 0 [pid 5226] mkdir("./file1", 0777 [pid 5225] munmap(0x7f18ca796000, 2097152 [pid 4997] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5226] <... mkdir resumed>) = 0 [pid 5225] <... munmap resumed>) = 0 [pid 5218] <... sendfile resumed>) = 1048576 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5226] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5225] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4997] lstat("./16/file1", [pid 5225] <... openat resumed>) = 4 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5225] ioctl(4, LOOP_SET_FD, 3 [pid 4997] umount2("./16/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5225] <... ioctl resumed>) = 0 [pid 5218] exit_group(0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, [pid 5225] close(3 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5225] <... close resumed>) = 0 [pid 4997] getdents64(4, [pid 5225] mkdir("./file1", 0777 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5225] <... mkdir resumed>) = 0 [pid 5218] <... exit_group resumed>) = ? [pid 4997] getdents64(4, [pid 5225] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5218] +++ exited with 0 +++ [pid 4997] close(4 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5218, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- [pid 4997] <... close resumed>) = 0 [pid 4997] rmdir("./16/file1") = 0 [pid 5000] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] getdents64(3, [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] close(3 [pid 5000] <... openat resumed>) = 3 [pid 4997] <... close resumed>) = 0 [pid 5000] fstat(3, [pid 4997] rmdir("./16" [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 5000] getdents64(3, [pid 4997] mkdir("./17", 0777 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [ 107.233827][ T5225] loop5: detected capacity change from 0 to 4096 [ 107.238312][ T5226] NILFS (loop4): invalid segment: Checksum error in segment payload [ 107.262628][ T5226] NILFS (loop4): trying rollback from an earlier position [pid 4997] <... mkdir resumed>) = 0 [pid 5000] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... openat resumed>) = 3 [pid 5000] lstat("./17/binderfs", [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] unlink("./17/binderfs" [pid 4997] close(3 [pid 5226] <... mount resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 5226] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5000] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5226] <... openat resumed>) = 3 [pid 5226] chdir("./file1" [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5228 [pid 5226] <... chdir resumed>) = 0 [pid 5226] ioctl(4, LOOP_CLR_FD) = 0 [pid 5226] close(4./strace-static-x86_64: Process 5228 attached ) = 0 [pid 5228] chdir("./17" [pid 5226] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5228] <... chdir resumed>) = 0 [pid 5228] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5228] setpgid(0, 0) = 0 [pid 5228] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5228] write(3, "1000", 4) = 4 [pid 5228] close(3) = 0 [pid 5228] symlink("/dev/binderfs", "./binderfs" [pid 5226] <... open resumed>) = 4 [pid 5228] <... symlink resumed>) = 0 [ 107.297358][ T5225] NILFS (loop5): invalid segment: Checksum error in segment payload [ 107.301949][ T5226] NILFS (loop4): recovery complete [ 107.321987][ T5227] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5226] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5228] memfd_create("syzkaller", 0 [pid 5226] <... open resumed>) = 5 [pid 5228] <... memfd_create resumed>) = 3 [pid 5226] ftruncate(5, 33587195 [pid 5228] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5226] <... ftruncate resumed>) = 0 [pid 5228] <... mmap resumed>) = 0x7f18ca796000 [pid 5226] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5226] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 107.366893][ T5225] NILFS (loop5): trying rollback from an earlier position [pid 5226] sendfile(6, 7, NULL, 281474978811909 [ 107.458488][ T5225] NILFS (loop5): recovery complete [pid 5228] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5225] <... mount resumed>) = 0 [pid 5225] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5225] chdir("./file1") = 0 [pid 5225] ioctl(4, LOOP_CLR_FD) = 0 [pid 5225] close(4 [pid 5228] <... write resumed>) = 2097152 [pid 5225] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./17/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./17/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./17") = 0 [pid 5000] mkdir("./18", 0777 [pid 5225] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5000] <... mkdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5230 [pid 5225] <... open resumed>) = 4 [ 107.502522][ T5229] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5225] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 ./strace-static-x86_64: Process 5230 attached [pid 5228] munmap(0x7f18ca796000, 2097152 [pid 5225] ftruncate(5, 33587195 [pid 5230] chdir("./18" [pid 5228] <... munmap resumed>) = 0 [pid 5225] <... ftruncate resumed>) = 0 [pid 5230] <... chdir resumed>) = 0 [pid 5225] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5230] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5228] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5225] <... open resumed>) = 6 [pid 5230] <... prctl resumed>) = 0 [pid 5228] <... openat resumed>) = 4 [pid 5225] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5230] setpgid(0, 0 [pid 5228] ioctl(4, LOOP_SET_FD, 3 [pid 5225] <... open resumed>) = 7 [pid 5230] <... setpgid resumed>) = 0 [pid 5225] sendfile(6, 7, NULL, 281474978811909 [pid 5230] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5230] write(3, "1000", 4) = 4 [pid 5230] close(3) = 0 [pid 5230] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5230] memfd_create("syzkaller", 0) = 3 [pid 5230] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 107.591111][ T5228] loop0: detected capacity change from 0 to 4096 [pid 5230] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5228] <... ioctl resumed>) = 0 [pid 5228] close(3) = 0 [pid 5228] mkdir("./file1", 0777) = 0 [ 107.705249][ T5228] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5228] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5230] <... write resumed>) = 2097152 [pid 5230] munmap(0x7f18ca796000, 2097152) = 0 [ 107.761698][ T5228] NILFS (loop0): trying rollback from an earlier position [pid 5230] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5221] <... sendfile resumed>) = 1048576 [pid 5230] ioctl(4, LOOP_SET_FD, 3 [pid 5221] exit_group(0) = ? [pid 5221] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5221, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5228] <... mount resumed>) = 0 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5230] <... ioctl resumed>) = 0 [pid 5228] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4999] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5230] close(3 [pid 5228] <... openat resumed>) = 3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5230] <... close resumed>) = 0 [pid 5228] chdir("./file1" [pid 4999] lstat("./17/binderfs", [pid 5230] mkdir("./file1", 0777 [pid 5228] <... chdir resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5228] ioctl(4, LOOP_CLR_FD [pid 4999] unlink("./17/binderfs" [pid 5228] <... ioctl resumed>) = 0 [pid 5228] close(4) = 0 [pid 5228] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5228] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5228] ftruncate(5, 33587195) = 0 [pid 5228] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5228] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 107.836295][ T5228] NILFS (loop0): recovery complete [ 107.840679][ T5230] loop3: detected capacity change from 0 to 4096 [ 107.862128][ T5231] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5230] <... mkdir resumed>) = 0 [pid 5228] sendfile(6, 7, NULL, 281474978811909 [pid 4999] <... unlink resumed>) = 0 [pid 5230] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [ 107.935301][ T5230] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 4999] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5222] <... sendfile resumed>) = 1048576 [pid 5222] exit_group(0) = ? [ 107.979503][ T5230] NILFS (loop3): trying rollback from an earlier position [pid 5222] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5222, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 4998] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./17/binderfs") = 0 [pid 4998] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = 0 [ 108.087817][ T5230] NILFS (loop3): recovery complete [pid 4999] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5230] <... mount resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5230] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 4999] lstat("./17/file1", [pid 5230] chdir("./file1" [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5230] <... chdir resumed>) = 0 [pid 5230] ioctl(4, LOOP_CLR_FD [pid 4999] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5230] <... ioctl resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5230] close(4 [pid 4999] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5230] <... close resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 5230] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5230] <... open resumed>) = 4 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5230] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [ 108.108098][ T5232] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] close(4 [pid 5230] <... open resumed>) = 5 [pid 4999] <... close resumed>) = 0 [pid 5230] ftruncate(5, 33587195 [pid 4999] rmdir("./17/file1" [pid 5230] <... ftruncate resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5230] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4999] getdents64(3, [pid 5230] <... open resumed>) = 6 [pid 5230] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5230] <... open resumed>) = 7 [pid 4999] close(3 [pid 5230] sendfile(6, 7, NULL, 281474978811909 [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./17") = 0 [pid 4999] mkdir("./18", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5233 ./strace-static-x86_64: Process 5233 attached [pid 5233] chdir("./18") = 0 [pid 5233] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5233] setpgid(0, 0) = 0 [pid 5233] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] <... umount2 resumed>) = 0 [pid 5233] <... openat resumed>) = 3 [pid 5233] write(3, "1000", 4 [pid 4998] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5233] <... write resumed>) = 4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5233] close(3) = 0 [pid 4998] lstat("./17/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5233] symlink("/dev/binderfs", "./binderfs" [pid 4998] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5233] <... symlink resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5233] memfd_create("syzkaller", 0 [pid 4998] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5233] <... memfd_create resumed>) = 3 [pid 4998] <... openat resumed>) = 4 [pid 5233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] fstat(4, [pid 5233] <... mmap resumed>) = 0x7f18ca796000 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./17/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./17") = 0 [pid 4998] mkdir("./18", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5234 ./strace-static-x86_64: Process 5234 attached [pid 5234] chdir("./18") = 0 [pid 5234] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5234] setpgid(0, 0 [pid 5233] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5234] <... setpgid resumed>) = 0 [pid 5226] <... sendfile resumed>) = 1048576 [pid 5234] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5234] write(3, "1000", 4) = 4 [pid 5234] close(3 [pid 5226] exit_group(0 [pid 5234] <... close resumed>) = 0 [pid 5226] <... exit_group resumed>) = ? [pid 5234] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5234] memfd_create("syzkaller", 0) = 3 [pid 5234] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5226] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5226, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5001] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./17/binderfs") = 0 [pid 5001] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5234] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5233] <... write resumed>) = 2097152 [pid 5233] munmap(0x7f18ca796000, 2097152) = 0 [pid 5233] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5233] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5234] <... write resumed>) = 2097152 [pid 5233] close(3) = 0 [pid 5233] mkdir("./file1", 0777) = 0 [ 108.512476][ T5233] loop2: detected capacity change from 0 to 4096 [pid 5233] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5234] munmap(0x7f18ca796000, 2097152) = 0 [pid 5234] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5234] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./17/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./17/file1" [pid 5234] <... ioctl resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, [pid 5234] close(3 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5234] <... close resumed>) = 0 [pid 5001] close(3 [pid 5234] mkdir("./file1", 0777 [pid 5001] <... close resumed>) = 0 [pid 5234] <... mkdir resumed>) = 0 [pid 5001] rmdir("./17" [pid 5234] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5001] <... rmdir resumed>) = 0 [ 108.588093][ T5234] loop1: detected capacity change from 0 to 4096 [ 108.596940][ T5233] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5001] mkdir("./18", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5235 [ 108.650929][ T5233] NILFS (loop2): trying rollback from an earlier position [ 108.674559][ T5234] NILFS (loop1): invalid segment: Checksum error in segment payload ./strace-static-x86_64: Process 5235 attached [pid 5225] <... sendfile resumed>) = 1048576 [pid 5235] chdir("./18") = 0 [pid 5235] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5225] exit_group(0 [pid 5235] <... prctl resumed>) = 0 [pid 5225] <... exit_group resumed>) = ? [pid 5235] setpgid(0, 0 [pid 5225] +++ exited with 0 +++ [pid 5235] <... setpgid resumed>) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5225, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 5235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5235] write(3, "1000", 4) = 4 [pid 5235] close(3) = 0 [pid 5002] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5235] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5235] <... symlink resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5235] memfd_create("syzkaller", 0 [pid 5002] <... openat resumed>) = 3 [pid 5235] <... memfd_create resumed>) = 3 [pid 5002] fstat(3, [pid 5235] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5235] <... mmap resumed>) = 0x7f18ca796000 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./18/binderfs") = 0 [ 108.702251][ T5234] NILFS (loop1): trying rollback from an earlier position [ 108.734679][ T5233] NILFS (loop2): recovery complete [pid 5002] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5233] <... mount resumed>) = 0 [pid 5233] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5233] chdir("./file1") = 0 [pid 5233] ioctl(4, LOOP_CLR_FD) = 0 [pid 5233] close(4) = 0 [pid 5233] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5233] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5233] ftruncate(5, 33587195) = 0 [pid 5233] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5233] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 108.786157][ T5236] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.797844][ T5234] NILFS (loop1): recovery complete [pid 5233] sendfile(6, 7, NULL, 281474978811909 [pid 5234] <... mount resumed>) = 0 [pid 5234] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5235] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5234] <... openat resumed>) = 3 [pid 5234] chdir("./file1") = 0 [pid 5234] ioctl(4, LOOP_CLR_FD) = 0 [pid 5234] close(4) = 0 [pid 5234] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5234] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5234] ftruncate(5, 33587195) = 0 [pid 5234] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5234] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 108.833551][ T5237] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5234] sendfile(6, 7, NULL, 281474978811909 [pid 5235] <... write resumed>) = 2097152 [pid 5235] munmap(0x7f18ca796000, 2097152 [pid 5228] <... sendfile resumed>) = 1048576 [pid 5235] <... munmap resumed>) = 0 [pid 5228] exit_group(0 [pid 5235] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5228] <... exit_group resumed>) = ? [pid 5235] <... openat resumed>) = 4 [pid 5235] ioctl(4, LOOP_SET_FD, 3 [pid 5228] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5228, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 4997] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] <... umount2 resumed>) = 0 [pid 4997] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5235] <... ioctl resumed>) = 0 [pid 4997] getdents64(3, [pid 5002] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5235] close(3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] lstat("./18/file1", [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5235] <... close resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5235] mkdir("./file1", 0777) = 0 [pid 4997] lstat("./17/binderfs", [pid 5235] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./17/binderfs" [pid 5002] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... unlink resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./18/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./18") = 0 [pid 5002] mkdir("./19", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5238 [ 108.993241][ T5235] loop4: detected capacity change from 0 to 4096 ./strace-static-x86_64: Process 5238 attached [pid 5238] chdir("./19") = 0 [pid 5238] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5238] setpgid(0, 0) = 0 [pid 5238] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5238] write(3, "1000", 4) = 4 [pid 5238] close(3) = 0 [pid 5238] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5238] memfd_create("syzkaller", 0) = 3 [pid 5238] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 109.061633][ T5235] NILFS (loop4): invalid segment: Checksum error in segment payload [ 109.085280][ T5235] NILFS (loop4): trying rollback from an earlier position [pid 5238] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./17/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 109.177260][ T5235] NILFS (loop4): recovery complete [pid 4997] umount2("./17/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5235] <... mount resumed>) = 0 [pid 4997] <... openat resumed>) = 4 [pid 4997] fstat(4, [pid 5235] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5235] chdir("./file1") = 0 [pid 4997] getdents64(4, [pid 5235] ioctl(4, LOOP_CLR_FD [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5235] <... ioctl resumed>) = 0 [pid 4997] getdents64(4, [pid 5235] close(4) = 0 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4 [pid 5235] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 4997] <... close resumed>) = 0 [pid 4997] rmdir("./17/file1") = 0 [pid 5235] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5235] <... open resumed>) = 5 [pid 4997] close(3 [pid 5235] ftruncate(5, 33587195 [pid 4997] <... close resumed>) = 0 [pid 4997] rmdir("./17" [pid 5235] <... ftruncate resumed>) = 0 [pid 5238] <... write resumed>) = 2097152 [pid 5238] munmap(0x7f18ca796000, 2097152 [pid 4997] <... rmdir resumed>) = 0 [ 109.204264][ T5239] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5235] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4997] mkdir("./18", 0777 [pid 5235] <... open resumed>) = 6 [pid 5235] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4997] <... mkdir resumed>) = 0 [pid 5238] <... munmap resumed>) = 0 [pid 5235] <... open resumed>) = 7 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5235] sendfile(6, 7, NULL, 281474978811909 [pid 4997] <... openat resumed>) = 3 [pid 5238] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5238] ioctl(4, LOOP_SET_FD, 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3 [pid 5238] <... ioctl resumed>) = 0 [pid 5238] close(3 [pid 4997] <... close resumed>) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5238] <... close resumed>) = 0 [pid 5238] mkdir("./file1", 0777 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5240 [pid 5238] <... mkdir resumed>) = 0 [pid 5238] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, ""./strace-static-x86_64: Process 5240 attached [pid 5240] chdir("./18") = 0 [pid 5240] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5240] setpgid(0, 0) = 0 [pid 5240] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5240] write(3, "1000", 4) = 4 [ 109.272179][ T5238] loop5: detected capacity change from 0 to 4096 [pid 5240] close(3) = 0 [pid 5240] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5240] memfd_create("syzkaller", 0 [pid 5230] <... sendfile resumed>) = 1048576 [pid 5230] exit_group(0 [pid 5240] <... memfd_create resumed>) = 3 [pid 5230] <... exit_group resumed>) = ? [pid 5240] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5230] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5230, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./18/binderfs") = 0 [ 109.335006][ T5238] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5000] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 109.391333][ T5238] NILFS (loop5): trying rollback from an earlier position [pid 5240] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5240] <... write resumed>) = 2097152 [pid 5000] lstat("./18/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./18/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3 [pid 5240] munmap(0x7f18ca796000, 2097152 [pid 5000] <... close resumed>) = 0 [pid 5000] rmdir("./18") = 0 [pid 5000] mkdir("./19", 0777 [pid 5240] <... munmap resumed>) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 5240] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5240] <... openat resumed>) = 4 [pid 5000] <... openat resumed>) = 3 [pid 5240] ioctl(4, LOOP_SET_FD, 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 5240] <... ioctl resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5240] close(3) = 0 [pid 5240] mkdir("./file1", 0777) = 0 [pid 5240] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5241 ./strace-static-x86_64: Process 5241 attached [pid 5241] chdir("./19") = 0 [pid 5241] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5241] setpgid(0, 0) = 0 [pid 5241] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5241] write(3, "1000", 4) = 4 [pid 5241] close(3) = 0 [pid 5241] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5241] memfd_create("syzkaller", 0) = 3 [pid 5241] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 109.513789][ T5240] loop0: detected capacity change from 0 to 4096 [ 109.538304][ T5240] NILFS (loop0): invalid segment: Checksum error in segment payload [ 109.547478][ T5240] NILFS (loop0): trying rollback from an earlier position [ 109.554994][ T5238] NILFS (loop5): recovery complete [pid 5238] <... mount resumed>) = 0 [pid 5238] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5238] chdir("./file1") = 0 [pid 5238] ioctl(4, LOOP_CLR_FD) = 0 [pid 5238] close(4) = 0 [pid 5238] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5241] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5238] <... open resumed>) = 4 [pid 5238] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5238] ftruncate(5, 33587195) = 0 [ 109.600733][ T5240] NILFS (loop0): recovery complete [ 109.607237][ T5242] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5238] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5240] <... mount resumed>) = 0 [pid 5240] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5238] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5240] chdir("./file1") = 0 [pid 5238] <... open resumed>) = 7 [pid 5240] ioctl(4, LOOP_CLR_FD [pid 5238] sendfile(6, 7, NULL, 281474978811909 [pid 5240] <... ioctl resumed>) = 0 [pid 5240] close(4) = 0 [pid 5240] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5240] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5240] ftruncate(5, 33587195 [pid 5241] <... write resumed>) = 2097152 [pid 5240] <... ftruncate resumed>) = 0 [pid 5241] munmap(0x7f18ca796000, 2097152) = 0 [pid 5240] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5240] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5241] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5240] <... open resumed>) = 7 [ 109.684018][ T5243] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5241] <... openat resumed>) = 4 [pid 5240] sendfile(6, 7, NULL, 281474978811909 [pid 5241] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5241] close(3) = 0 [pid 5241] mkdir("./file1", 0777) = 0 [ 109.774143][ T5241] loop3: detected capacity change from 0 to 4096 [ 109.826094][ T5241] NILFS (loop3): invalid segment: Checksum error in segment payload [ 109.835672][ T5241] NILFS (loop3): trying rollback from an earlier position [ 109.893371][ T5241] NILFS (loop3): recovery complete [pid 5241] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 5241] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5241] chdir("./file1") = 0 [pid 5241] ioctl(4, LOOP_CLR_FD) = 0 [pid 5241] close(4) = 0 [pid 5241] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5241] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5241] ftruncate(5, 33587195) = 0 [pid 5241] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5241] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 109.944698][ T5244] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5241] sendfile(6, 7, NULL, 281474978811909 [pid 5233] <... sendfile resumed>) = 1048576 [pid 5233] exit_group(0) = ? [pid 5233] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5233, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, [pid 5234] <... sendfile resumed>) = 1048576 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5234] exit_group(0 [pid 4999] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5234] <... exit_group resumed>) = ? [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./18/binderfs" [pid 5234] +++ exited with 0 +++ [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5234, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 4998] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./18/binderfs") = 0 [pid 4998] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./18/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./18/file1") = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./18") = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 4999] mkdir("./19", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4998] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... close resumed>) = 0 [pid 4998] lstat("./18/file1", [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5245 attached [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5245] chdir("./19" [pid 4998] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5245] <... chdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5245] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5245] <... prctl resumed>) = 0 [pid 4998] <... openat resumed>) = 4 [pid 5245] setpgid(0, 0 [pid 4998] fstat(4, [pid 5245] <... setpgid resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] getdents64(4, [pid 5245] <... openat resumed>) = 3 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5245] write(3, "1000", 4 [pid 4998] getdents64(4, [pid 5245] <... write resumed>) = 4 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5245] close(3 [pid 4998] close(4 [pid 5245] <... close resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5245] symlink("/dev/binderfs", "./binderfs" [pid 4998] rmdir("./18/file1" [pid 5245] <... symlink resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5245 [pid 4998] <... rmdir resumed>) = 0 [pid 5245] memfd_create("syzkaller", 0 [pid 4998] getdents64(3, [pid 5245] <... memfd_create resumed>) = 3 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] close(3 [pid 5245] <... mmap resumed>) = 0x7f18ca796000 [pid 4998] <... close resumed>) = 0 [pid 4998] rmdir("./18") = 0 [pid 4998] mkdir("./19", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5245] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5246 ./strace-static-x86_64: Process 5246 attached [pid 5246] chdir("./19") = 0 [pid 5246] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5246] setpgid(0, 0) = 0 [pid 5246] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5246] write(3, "1000", 4) = 4 [pid 5246] close(3) = 0 [pid 5246] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5246] memfd_create("syzkaller", 0) = 3 [pid 5246] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5246] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5245] <... write resumed>) = 2097152 [pid 5235] <... sendfile resumed>) = 1048576 [pid 5245] munmap(0x7f18ca796000, 2097152 [pid 5235] exit_group(0) = ? [pid 5245] <... munmap resumed>) = 0 [pid 5235] +++ exited with 0 +++ [pid 5245] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5235, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 5245] <... openat resumed>) = 4 [pid 5245] ioctl(4, LOOP_SET_FD, 3 [pid 5001] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5245] <... ioctl resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5246] <... write resumed>) = 2097152 [pid 5245] close(3 [pid 5001] fstat(3, [pid 5246] munmap(0x7f18ca796000, 2097152 [pid 5245] <... close resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5246] <... munmap resumed>) = 0 [pid 5245] mkdir("./file1", 0777 [pid 5001] getdents64(3, [pid 5246] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5245] <... mkdir resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5246] <... openat resumed>) = 4 [pid 5245] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5001] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [ 110.543199][ T5245] loop2: detected capacity change from 0 to 4096 [pid 5246] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./18/binderfs" [pid 5246] <... ioctl resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 5246] close(3 [pid 5001] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5246] <... close resumed>) = 0 [pid 5246] mkdir("./file1", 0777) = 0 [ 110.598009][ T5246] loop1: detected capacity change from 0 to 4096 [ 110.604889][ T5245] NILFS (loop2): invalid segment: Checksum error in segment payload [ 110.637304][ T5245] NILFS (loop2): trying rollback from an earlier position [ 110.663644][ T5246] NILFS (loop1): invalid segment: Checksum error in segment payload [ 110.707921][ T5246] NILFS (loop1): trying rollback from an earlier position [ 110.731512][ T5245] NILFS (loop2): recovery complete [pid 5246] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5001] <... umount2 resumed>) = 0 [pid 5245] <... mount resumed>) = 0 [pid 5238] <... sendfile resumed>) = 1048576 [pid 5001] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5245] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5238] exit_group(0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5245] <... openat resumed>) = 3 [pid 5238] <... exit_group resumed>) = ? [pid 5245] chdir("./file1" [pid 5238] +++ exited with 0 +++ [pid 5001] lstat("./18/file1", [pid 5245] <... chdir resumed>) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5238, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5245] ioctl(4, LOOP_CLR_FD [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5245] <... ioctl resumed>) = 0 [pid 5002] <... restart_syscall resumed>) = 0 [pid 5001] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5245] close(4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5245] <... close resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5245] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5002] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5245] <... open resumed>) = 4 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... openat resumed>) = 4 [pid 5245] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] fstat(4, [pid 5245] <... open resumed>) = 5 [pid 5002] <... openat resumed>) = 3 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5245] ftruncate(5, 33587195 [pid 5002] fstat(3, [pid 5001] getdents64(4, [pid 5245] <... ftruncate resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5245] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] getdents64(3, [pid 5001] getdents64(4, [pid 5245] <... open resumed>) = 6 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5245] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5002] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] close(4 [pid 5245] <... open resumed>) = 7 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... close resumed>) = 0 [pid 5245] sendfile(6, 7, NULL, 281474978811909 [pid 5240] <... sendfile resumed>) = 1048576 [pid 5002] lstat("./19/binderfs", [pid 5001] rmdir("./18/file1" [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./19/binderfs") = 0 [ 110.765725][ T5247] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.796903][ T5246] NILFS (loop1): recovery complete [pid 5002] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5240] exit_group(0 [pid 5001] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, [pid 5246] <... mount resumed>) = 0 [pid 5240] <... exit_group resumed>) = ? [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5246] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5246] chdir("./file1") = 0 [pid 5246] ioctl(4, LOOP_CLR_FD) = 0 [pid 5246] close(4) = 0 [pid 5240] +++ exited with 0 +++ [pid 5001] close(3 [pid 5246] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5001] <... close resumed>) = 0 [pid 5246] <... open resumed>) = 4 [pid 5001] rmdir("./18" [pid 5246] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5240, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5246] <... open resumed>) = 5 [pid 5001] <... rmdir resumed>) = 0 [pid 4997] restart_syscall(<... resuming interrupted clone ...> [pid 5246] ftruncate(5, 33587195 [pid 5001] mkdir("./19", 0777 [pid 5246] <... ftruncate resumed>) = 0 [pid 5246] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4997] <... restart_syscall resumed>) = 0 [pid 5246] <... open resumed>) = 6 [pid 5246] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5001] <... mkdir resumed>) = 0 [pid 5246] sendfile(6, 7, NULL, 281474978811909 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4997] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 110.839789][ T5248] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] <... close resumed>) = 0 [pid 4997] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] <... openat resumed>) = 3 [pid 4997] fstat(3, [pid 5001] <... clone resumed>, child_tidptr=0x555556f7b690) = 5249 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 5249 attached [pid 4997] unlink("./18/binderfs" [pid 5249] chdir("./19") = 0 [pid 4997] <... unlink resumed>) = 0 [pid 5249] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4997] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5249] setpgid(0, 0) = 0 [pid 5249] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5249] write(3, "1000", 4) = 4 [pid 5249] close(3) = 0 [pid 5249] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5249] memfd_create("syzkaller", 0) = 3 [pid 5249] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5249] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5241] <... sendfile resumed>) = 1048576 [pid 5241] exit_group(0) = ? [pid 5241] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5241, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./19/binderfs") = 0 [pid 5000] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./19/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./19/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5249] <... write resumed>) = 2097152 [pid 5002] rmdir("./19" [pid 5249] munmap(0x7f18ca796000, 2097152 [pid 5002] <... rmdir resumed>) = 0 [pid 5002] mkdir("./20", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5249] <... munmap resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5249] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5249] <... openat resumed>) = 4 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5250 [pid 5249] ioctl(4, LOOP_SET_FD, 3 [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./18/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./18/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5250 attached ) = -1 EINVAL (Invalid argument) [pid 5250] chdir("./20") = 0 [pid 5250] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4997] openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5250] <... prctl resumed>) = 0 [pid 4997] <... openat resumed>) = 4 [pid 5250] setpgid(0, 0) = 0 [pid 4997] fstat(4, [pid 5250] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5250] write(3, "1000", 4 [pid 4997] getdents64(4, [pid 5250] <... write resumed>) = 4 [pid 5250] close(3 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5250] <... close resumed>) = 0 [pid 4997] getdents64(4, [pid 5250] symlink("/dev/binderfs", "./binderfs" [pid 5000] <... umount2 resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5249] <... ioctl resumed>) = 0 [pid 4997] close(4 [pid 5249] close(3 [pid 4997] <... close resumed>) = 0 [pid 5249] <... close resumed>) = 0 [pid 4997] rmdir("./18/file1" [pid 5249] mkdir("./file1", 0777 [pid 4997] <... rmdir resumed>) = 0 [pid 5249] <... mkdir resumed>) = 0 [ 111.139022][ T5249] loop4: detected capacity change from 0 to 4096 [pid 4997] getdents64(3, [pid 5249] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./18" [pid 5250] <... symlink resumed>) = 0 [pid 5000] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... rmdir resumed>) = 0 [pid 5250] memfd_create("syzkaller", 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] mkdir("./19", 0777 [pid 5250] <... memfd_create resumed>) = 3 [pid 5000] lstat("./19/file1", [pid 4997] <... mkdir resumed>) = 0 [pid 5250] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5250] <... mmap resumed>) = 0x7f18ca796000 [pid 5000] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... openat resumed>) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5250] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5000] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] close(4 [pid 4997] close(3 [pid 5000] <... close resumed>) = 0 [pid 5250] <... write resumed>) = 2097152 [pid 4997] <... close resumed>) = 0 [pid 5250] munmap(0x7f18ca796000, 2097152 [pid 5000] rmdir("./19/file1" [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... rmdir resumed>) = 0 [pid 5250] <... munmap resumed>) = 0 [pid 5000] getdents64(3, [pid 5250] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5250] <... openat resumed>) = 4 [pid 5000] close(3 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5251 [pid 5250] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... close resumed>) = 0 [ 111.264782][ T5249] NILFS (loop4): invalid segment: Checksum error in segment payload [ 111.272846][ T5249] NILFS (loop4): trying rollback from an earlier position [pid 5000] rmdir("./19") = 0 [pid 5000] mkdir("./20", 0777) = 0 [pid 5250] <... ioctl resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5250] close(3 [pid 5000] <... openat resumed>) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 5250] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 ./strace-static-x86_64: Process 5251 attached [pid 5250] mkdir("./file1", 0777 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5253 ./strace-static-x86_64: Process 5253 attached [pid 5251] chdir("./19" [pid 5250] <... mkdir resumed>) = 0 [pid 5251] <... chdir resumed>) = 0 [pid 5250] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5249] <... mount resumed>) = 0 [pid 5251] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5249] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5253] chdir("./20" [pid 5251] <... prctl resumed>) = 0 [pid 5249] <... openat resumed>) = 3 [pid 5253] <... chdir resumed>) = 0 [pid 5251] setpgid(0, 0 [pid 5249] chdir("./file1" [pid 5253] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5251] <... setpgid resumed>) = 0 [pid 5249] <... chdir resumed>) = 0 [pid 5253] <... prctl resumed>) = 0 [pid 5251] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5249] ioctl(4, LOOP_CLR_FD [pid 5253] setpgid(0, 0 [pid 5251] <... openat resumed>) = 3 [pid 5249] <... ioctl resumed>) = 0 [ 111.323794][ T5250] loop5: detected capacity change from 0 to 4096 [ 111.331358][ T5249] NILFS (loop4): recovery complete [ 111.349863][ T5252] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5253] <... setpgid resumed>) = 0 [pid 5251] write(3, "1000", 4 [pid 5249] close(4 [pid 5253] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5251] <... write resumed>) = 4 [pid 5249] <... close resumed>) = 0 [pid 5253] <... openat resumed>) = 3 [pid 5251] close(3 [pid 5249] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5253] write(3, "1000", 4 [pid 5251] <... close resumed>) = 0 [pid 5253] <... write resumed>) = 4 [pid 5251] symlink("/dev/binderfs", "./binderfs" [pid 5249] <... open resumed>) = 4 [pid 5253] close(3 [pid 5251] <... symlink resumed>) = 0 [pid 5249] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5253] <... close resumed>) = 0 [pid 5253] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5253] memfd_create("syzkaller", 0) = 3 [pid 5253] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5251] memfd_create("syzkaller", 0 [pid 5249] <... open resumed>) = 5 [ 111.373322][ T5250] NILFS (loop5): invalid segment: Checksum error in segment payload [ 111.383946][ T5250] NILFS (loop5): trying rollback from an earlier position [pid 5251] <... memfd_create resumed>) = 3 [pid 5249] ftruncate(5, 33587195 [pid 5251] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5249] <... ftruncate resumed>) = 0 [pid 5249] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5251] <... mmap resumed>) = 0x7f18ca796000 [pid 5249] <... open resumed>) = 6 [pid 5249] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 111.433588][ T5250] NILFS (loop5): recovery complete [pid 5249] sendfile(6, 7, NULL, 281474978811909 [pid 5253] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5251] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5250] <... mount resumed>) = 0 [pid 5250] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5250] chdir("./file1") = 0 [pid 5250] ioctl(4, LOOP_CLR_FD) = 0 [pid 5250] close(4) = 0 [pid 5250] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5250] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5250] ftruncate(5, 33587195) = 0 [pid 5250] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5250] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 111.496912][ T5254] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5250] sendfile(6, 7, NULL, 281474978811909 [pid 5253] <... write resumed>) = 2097152 [pid 5253] munmap(0x7f18ca796000, 2097152) = 0 [pid 5253] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5253] ioctl(4, LOOP_SET_FD, 3 [pid 5251] <... write resumed>) = 2097152 [pid 5251] munmap(0x7f18ca796000, 2097152 [pid 5253] <... ioctl resumed>) = 0 [pid 5251] <... munmap resumed>) = 0 [pid 5251] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5251] ioctl(4, LOOP_SET_FD, 3 [pid 5253] close(3 [pid 5251] <... ioctl resumed>) = 0 [pid 5253] <... close resumed>) = 0 [pid 5253] mkdir("./file1", 0777 [pid 5251] close(3 [pid 5253] <... mkdir resumed>) = 0 [pid 5251] <... close resumed>) = 0 [pid 5253] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [ 111.628127][ T5253] loop3: detected capacity change from 0 to 4096 [ 111.653514][ T5251] loop0: detected capacity change from 0 to 4096 [pid 5251] mkdir("./file1", 0777) = 0 [pid 5251] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5245] <... sendfile resumed>) = 1048576 [pid 5245] exit_group(0) = ? [pid 5245] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5245, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 111.720524][ T5253] NILFS (loop3): invalid segment: Checksum error in segment payload [ 111.734448][ T5251] NILFS (loop0): invalid segment: Checksum error in segment payload [ 111.735656][ T5253] NILFS (loop3): trying rollback from an earlier position [ 111.742774][ T5251] NILFS (loop0): trying rollback from an earlier position [pid 4999] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./19/binderfs") = 0 [ 111.801998][ T5253] NILFS (loop3): recovery complete [ 111.841560][ T5251] NILFS (loop0): recovery complete [pid 4999] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5253] <... mount resumed>) = 0 [pid 5253] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5251] <... mount resumed>) = 0 [pid 5253] <... openat resumed>) = 3 [pid 5251] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5253] chdir("./file1" [pid 5251] <... openat resumed>) = 3 [pid 5253] <... chdir resumed>) = 0 [pid 5253] ioctl(4, LOOP_CLR_FD [pid 5251] chdir("./file1" [ 111.866908][ T5255] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.879804][ T5256] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5253] <... ioctl resumed>) = 0 [pid 5251] <... chdir resumed>) = 0 [pid 5253] close(4 [pid 5251] ioctl(4, LOOP_CLR_FD [pid 5253] <... close resumed>) = 0 [pid 5253] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5251] <... ioctl resumed>) = 0 [pid 5251] close(4 [pid 5253] <... open resumed>) = 4 [pid 5251] <... close resumed>) = 0 [pid 5253] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5251] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5253] <... open resumed>) = 5 [pid 5251] <... open resumed>) = 4 [pid 4999] <... umount2 resumed>) = 0 [pid 5253] ftruncate(5, 33587195 [pid 5251] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4999] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5253] <... ftruncate resumed>) = 0 [pid 5251] <... open resumed>) = 5 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5253] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5251] ftruncate(5, 33587195 [pid 4999] lstat("./19/file1", [pid 5253] <... open resumed>) = 6 [pid 5253] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5251] <... ftruncate resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5253] <... open resumed>) = 7 [pid 5251] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4999] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5253] sendfile(6, 7, NULL, 281474978811909 [pid 5251] <... open resumed>) = 6 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5251] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4999] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5251] <... open resumed>) = 7 [pid 4999] <... openat resumed>) = 4 [pid 5251] sendfile(6, 7, NULL, 281474978811909 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./19/file1") = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./19") = 0 [pid 4999] mkdir("./20", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 5246] <... sendfile resumed>) = 1048576 [pid 4999] <... close resumed>) = 0 [pid 5246] exit_group(0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5246] <... exit_group resumed>) = ? [pid 5246] +++ exited with 0 +++ [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5257 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5246, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- ./strace-static-x86_64: Process 5257 attached [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5257] chdir("./20" [pid 4998] <... restart_syscall resumed>) = 0 [pid 5257] <... chdir resumed>) = 0 [pid 5257] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4998] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5257] setpgid(0, 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5257] <... setpgid resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] <... openat resumed>) = 3 [pid 5257] <... openat resumed>) = 3 [pid 4998] fstat(3, [pid 5257] write(3, "1000", 4 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5257] <... write resumed>) = 4 [pid 4998] getdents64(3, [pid 5257] close(3 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5257] <... close resumed>) = 0 [pid 4998] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5257] symlink("/dev/binderfs", "./binderfs" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5257] <... symlink resumed>) = 0 [pid 4998] lstat("./19/binderfs", [pid 5257] memfd_create("syzkaller", 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./19/binderfs") = 0 [pid 4998] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5257] <... memfd_create resumed>) = 3 [pid 5257] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5257] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./19/file1", [pid 5257] <... write resumed>) = 2097152 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5257] munmap(0x7f18ca796000, 2097152 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5257] <... munmap resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5257] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] <... openat resumed>) = 4 [pid 5257] <... openat resumed>) = 4 [pid 4998] fstat(4, [pid 5257] ioctl(4, LOOP_SET_FD, 3 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./19/file1" [pid 5257] <... ioctl resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5257] close(3 [pid 4998] getdents64(3, [pid 5257] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5257] mkdir("./file1", 0777 [pid 4998] close(3 [pid 5257] <... mkdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5257] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] rmdir("./19") = 0 [pid 4998] mkdir("./20", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5258 ./strace-static-x86_64: Process 5258 attached [ 112.334584][ T5257] loop2: detected capacity change from 0 to 4096 [ 112.372125][ T5257] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5258] chdir("./20") = 0 [pid 5258] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5258] setpgid(0, 0) = 0 [pid 5258] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5258] write(3, "1000", 4) = 4 [pid 5258] close(3) = 0 [pid 5258] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5258] memfd_create("syzkaller", 0) = 3 [pid 5258] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 112.419319][ T5257] NILFS (loop2): trying rollback from an earlier position [pid 5249] <... sendfile resumed>) = 1048576 [pid 5249] exit_group(0 [pid 5258] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5249] <... exit_group resumed>) = ? [pid 5249] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5249, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5001] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [ 112.495014][ T5257] NILFS (loop2): recovery complete [pid 5001] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5257] <... mount resumed>) = 0 [pid 5001] lstat("./19/binderfs", [pid 5258] <... write resumed>) = 2097152 [pid 5257] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5257] <... openat resumed>) = 3 [pid 5001] unlink("./19/binderfs") = 0 [ 112.529657][ T5259] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5258] munmap(0x7f18ca796000, 2097152 [pid 5257] chdir("./file1" [pid 5258] <... munmap resumed>) = 0 [pid 5257] <... chdir resumed>) = 0 [pid 5258] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5257] ioctl(4, LOOP_CLR_FD [pid 5258] <... openat resumed>) = 4 [pid 5257] <... ioctl resumed>) = 0 [pid 5258] ioctl(4, LOOP_SET_FD, 3 [pid 5257] close(4 [pid 5250] <... sendfile resumed>) = 1048576 [pid 5258] <... ioctl resumed>) = 0 [pid 5257] <... close resumed>) = 0 [pid 5257] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5257] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5250] exit_group(0 [pid 5257] <... open resumed>) = 5 [pid 5257] ftruncate(5, 33587195) = 0 [pid 5257] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5250] <... exit_group resumed>) = ? [pid 5257] <... open resumed>) = 6 [pid 5257] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5250] +++ exited with 0 +++ [pid 5258] close(3) = 0 [pid 5258] mkdir("./file1", 0777 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5250, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 5257] <... open resumed>) = 7 [pid 5257] sendfile(6, 7, NULL, 281474978811909 [pid 5002] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 5258] <... mkdir resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5258] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 112.584508][ T5258] loop1: detected capacity change from 0 to 4096 [pid 5002] unlink("./20/binderfs") = 0 [ 112.638035][ T5258] NILFS (loop1): invalid segment: Checksum error in segment payload [ 112.693069][ T5258] NILFS (loop1): trying rollback from an earlier position [pid 5002] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./19/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./19/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3 [pid 5002] <... umount2 resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./19") = 0 [pid 5001] mkdir("./20", 0777) = 0 [ 112.796191][ T5258] NILFS (loop1): recovery complete [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5258] <... mount resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5258] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5258] <... openat resumed>) = 3 [pid 5001] close(3 [pid 5258] chdir("./file1" [pid 5001] <... close resumed>) = 0 [pid 5258] <... chdir resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5258] ioctl(4, LOOP_CLR_FD) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x555556f7b690) = 5261 [pid 5258] close(4) = 0 [pid 5258] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5258] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5258] ftruncate(5, 33587195) = 0 [pid 5258] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5258] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000./strace-static-x86_64: Process 5261 attached ) = 7 [pid 5258] sendfile(6, 7, NULL, 281474978811909 [pid 5261] chdir("./20") = 0 [pid 5261] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5261] setpgid(0, 0) = 0 [pid 5261] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5002] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5261] write(3, "1000", 4) = 4 [pid 5261] close(3) = 0 [pid 5261] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5261] memfd_create("syzkaller", 0) = 3 [pid 5261] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5261] <... mmap resumed>) = 0x7f18ca796000 [pid 5002] lstat("./20/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 112.837330][ T5260] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5261] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5251] <... sendfile resumed>) = 1048576 [pid 5002] getdents64(4, [pid 5251] exit_group(0 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5251] <... exit_group resumed>) = ? [pid 5251] +++ exited with 0 +++ [pid 5002] close(4) = 0 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5251, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5002] rmdir("./20/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3 [pid 4997] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./20" [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... rmdir resumed>) = 0 [pid 4997] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] mkdir("./21", 0777 [pid 4997] <... openat resumed>) = 3 [pid 5002] <... mkdir resumed>) = 0 [pid 4997] fstat(3, [pid 5261] <... write resumed>) = 2097152 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5261] munmap(0x7f18ca796000, 2097152) = 0 [pid 5261] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5261] ioctl(4, LOOP_SET_FD, 3 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] <... openat resumed>) = 3 [pid 4997] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] ioctl(3, LOOP_CLR_FD [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] lstat("./19/binderfs", [pid 5261] <... ioctl resumed>) = 0 [pid 5261] close(3 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5261] <... close resumed>) = 0 [pid 5261] mkdir("./file1", 0777 [pid 5002] close(3 [pid 4997] unlink("./19/binderfs") = 0 [pid 5261] <... mkdir resumed>) = 0 [pid 5261] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4997] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... close resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5262 [ 112.972521][ T5261] loop4: detected capacity change from 0 to 4096 ./strace-static-x86_64: Process 5262 attached [pid 5262] chdir("./21") = 0 [pid 5262] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5262] setpgid(0, 0) = 0 [pid 5262] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5262] write(3, "1000", 4) = 4 [pid 5262] close(3) = 0 [pid 5262] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5262] memfd_create("syzkaller", 0) = 3 [pid 5262] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 113.023658][ T5261] NILFS (loop4): invalid segment: Checksum error in segment payload [ 113.031721][ T5261] NILFS (loop4): trying rollback from an earlier position [ 113.098053][ T5261] NILFS (loop4): recovery complete [pid 5262] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./19/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./19/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5261] <... mount resumed>) = 0 [pid 5261] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4997] close(4 [pid 5261] <... openat resumed>) = 3 [pid 5261] chdir("./file1" [pid 4997] <... close resumed>) = 0 [pid 5261] <... chdir resumed>) = 0 [pid 5261] ioctl(4, LOOP_CLR_FD [pid 4997] rmdir("./19/file1" [pid 5261] <... ioctl resumed>) = 0 [pid 5261] close(4 [pid 4997] <... rmdir resumed>) = 0 [pid 5261] <... close resumed>) = 0 [pid 5261] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4997] getdents64(3, [pid 5261] <... open resumed>) = 4 [pid 5261] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5261] <... open resumed>) = 5 [pid 5261] ftruncate(5, 33587195 [pid 4997] close(3 [pid 5261] <... ftruncate resumed>) = 0 [pid 5261] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4997] <... close resumed>) = 0 [pid 5261] <... open resumed>) = 6 [pid 4997] rmdir("./19" [pid 5261] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4997] <... rmdir resumed>) = 0 [pid 5261] <... open resumed>) = 7 [pid 4997] mkdir("./20", 0777 [pid 5261] sendfile(6, 7, NULL, 281474978811909 [pid 4997] <... mkdir resumed>) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5253] <... sendfile resumed>) = 1048576 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5253] exit_group(0 [pid 4997] close(3 [pid 5253] <... exit_group resumed>) = ? [pid 4997] <... close resumed>) = 0 [pid 5253] +++ exited with 0 +++ [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5253, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5264 ./strace-static-x86_64: Process 5264 attached [pid 5000] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 113.162864][ T5263] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 5264] chdir("./20" [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5264] <... chdir resumed>) = 0 [pid 5000] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5264] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5264] <... prctl resumed>) = 0 [pid 5000] lstat("./20/binderfs", [pid 5264] setpgid(0, 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5264] <... setpgid resumed>) = 0 [pid 5000] unlink("./20/binderfs" [pid 5264] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] <... unlink resumed>) = 0 [pid 5264] <... openat resumed>) = 3 [pid 5000] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5264] write(3, "1000", 4) = 4 [pid 5264] close(3) = 0 [pid 5264] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5264] memfd_create("syzkaller", 0) = 3 [pid 5264] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5262] <... write resumed>) = 2097152 [pid 5262] munmap(0x7f18ca796000, 2097152) = 0 [pid 5262] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5262] ioctl(4, LOOP_SET_FD, 3 [pid 5264] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5262] <... ioctl resumed>) = 0 [pid 5262] close(3) = 0 [pid 5262] mkdir("./file1", 0777) = 0 [ 113.297895][ T5262] loop5: detected capacity change from 0 to 4096 [ 113.342424][ T5262] NILFS (loop5): invalid segment: Checksum error in segment payload [ 113.367550][ T5262] NILFS (loop5): trying rollback from an earlier position [pid 5262] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5000] <... umount2 resumed>) = 0 [pid 5264] <... write resumed>) = 2097152 [pid 5264] munmap(0x7f18ca796000, 2097152) = 0 [pid 5264] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5000] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5264] <... openat resumed>) = 4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5264] ioctl(4, LOOP_SET_FD, 3 [pid 5000] lstat("./20/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, [pid 5262] <... mount resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5262] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5000] getdents64(4, [pid 5262] <... openat resumed>) = 3 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5262] chdir("./file1" [pid 5000] getdents64(4, [pid 5262] <... chdir resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5262] ioctl(4, LOOP_CLR_FD [pid 5000] close(4 [pid 5262] <... ioctl resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5262] close(4 [pid 5000] rmdir("./20/file1" [pid 5262] <... close resumed>) = 0 [pid 5264] <... ioctl resumed>) = 0 [pid 5264] close(3) = 0 [pid 5264] mkdir("./file1", 0777 [pid 5000] <... rmdir resumed>) = 0 [pid 5262] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5262] <... open resumed>) = 4 [pid 5000] close(3 [pid 5262] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [ 113.471897][ T5262] NILFS (loop5): recovery complete [ 113.473327][ T5264] loop0: detected capacity change from 0 to 4096 [ 113.493640][ T5265] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] <... close resumed>) = 0 [pid 5262] <... open resumed>) = 5 [pid 5000] rmdir("./20" [pid 5264] <... mkdir resumed>) = 0 [pid 5262] ftruncate(5, 33587195 [pid 5264] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5262] <... ftruncate resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5262] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] mkdir("./21", 0777 [pid 5262] <... open resumed>) = 6 [pid 5262] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5000] <... mkdir resumed>) = 0 [pid 5262] <... open resumed>) = 7 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5262] sendfile(6, 7, NULL, 281474978811909 [pid 5000] <... openat resumed>) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [ 113.571111][ T5264] NILFS (loop0): invalid segment: Checksum error in segment payload [ 113.582794][ T5264] NILFS (loop0): trying rollback from an earlier position [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5266 ./strace-static-x86_64: Process 5266 attached [pid 5266] chdir("./21") = 0 [pid 5266] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5266] setpgid(0, 0) = 0 [pid 5266] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5266] write(3, "1000", 4) = 4 [pid 5266] close(3) = 0 [pid 5266] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5266] memfd_create("syzkaller", 0) = 3 [pid 5266] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 113.681259][ T5264] NILFS (loop0): recovery complete [pid 5264] <... mount resumed>) = 0 [pid 5264] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5264] chdir("./file1") = 0 [pid 5266] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5264] ioctl(4, LOOP_CLR_FD) = 0 [pid 5264] close(4) = 0 [pid 5264] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5264] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5264] ftruncate(5, 33587195) = 0 [pid 5264] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5264] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5257] <... sendfile resumed>) = 1048576 [ 113.728897][ T5267] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5264] sendfile(6, 7, NULL, 281474978811909 [pid 5257] exit_group(0) = ? [pid 5257] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5257, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 4999] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./20/binderfs") = 0 [pid 4999] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5266] <... write resumed>) = 2097152 [pid 5266] munmap(0x7f18ca796000, 2097152) = 0 [pid 5266] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5266] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5266] close(3) = 0 [pid 5258] <... sendfile resumed>) = 1048576 [pid 5266] mkdir("./file1", 0777) = 0 [pid 5258] exit_group(0 [pid 5266] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5258] <... exit_group resumed>) = ? [pid 5258] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5258, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 4998] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 113.890923][ T5266] loop3: detected capacity change from 0 to 4096 [pid 4998] fstat(3, [pid 4999] <... umount2 resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./20/binderfs") = 0 [pid 4998] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 113.959491][ T5266] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 4999] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./20/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./20/file1") = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./20") = 0 [pid 4999] mkdir("./21", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [ 114.011754][ T5266] NILFS (loop3): trying rollback from an earlier position [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5268 ./strace-static-x86_64: Process 5268 attached [pid 5268] chdir("./21") = 0 [pid 5268] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5268] setpgid(0, 0) = 0 [pid 5268] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 114.079308][ T5266] NILFS (loop3): recovery complete [pid 5268] write(3, "1000", 4 [pid 4998] <... umount2 resumed>) = 0 [pid 5268] <... write resumed>) = 4 [pid 4998] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5268] close(3) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5268] symlink("/dev/binderfs", "./binderfs" [pid 5266] <... mount resumed>) = 0 [pid 4998] lstat("./20/file1", [pid 5268] <... symlink resumed>) = 0 [pid 5266] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5268] memfd_create("syzkaller", 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5268] <... memfd_create resumed>) = 3 [pid 5266] <... openat resumed>) = 3 [pid 4998] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5268] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5266] chdir("./file1" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5268] <... mmap resumed>) = 0x7f18ca796000 [pid 5266] <... chdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5266] ioctl(4, LOOP_CLR_FD) = 0 [pid 4998] <... openat resumed>) = 4 [pid 5266] close(4 [pid 4998] fstat(4, [pid 5266] <... close resumed>) = 0 [pid 5266] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 5266] <... open resumed>) = 4 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [ 114.133726][ T5269] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5266] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] getdents64(4, [pid 5268] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5266] <... open resumed>) = 5 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5266] ftruncate(5, 33587195 [pid 4998] close(4 [pid 5266] <... ftruncate resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5266] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4998] rmdir("./20/file1" [pid 5266] <... open resumed>) = 6 [pid 5266] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4998] <... rmdir resumed>) = 0 [pid 5266] <... open resumed>) = 7 [pid 5266] sendfile(6, 7, NULL, 281474978811909 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./20") = 0 [pid 4998] mkdir("./21", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5270 ./strace-static-x86_64: Process 5270 attached [pid 5270] chdir("./21") = 0 [pid 5270] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5270] setpgid(0, 0) = 0 [pid 5270] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5268] <... write resumed>) = 2097152 [pid 5270] <... openat resumed>) = 3 [pid 5270] write(3, "1000", 4) = 4 [pid 5270] close(3 [pid 5268] munmap(0x7f18ca796000, 2097152 [pid 5270] <... close resumed>) = 0 [pid 5268] <... munmap resumed>) = 0 [pid 5270] symlink("/dev/binderfs", "./binderfs" [pid 5268] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5270] <... symlink resumed>) = 0 [pid 5268] <... openat resumed>) = 4 [pid 5270] memfd_create("syzkaller", 0 [pid 5268] ioctl(4, LOOP_SET_FD, 3 [pid 5270] <... memfd_create resumed>) = 3 [pid 5270] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5261] <... sendfile resumed>) = 1048576 [pid 5261] exit_group(0) = ? [pid 5261] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5261, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 5270] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5268] <... ioctl resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5268] close(3 [pid 5001] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5268] <... close resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5268] mkdir("./file1", 0777 [pid 5001] fstat(3, [pid 5268] <... mkdir resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5268] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 114.359213][ T5268] loop2: detected capacity change from 0 to 4096 [pid 5001] lstat("./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./20/binderfs") = 0 [pid 5001] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5270] <... write resumed>) = 2097152 [pid 5270] munmap(0x7f18ca796000, 2097152) = 0 [pid 5270] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 114.452090][ T5268] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5270] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5270] close(3) = 0 [pid 5270] mkdir("./file1", 0777) = 0 [ 114.495557][ T5270] loop1: detected capacity change from 0 to 4096 [ 114.495895][ T5268] NILFS (loop2): trying rollback from an earlier position [pid 5270] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5262] <... sendfile resumed>) = 1048576 [pid 5262] exit_group(0) = ? [pid 5262] +++ exited with 0 +++ [pid 5001] <... umount2 resumed>) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5262, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5002] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./21/binderfs", [pid 5001] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] unlink("./21/binderfs" [pid 5001] lstat("./20/file1", [pid 5002] <... unlink resumed>) = 0 [pid 5002] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 114.564125][ T5270] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5001] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./20/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./20") = 0 [pid 5001] mkdir("./21", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5271 ./strace-static-x86_64: Process 5271 attached [pid 5271] chdir("./21") = 0 [ 114.623243][ T5270] NILFS (loop1): trying rollback from an earlier position [ 114.639207][ T5268] NILFS (loop2): recovery complete [pid 5271] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5271] setpgid(0, 0 [pid 5268] <... mount resumed>) = 0 [pid 5271] <... setpgid resumed>) = 0 [pid 5268] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5271] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5268] <... openat resumed>) = 3 [pid 5271] <... openat resumed>) = 3 [pid 5271] write(3, "1000", 4) = 4 [pid 5268] chdir("./file1" [pid 5270] <... mount resumed>) = 0 [pid 5271] close(3 [pid 5268] <... chdir resumed>) = 0 [pid 5270] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5271] <... close resumed>) = 0 [pid 5268] ioctl(4, LOOP_CLR_FD [pid 5270] <... openat resumed>) = 3 [pid 5271] symlink("/dev/binderfs", "./binderfs" [pid 5270] chdir("./file1" [pid 5268] <... ioctl resumed>) = 0 [pid 5271] <... symlink resumed>) = 0 [pid 5270] <... chdir resumed>) = 0 [pid 5268] close(4 [pid 5271] memfd_create("syzkaller", 0 [pid 5270] ioctl(4, LOOP_CLR_FD [pid 5268] <... close resumed>) = 0 [pid 5271] <... memfd_create resumed>) = 3 [pid 5270] <... ioctl resumed>) = 0 [pid 5268] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5271] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5270] close(4 [pid 5268] <... open resumed>) = 4 [pid 5271] <... mmap resumed>) = 0x7f18ca796000 [pid 5270] <... close resumed>) = 0 [ 114.668916][ T5270] NILFS (loop1): recovery complete [ 114.674581][ T5272] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.692508][ T5273] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5270] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5268] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5270] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5268] <... open resumed>) = 5 [pid 5270] <... open resumed>) = 5 [pid 5268] ftruncate(5, 33587195 [pid 5270] ftruncate(5, 33587195 [pid 5268] <... ftruncate resumed>) = 0 [pid 5270] <... ftruncate resumed>) = 0 [pid 5268] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5270] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5268] <... open resumed>) = 6 [pid 5270] <... open resumed>) = 6 [pid 5268] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5270] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5268] <... open resumed>) = 7 [pid 5270] <... open resumed>) = 7 [pid 5268] sendfile(6, 7, NULL, 281474978811909 [pid 5270] sendfile(6, 7, NULL, 281474978811909 [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5271] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] lstat("./21/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./21/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./21") = 0 [pid 5002] mkdir("./22", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5274 ./strace-static-x86_64: Process 5274 attached [pid 5274] chdir("./22") = 0 [pid 5274] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5274] setpgid(0, 0) = 0 [pid 5274] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5274] write(3, "1000", 4) = 4 [pid 5274] close(3) = 0 [pid 5274] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5274] memfd_create("syzkaller", 0) = 3 [pid 5274] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5271] <... write resumed>) = 2097152 [pid 5271] munmap(0x7f18ca796000, 2097152) = 0 [pid 5274] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5271] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5264] <... sendfile resumed>) = 1048576 [pid 5264] exit_group(0) = ? [pid 5271] <... openat resumed>) = 4 [pid 5271] ioctl(4, LOOP_SET_FD, 3 [pid 5264] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5264, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 4997] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4997] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5271] <... ioctl resumed>) = 0 [pid 4997] getdents64(3, [pid 5271] close(3 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5271] <... close resumed>) = 0 [pid 4997] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5271] mkdir("./file1", 0777 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./20/binderfs" [pid 5271] <... mkdir resumed>) = 0 [pid 4997] <... unlink resumed>) = 0 [pid 5271] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [ 114.984505][ T5271] loop4: detected capacity change from 0 to 4096 [pid 4997] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5266] <... sendfile resumed>) = 1048576 [pid 5266] exit_group(0) = ? [pid 5266] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5266, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- [ 115.032050][ T5271] NILFS (loop4): invalid segment: Checksum error in segment payload [ 115.062742][ T5271] NILFS (loop4): trying rollback from an earlier position [pid 5000] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5274] <... write resumed>) = 2097152 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5274] munmap(0x7f18ca796000, 2097152 [pid 5000] unlink("./21/binderfs") = 0 [pid 5000] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5274] <... munmap resumed>) = 0 [pid 5274] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5274] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5274] close(3) = 0 [ 115.098343][ T5271] NILFS (loop4): recovery complete [ 115.127870][ T5274] loop5: detected capacity change from 0 to 4096 [pid 5274] mkdir("./file1", 0777 [pid 5271] <... mount resumed>) = 0 [pid 5271] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5271] chdir("./file1") = 0 [pid 5271] ioctl(4, LOOP_CLR_FD) = 0 [pid 5271] close(4) = 0 [pid 5274] <... mkdir resumed>) = 0 [pid 5271] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5274] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5271] <... open resumed>) = 4 [pid 5271] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5271] ftruncate(5, 33587195) = 0 [pid 5271] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [ 115.146106][ T5275] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5271] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5271] sendfile(6, 7, NULL, 281474978811909 [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./20/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./20/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 115.210594][ T5274] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./20/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./20") = 0 [pid 4997] mkdir("./21", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5276 [ 115.262266][ T5274] NILFS (loop5): trying rollback from an earlier position ./strace-static-x86_64: Process 5276 attached [pid 5000] <... umount2 resumed>) = 0 [pid 5276] chdir("./21") = 0 [pid 5000] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5276] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5276] <... prctl resumed>) = 0 [pid 5000] lstat("./21/file1", [pid 5276] setpgid(0, 0) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5276] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5000] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5276] write(3, "1000", 4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5276] <... write resumed>) = 4 [pid 5000] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5276] close(3 [pid 5000] <... openat resumed>) = 4 [pid 5276] <... close resumed>) = 0 [pid 5000] fstat(4, [pid 5276] symlink("/dev/binderfs", "./binderfs" [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5276] <... symlink resumed>) = 0 [pid 5000] getdents64(4, [pid 5276] memfd_create("syzkaller", 0 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5276] <... memfd_create resumed>) = 3 [pid 5000] getdents64(4, [pid 5276] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5276] <... mmap resumed>) = 0x7f18ca796000 [pid 5000] close(4) = 0 [pid 5000] rmdir("./21/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [ 115.347031][ T5274] NILFS (loop5): recovery complete [pid 5000] rmdir("./21") = 0 [pid 5274] <... mount resumed>) = 0 [pid 5000] mkdir("./22", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 5274] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5000] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5274] <... openat resumed>) = 3 [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5278 ./strace-static-x86_64: Process 5278 attached [pid 5274] chdir("./file1" [pid 5278] chdir("./22" [pid 5274] <... chdir resumed>) = 0 [pid 5278] <... chdir resumed>) = 0 [pid 5276] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5274] ioctl(4, LOOP_CLR_FD [pid 5278] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5274] <... ioctl resumed>) = 0 [pid 5278] <... prctl resumed>) = 0 [pid 5274] close(4 [pid 5278] setpgid(0, 0 [pid 5274] <... close resumed>) = 0 [pid 5278] <... setpgid resumed>) = 0 [pid 5274] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5278] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5274] <... open resumed>) = 4 [pid 5278] <... openat resumed>) = 3 [pid 5274] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5278] write(3, "1000", 4) = 4 [pid 5274] <... open resumed>) = 5 [pid 5278] close(3) = 0 [pid 5274] ftruncate(5, 33587195 [pid 5278] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5274] <... ftruncate resumed>) = 0 [ 115.376082][ T5277] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5278] memfd_create("syzkaller", 0 [pid 5274] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5278] <... memfd_create resumed>) = 3 [pid 5278] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5274] <... open resumed>) = 6 [pid 5274] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5274] sendfile(6, 7, NULL, 281474978811909 [pid 5276] <... write resumed>) = 2097152 [pid 5278] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5276] munmap(0x7f18ca796000, 2097152) = 0 [pid 5276] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5276] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5276] close(3) = 0 [pid 5276] mkdir("./file1", 0777 [pid 5278] <... write resumed>) = 2097152 [pid 5276] <... mkdir resumed>) = 0 [ 115.545660][ T5276] loop0: detected capacity change from 0 to 4096 [pid 5276] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5278] munmap(0x7f18ca796000, 2097152) = 0 [pid 5278] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5278] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5278] close(3) = 0 [pid 5278] mkdir("./file1", 0777) = 0 [ 115.613752][ T5276] NILFS (loop0): invalid segment: Checksum error in segment payload [ 115.627300][ T5278] loop3: detected capacity change from 0 to 4096 [ 115.635575][ T5276] NILFS (loop0): trying rollback from an earlier position [ 115.685888][ T5278] NILFS (loop3): invalid segment: Checksum error in segment payload [ 115.718760][ T5276] NILFS (loop0): recovery complete [ 115.733530][ T5278] NILFS (loop3): trying rollback from an earlier position [pid 5278] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5276] <... mount resumed>) = 0 [pid 5270] <... sendfile resumed>) = 1048576 [pid 5276] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5276] chdir("./file1") = 0 [pid 5276] ioctl(4, LOOP_CLR_FD) = 0 [pid 5276] close(4) = 0 [pid 5276] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5276] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5276] ftruncate(5, 33587195) = 0 [pid 5276] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5276] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5276] sendfile(6, 7, NULL, 281474978811909 [pid 5270] exit_group(0) = ? [pid 5270] +++ exited with 0 +++ [ 115.766567][ T5279] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5270, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 4998] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./21/binderfs") = 0 [pid 4998] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5268] <... sendfile resumed>) = 1048576 [pid 5268] exit_group(0) = ? [ 115.865123][ T5278] NILFS (loop3): recovery complete [pid 5268] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5268, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./21/binderfs") = 0 [pid 4999] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5278] <... mount resumed>) = 0 [pid 5278] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5278] chdir("./file1") = 0 [pid 5278] ioctl(4, LOOP_CLR_FD) = 0 [pid 5278] close(4) = 0 [ 115.897534][ T5280] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5278] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5278] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5278] ftruncate(5, 33587195) = 0 [pid 5278] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5278] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5278] sendfile(6, 7, NULL, 281474978811909 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./21/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./21/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./21") = 0 [pid 4998] mkdir("./22", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5281 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./21/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./21/file1") = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./21"./strace-static-x86_64: Process 5281 attached ) = 0 [pid 4999] mkdir("./22", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 5281] chdir("./22" [pid 5271] <... sendfile resumed>) = 1048576 [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5282 ./strace-static-x86_64: Process 5282 attached [pid 5282] chdir("./22") = 0 [pid 5282] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5282] setpgid(0, 0) = 0 [pid 5281] <... chdir resumed>) = 0 [pid 5281] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5271] exit_group(0 [pid 5281] setpgid(0, 0 [pid 5271] <... exit_group resumed>) = ? [pid 5281] <... setpgid resumed>) = 0 [pid 5282] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5271] +++ exited with 0 +++ [pid 5282] write(3, "1000", 4 [pid 5281] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5271, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5282] <... write resumed>) = 4 [pid 5281] <... openat resumed>) = 3 [pid 5282] close(3 [pid 5281] write(3, "1000", 4 [pid 5282] <... close resumed>) = 0 [pid 5281] <... write resumed>) = 4 [pid 5282] symlink("/dev/binderfs", "./binderfs" [pid 5281] close(3 [pid 5282] <... symlink resumed>) = 0 [pid 5281] <... close resumed>) = 0 [pid 5282] memfd_create("syzkaller", 0 [pid 5281] symlink("/dev/binderfs", "./binderfs" [pid 5282] <... memfd_create resumed>) = 3 [pid 5282] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5281] <... symlink resumed>) = 0 [pid 5001] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5281] memfd_create("syzkaller", 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5281] <... memfd_create resumed>) = 3 [pid 5001] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5281] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] <... openat resumed>) = 3 [pid 5281] <... mmap resumed>) = 0x7f18ca796000 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./21/binderfs", [pid 5282] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./21/binderfs") = 0 [pid 5001] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5282] <... write resumed>) = 2097152 [pid 5281] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5282] munmap(0x7f18ca796000, 2097152 [pid 5001] lstat("./21/file1", [pid 5282] <... munmap resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5282] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5282] ioctl(4, LOOP_SET_FD, 3 [pid 5001] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5282] <... ioctl resumed>) = 0 [pid 5001] fstat(4, [pid 5282] close(3 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5282] <... close resumed>) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./21/file1" [pid 5282] mkdir("./file1", 0777 [pid 5001] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [ 116.345043][ T5282] loop2: detected capacity change from 0 to 4096 [pid 5001] rmdir("./21" [pid 5282] <... mkdir resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5282] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5001] mkdir("./22", 0777 [pid 5281] <... write resumed>) = 2097152 [pid 5281] munmap(0x7f18ca796000, 2097152) = 0 [pid 5281] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5001] <... mkdir resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5283 ./strace-static-x86_64: Process 5283 attached [pid 5281] <... openat resumed>) = 4 [pid 5281] ioctl(4, LOOP_SET_FD, 3 [pid 5283] chdir("./22") = 0 [ 116.398296][ T5282] NILFS (loop2): invalid segment: Checksum error in segment payload [ 116.426030][ T5281] loop1: detected capacity change from 0 to 4096 [ 116.430699][ T5282] NILFS (loop2): trying rollback from an earlier position [pid 5283] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5282] <... mount resumed>) = 0 [pid 5283] setpgid(0, 0) = 0 [pid 5282] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5283] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5282] <... openat resumed>) = 3 [pid 5283] <... openat resumed>) = 3 [pid 5282] chdir("./file1" [pid 5283] write(3, "1000", 4 [pid 5281] <... ioctl resumed>) = 0 [pid 5281] close(3) = 0 [pid 5281] mkdir("./file1", 0777) = 0 [pid 5281] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5283] <... write resumed>) = 4 [pid 5283] close(3 [pid 5282] <... chdir resumed>) = 0 [pid 5283] <... close resumed>) = 0 [pid 5282] ioctl(4, LOOP_CLR_FD [pid 5283] symlink("/dev/binderfs", "./binderfs" [pid 5282] <... ioctl resumed>) = 0 [pid 5283] <... symlink resumed>) = 0 [pid 5282] close(4 [pid 5283] memfd_create("syzkaller", 0 [pid 5282] <... close resumed>) = 0 [pid 5283] <... memfd_create resumed>) = 3 [pid 5282] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5283] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 116.448398][ T5282] NILFS (loop2): recovery complete [ 116.456274][ T5284] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5282] <... open resumed>) = 4 [pid 5282] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5282] ftruncate(5, 33587195) = 0 [pid 5282] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5282] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5282] sendfile(6, 7, NULL, 281474978811909 [pid 5283] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5274] <... sendfile resumed>) = 1048576 [pid 5274] exit_group(0) = ? [pid 5274] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5274, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5002] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 116.543727][ T5281] NILFS (loop1): invalid segment: Checksum error in segment payload [ 116.571100][ T5281] NILFS (loop1): trying rollback from an earlier position [pid 5002] fstat(3, [pid 5283] <... write resumed>) = 2097152 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5283] munmap(0x7f18ca796000, 2097152) = 0 [pid 5002] getdents64(3, [pid 5283] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5283] ioctl(4, LOOP_SET_FD, 3 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5283] <... ioctl resumed>) = 0 [pid 5283] close(3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./22/binderfs") = 0 [pid 5283] <... close resumed>) = 0 [pid 5002] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5283] mkdir("./file1", 0777) = 0 [ 116.631140][ T5281] NILFS (loop1): recovery complete [ 116.633603][ T5283] loop4: detected capacity change from 0 to 4096 [ 116.667676][ T5283] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5283] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5281] <... mount resumed>) = 0 [pid 5281] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5281] chdir("./file1") = 0 [pid 5281] ioctl(4, LOOP_CLR_FD) = 0 [pid 5281] close(4) = 0 [pid 5281] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5281] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5281] ftruncate(5, 33587195) = 0 [pid 5281] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5281] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 116.677168][ T5285] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.744086][ T5283] NILFS (loop4): trying rollback from an earlier position [ 116.811930][ T5283] NILFS (loop4): recovery complete [pid 5281] sendfile(6, 7, NULL, 281474978811909 [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5283] <... mount resumed>) = 0 [pid 5283] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5283] chdir("./file1") = 0 [pid 5283] ioctl(4, LOOP_CLR_FD) = 0 [pid 5283] close(4) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5283] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5002] lstat("./22/file1", [pid 5283] <... open resumed>) = 4 [pid 5283] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5283] <... open resumed>) = 5 [pid 5283] ftruncate(5, 33587195 [pid 5002] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5283] <... ftruncate resumed>) = 0 [pid 5283] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5283] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5002] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5283] sendfile(6, 7, NULL, 281474978811909 [pid 5002] <... openat resumed>) = 4 [ 116.867647][ T5286] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./22/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./22") = 0 [pid 5002] mkdir("./23", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5287 ./strace-static-x86_64: Process 5287 attached [pid 5276] <... sendfile resumed>) = 1048576 [pid 5287] chdir("./23" [pid 5276] exit_group(0) = ? [pid 5287] <... chdir resumed>) = 0 [pid 5276] +++ exited with 0 +++ [pid 5287] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5276, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5287] <... prctl resumed>) = 0 [pid 4997] restart_syscall(<... resuming interrupted clone ...> [pid 5287] setpgid(0, 0) = 0 [pid 4997] <... restart_syscall resumed>) = 0 [pid 5287] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5287] write(3, "1000", 4) = 4 [pid 5287] close(3 [pid 4997] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5287] <... close resumed>) = 0 [pid 5287] symlink("/dev/binderfs", "./binderfs" [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5287] <... symlink resumed>) = 0 [pid 5287] memfd_create("syzkaller", 0 [pid 4997] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5287] <... memfd_create resumed>) = 3 [pid 5287] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4997] <... openat resumed>) = 3 [pid 5287] <... mmap resumed>) = 0x7f18ca796000 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./21/binderfs") = 0 [pid 4997] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5278] <... sendfile resumed>) = 1048576 [pid 5278] exit_group(0) = ? [pid 5287] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5278] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5278, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5000] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./22/binderfs") = 0 [pid 5000] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5287] <... write resumed>) = 2097152 [pid 5287] munmap(0x7f18ca796000, 2097152) = 0 [pid 5287] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 4997] <... umount2 resumed>) = 0 [pid 5287] ioctl(4, LOOP_SET_FD, 3 [pid 4997] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./21/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./21/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] close(4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./22/file1", [pid 4997] <... close resumed>) = 0 [pid 5287] <... ioctl resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5287] close(3 [pid 4997] rmdir("./21/file1" [pid 5287] <... close resumed>) = 0 [pid 5000] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5287] mkdir("./file1", 0777 [pid 4997] <... rmdir resumed>) = 0 [pid 5287] <... mkdir resumed>) = 0 [ 117.254514][ T5287] loop5: detected capacity change from 0 to 4096 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] getdents64(3, [pid 5287] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5000] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] <... openat resumed>) = 4 [pid 5000] fstat(4, [pid 4997] close(3 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, [pid 4997] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] rmdir("./21" [pid 5000] getdents64(4, [pid 4997] <... rmdir resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4 [pid 4997] mkdir("./22", 0777 [pid 5000] <... close resumed>) = 0 [pid 5000] rmdir("./22/file1" [pid 4997] <... mkdir resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] <... openat resumed>) = 3 [pid 5000] close(3 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5000] <... close resumed>) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] rmdir("./22") = 0 [pid 4997] close(3 [pid 5000] mkdir("./23", 0777 [pid 4997] <... close resumed>) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5288 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5289 ./strace-static-x86_64: Process 5289 attached [ 117.328321][ T5287] NILFS (loop5): invalid segment: Checksum error in segment payload ./strace-static-x86_64: Process 5288 attached [pid 5289] chdir("./23") = 0 [pid 5288] chdir("./22" [pid 5289] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5288] <... chdir resumed>) = 0 [pid 5289] setpgid(0, 0) = 0 [pid 5288] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5289] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5288] <... prctl resumed>) = 0 [pid 5289] <... openat resumed>) = 3 [pid 5288] setpgid(0, 0 [pid 5289] write(3, "1000", 4 [pid 5288] <... setpgid resumed>) = 0 [pid 5289] <... write resumed>) = 4 [pid 5289] close(3 [pid 5288] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5289] <... close resumed>) = 0 [pid 5288] <... openat resumed>) = 3 [pid 5289] symlink("/dev/binderfs", "./binderfs" [pid 5288] write(3, "1000", 4 [pid 5289] <... symlink resumed>) = 0 [pid 5288] <... write resumed>) = 4 [pid 5289] memfd_create("syzkaller", 0 [pid 5288] close(3 [pid 5289] <... memfd_create resumed>) = 3 [pid 5288] <... close resumed>) = 0 [pid 5289] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 117.378967][ T5287] NILFS (loop5): trying rollback from an earlier position [pid 5288] symlink("/dev/binderfs", "./binderfs" [pid 5289] <... mmap resumed>) = 0x7f18ca796000 [pid 5288] <... symlink resumed>) = 0 [pid 5288] memfd_create("syzkaller", 0) = 3 [pid 5288] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5288] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5289] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5282] <... sendfile resumed>) = 1048576 [pid 5282] exit_group(0) = ? [ 117.476813][ T5287] NILFS (loop5): recovery complete [pid 5282] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5282, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5287] <... mount resumed>) = 0 [pid 5287] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5287] chdir("./file1") = 0 [pid 5287] ioctl(4, LOOP_CLR_FD) = 0 [pid 5287] close(4) = 0 [pid 5287] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5287] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4999] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5287] <... open resumed>) = 5 [pid 5287] ftruncate(5, 33587195 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5288] <... write resumed>) = 2097152 [pid 5287] <... ftruncate resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5287] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 4999] <... openat resumed>) = 3 [pid 5287] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4999] fstat(3, [pid 5287] <... open resumed>) = 7 [pid 5287] sendfile(6, 7, NULL, 281474978811909 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5289] <... write resumed>) = 2097152 [pid 4999] getdents64(3, [pid 5289] munmap(0x7f18ca796000, 2097152 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5289] <... munmap resumed>) = 0 [pid 4999] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5289] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] lstat("./22/binderfs", [pid 5289] <... openat resumed>) = 4 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 117.523962][ T5290] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5289] ioctl(4, LOOP_SET_FD, 3 [pid 4999] unlink("./22/binderfs") = 0 [pid 4999] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5289] <... ioctl resumed>) = 0 [pid 5289] close(3) = 0 [pid 5289] mkdir("./file1", 0777) = 0 [pid 5289] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5288] munmap(0x7f18ca796000, 2097152) = 0 [pid 5288] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5288] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5288] close(3) = 0 [pid 5288] mkdir("./file1", 0777) = 0 [ 117.571499][ T5289] loop3: detected capacity change from 0 to 4096 [ 117.598779][ T5288] loop0: detected capacity change from 0 to 4096 [ 117.632526][ T5288] NILFS (loop0): invalid segment: Checksum error in segment payload [ 117.646626][ T5289] NILFS (loop3): invalid segment: Checksum error in segment payload [ 117.675829][ T5288] NILFS (loop0): trying rollback from an earlier position [ 117.701609][ T5289] NILFS (loop3): trying rollback from an earlier position [pid 5288] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./22/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./22/file1") = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./22") = 0 [pid 4999] mkdir("./23", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 117.773673][ T5288] NILFS (loop0): recovery complete [ 117.791961][ T5289] NILFS (loop3): recovery complete [pid 4999] close(3 [pid 5289] <... mount resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5289] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5293 [pid 5289] <... openat resumed>) = 3 [pid 5289] chdir("./file1") = 0 [pid 5289] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 5293 attached ) = 0 [pid 5293] chdir("./23" [pid 5289] close(4 [pid 5293] <... chdir resumed>) = 0 [pid 5293] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5293] setpgid(0, 0) = 0 [pid 5293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5293] write(3, "1000", 4) = 4 [pid 5293] close(3) = 0 [pid 5293] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5293] memfd_create("syzkaller", 0) = 3 [pid 5293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5289] <... close resumed>) = 0 [pid 5288] <... mount resumed>) = 0 [pid 5281] <... sendfile resumed>) = 1048576 [ 117.824232][ T5292] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.837732][ T5291] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5289] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5288] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5281] exit_group(0 [pid 5288] <... openat resumed>) = 3 [pid 5281] <... exit_group resumed>) = ? [pid 5288] chdir("./file1" [pid 5281] +++ exited with 0 +++ [pid 5288] <... chdir resumed>) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5281, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5289] <... open resumed>) = 4 [pid 5288] ioctl(4, LOOP_CLR_FD [pid 5289] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5288] <... ioctl resumed>) = 0 [pid 5288] close(4 [pid 5289] <... open resumed>) = 5 [pid 5288] <... close resumed>) = 0 [pid 5288] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5289] ftruncate(5, 33587195) = 0 [pid 4998] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5289] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5288] <... open resumed>) = 4 [pid 5289] <... open resumed>) = 6 [pid 5288] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5289] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5288] <... open resumed>) = 5 [pid 4998] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5289] <... open resumed>) = 7 [pid 5288] ftruncate(5, 33587195 [pid 4998] <... openat resumed>) = 3 [pid 5289] sendfile(6, 7, NULL, 281474978811909 [pid 5288] <... ftruncate resumed>) = 0 [pid 4998] fstat(3, [pid 5288] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5288] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4998] getdents64(3, [pid 5288] <... open resumed>) = 7 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5288] sendfile(6, 7, NULL, 281474978811909 [pid 4998] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./22/binderfs") = 0 [pid 4998] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5293] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5283] <... sendfile resumed>) = 1048576 [pid 5283] exit_group(0) = ? [pid 5293] <... write resumed>) = 2097152 [pid 5293] munmap(0x7f18ca796000, 2097152) = 0 [pid 5293] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5283] +++ exited with 0 +++ [pid 5293] ioctl(4, LOOP_SET_FD, 3 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5283, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5001] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./22/binderfs") = 0 [pid 5001] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = 0 [pid 5293] <... ioctl resumed>) = 0 [pid 5293] close(3) = 0 [pid 5293] mkdir("./file1", 0777) = 0 [pid 5293] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./22/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 118.074173][ T5293] loop2: detected capacity change from 0 to 4096 [pid 4998] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./22/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./22") = 0 [pid 4998] mkdir("./23", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5294 [ 118.148477][ T5293] NILFS (loop2): invalid segment: Checksum error in segment payload ./strace-static-x86_64: Process 5294 attached [pid 5294] chdir("./23") = 0 [pid 5294] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5294] setpgid(0, 0) = 0 [pid 5294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5294] write(3, "1000", 4) = 4 [pid 5294] close(3) = 0 [pid 5294] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5294] memfd_create("syzkaller", 0) = 3 [pid 5294] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 118.218537][ T5293] NILFS (loop2): trying rollback from an earlier position [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5294] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./22/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [ 118.295783][ T5293] NILFS (loop2): recovery complete [pid 5001] rmdir("./22/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./22") = 0 [pid 5294] <... write resumed>) = 2097152 [pid 5001] mkdir("./23", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5293] <... mount resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5293] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5296 [pid 5293] <... openat resumed>) = 3 [pid 5294] munmap(0x7f18ca796000, 2097152 [pid 5293] chdir("./file1") = 0 [pid 5294] <... munmap resumed>) = 0 [pid 5294] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5294] ioctl(4, LOOP_SET_FD, 3 [pid 5293] ioctl(4, LOOP_CLR_FD) = 0 [pid 5293] close(4) = 0 [pid 5293] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5294] <... ioctl resumed>) = 0 [pid 5293] <... open resumed>) = 4 [pid 5293] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5293] ftruncate(5, 33587195) = 0 [pid 5293] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5293] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5293] sendfile(6, 7, NULL, 281474978811909 [pid 5294] close(3) = 0 [pid 5294] mkdir("./file1", 0777) = 0 [pid 5294] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, ""./strace-static-x86_64: Process 5296 attached [ 118.364467][ T5295] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.401293][ T5294] loop1: detected capacity change from 0 to 4096 [pid 5296] chdir("./23") = 0 [pid 5296] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5296] setpgid(0, 0) = 0 [pid 5296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5296] write(3, "1000", 4) = 4 [pid 5296] close(3) = 0 [pid 5296] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5296] memfd_create("syzkaller", 0) = 3 [pid 5296] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 118.484145][ T5294] NILFS (loop1): invalid segment: Checksum error in segment payload [ 118.495541][ T5294] NILFS (loop1): trying rollback from an earlier position [ 118.581551][ T5294] NILFS (loop1): recovery complete [pid 5296] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5294] <... mount resumed>) = 0 [pid 5294] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5296] munmap(0x7f18ca796000, 2097152 [pid 5294] <... openat resumed>) = 3 [pid 5296] <... munmap resumed>) = 0 [pid 5294] chdir("./file1") = 0 [pid 5294] ioctl(4, LOOP_CLR_FD [pid 5296] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5294] <... ioctl resumed>) = 0 [pid 5296] <... openat resumed>) = 4 [pid 5294] close(4 [pid 5296] ioctl(4, LOOP_SET_FD, 3 [pid 5294] <... close resumed>) = 0 [ 118.626366][ T5297] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5294] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5296] <... ioctl resumed>) = 0 [pid 5296] close(3) = 0 [pid 5296] mkdir("./file1", 0777) = 0 [pid 5296] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5287] <... sendfile resumed>) = 1048576 [pid 5294] <... open resumed>) = 4 [pid 5294] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5294] ftruncate(5, 33587195 [pid 5287] exit_group(0 [pid 5294] <... ftruncate resumed>) = 0 [pid 5287] <... exit_group resumed>) = ? [pid 5294] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5294] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5294] sendfile(6, 7, NULL, 281474978811909 [pid 5287] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5287, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [ 118.666880][ T5296] loop4: detected capacity change from 0 to 4096 [pid 5002] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./23/binderfs") = 0 [ 118.728383][ T5296] NILFS (loop4): invalid segment: Checksum error in segment payload [ 118.780478][ T5296] NILFS (loop4): trying rollback from an earlier position [ 118.883148][ T5296] NILFS (loop4): recovery complete [pid 5002] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5296] <... mount resumed>) = 0 [pid 5296] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5296] chdir("./file1") = 0 [pid 5296] ioctl(4, LOOP_CLR_FD) = 0 [pid 5296] close(4) = 0 [pid 5296] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5296] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5002] <... umount2 resumed>) = 0 [pid 5296] ftruncate(5, 33587195 [pid 5002] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5296] <... ftruncate resumed>) = 0 [pid 5296] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5296] <... open resumed>) = 6 [ 118.918957][ T5298] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] lstat("./23/file1", [pid 5296] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5296] <... open resumed>) = 7 [pid 5002] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5296] sendfile(6, 7, NULL, 281474978811909 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5288] <... sendfile resumed>) = 1048576 [pid 5002] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5288] exit_group(0 [pid 5002] <... openat resumed>) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5288] <... exit_group resumed>) = ? [pid 5002] close(4) = 0 [pid 5288] +++ exited with 0 +++ [pid 5002] rmdir("./23/file1") = 0 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5288, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./23" [pid 4997] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] <... rmdir resumed>) = 0 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] mkdir("./24", 0777 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] <... mkdir resumed>) = 0 [pid 4997] lstat("./22/binderfs", [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./22/binderfs" [pid 5002] <... openat resumed>) = 3 [pid 4997] <... unlink resumed>) = 0 [pid 4997] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5299 ./strace-static-x86_64: Process 5299 attached [pid 5299] chdir("./24") = 0 [pid 5299] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5299] setpgid(0, 0) = 0 [pid 5299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5299] write(3, "1000", 4 [pid 5289] <... sendfile resumed>) = 1048576 [pid 5299] <... write resumed>) = 4 [pid 5289] exit_group(0 [pid 5299] close(3 [pid 5289] <... exit_group resumed>) = ? [pid 5299] <... close resumed>) = 0 [pid 5289] +++ exited with 0 +++ [pid 5299] symlink("/dev/binderfs", "./binderfs" [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5289, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=33 /* 0.33 s */} --- [pid 5299] <... symlink resumed>) = 0 [pid 5299] memfd_create("syzkaller", 0) = 3 [pid 5000] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5299] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./23/binderfs") = 0 [pid 5000] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5299] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./22/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./22/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 5299] <... write resumed>) = 2097152 [pid 4997] rmdir("./22/file1" [pid 5299] munmap(0x7f18ca796000, 2097152) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5299] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] <... umount2 resumed>) = 0 [pid 4997] close(3 [pid 5299] <... openat resumed>) = 4 [pid 5000] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... close resumed>) = 0 [pid 5299] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] rmdir("./22" [pid 5000] lstat("./23/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... rmdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] mkdir("./23", 0777 [pid 5000] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, [pid 4997] <... mkdir resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4 [pid 4997] <... openat resumed>) = 3 [pid 5000] <... close resumed>) = 0 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5000] rmdir("./23/file1" [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... rmdir resumed>) = 0 [pid 4997] close(3 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] <... close resumed>) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./23") = 0 [pid 5000] mkdir("./24", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5299] <... ioctl resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5299] close(3 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5299] <... close resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5299] mkdir("./file1", 0777 [pid 5000] close(3 [pid 5299] <... mkdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5299] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5300 [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5301 ./strace-static-x86_64: Process 5300 attached [pid 5300] chdir("./23"./strace-static-x86_64: Process 5301 attached [pid 5301] chdir("./24" [pid 5300] <... chdir resumed>) = 0 [pid 5301] <... chdir resumed>) = 0 [pid 5301] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5300] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5301] <... prctl resumed>) = 0 [pid 5300] <... prctl resumed>) = 0 [pid 5301] setpgid(0, 0 [pid 5300] setpgid(0, 0 [pid 5301] <... setpgid resumed>) = 0 [pid 5301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5301] write(3, "1000", 4) = 4 [ 119.316682][ T5299] loop5: detected capacity change from 0 to 4096 [ 119.355129][ T5299] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5301] close(3 [pid 5300] <... setpgid resumed>) = 0 [pid 5301] <... close resumed>) = 0 [pid 5301] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5301] memfd_create("syzkaller", 0 [pid 5300] <... openat resumed>) = 3 [pid 5301] <... memfd_create resumed>) = 3 [pid 5300] write(3, "1000", 4 [pid 5301] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5300] <... write resumed>) = 4 [pid 5301] <... mmap resumed>) = 0x7f18ca796000 [pid 5300] close(3) = 0 [pid 5300] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5300] memfd_create("syzkaller", 0) = 3 [pid 5300] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5293] <... sendfile resumed>) = 1048576 [pid 5293] exit_group(0) = ? [pid 5293] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5293, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 4999] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5301] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... openat resumed>) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5300] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./23/binderfs") = 0 [ 119.429208][ T5299] NILFS (loop5): trying rollback from an earlier position [ 119.511160][ T5299] NILFS (loop5): recovery complete [pid 4999] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5301] <... write resumed>) = 2097152 [pid 5301] munmap(0x7f18ca796000, 2097152) = 0 [pid 5301] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5301] ioctl(4, LOOP_SET_FD, 3 [pid 5300] <... write resumed>) = 2097152 [pid 5299] <... mount resumed>) = 0 [pid 5299] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5299] chdir("./file1") = 0 [pid 5299] ioctl(4, LOOP_CLR_FD) = 0 [pid 5299] close(4) = 0 [pid 5299] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5300] munmap(0x7f18ca796000, 2097152 [pid 5299] <... open resumed>) = 4 [pid 5299] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5299] ftruncate(5, 33587195 [pid 5300] <... munmap resumed>) = 0 [pid 5299] <... ftruncate resumed>) = 0 [pid 5300] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5299] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5300] <... openat resumed>) = 4 [pid 5299] <... open resumed>) = 6 [pid 5300] ioctl(4, LOOP_SET_FD, 3 [ 119.551406][ T5302] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.558932][ T5301] loop3: detected capacity change from 0 to 4096 [pid 5299] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5299] sendfile(6, 7, NULL, 281474978811909 [pid 5300] <... ioctl resumed>) = 0 [pid 5300] close(3) = 0 [pid 5300] mkdir("./file1", 0777 [pid 5301] <... ioctl resumed>) = 0 [pid 5300] <... mkdir resumed>) = 0 [pid 5301] close(3) = 0 [pid 5301] mkdir("./file1", 0777 [pid 5300] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4999] <... umount2 resumed>) = 0 [pid 5301] <... mkdir resumed>) = 0 [pid 5301] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4999] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./23/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 119.611221][ T5300] loop0: detected capacity change from 0 to 4096 [pid 4999] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./23/file1") = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./23") = 0 [pid 4999] mkdir("./24", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [ 119.673448][ T5300] NILFS (loop0): invalid segment: Checksum error in segment payload [ 119.682172][ T5300] NILFS (loop0): trying rollback from an earlier position [ 119.688060][ T5301] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5303 ./strace-static-x86_64: Process 5303 attached [pid 5303] chdir("./24") = 0 [pid 5303] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5303] setpgid(0, 0) = 0 [pid 5303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5303] write(3, "1000", 4) = 4 [pid 5303] close(3) = 0 [pid 5303] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5303] memfd_create("syzkaller", 0) = 3 [pid 5303] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5294] <... sendfile resumed>) = 1048576 [pid 5294] exit_group(0) = ? [pid 5294] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5294, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 4998] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./23/binderfs" [pid 5303] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] <... unlink resumed>) = 0 [ 119.751055][ T5301] NILFS (loop3): trying rollback from an earlier position [ 119.790037][ T5300] NILFS (loop0): recovery complete [pid 4998] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5300] <... mount resumed>) = 0 [pid 5300] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5300] chdir("./file1") = 0 [pid 5300] ioctl(4, LOOP_CLR_FD) = 0 [pid 5300] close(4) = 0 [pid 5300] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5300] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5300] ftruncate(5, 33587195) = 0 [pid 5300] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5300] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 119.815821][ T5304] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.843903][ T5301] NILFS (loop3): recovery complete [pid 5300] sendfile(6, 7, NULL, 281474978811909 [pid 5301] <... mount resumed>) = 0 [pid 5301] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5301] chdir("./file1") = 0 [pid 5301] ioctl(4, LOOP_CLR_FD) = 0 [pid 5301] close(4) = 0 [pid 5301] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5301] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5301] ftruncate(5, 33587195) = 0 [pid 5301] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5301] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5301] sendfile(6, 7, NULL, 281474978811909 [pid 5303] <... write resumed>) = 2097152 [pid 5303] munmap(0x7f18ca796000, 2097152) = 0 [ 119.894692][ T5305] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5303] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5303] ioctl(4, LOOP_SET_FD, 3 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./23/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5303] <... ioctl resumed>) = 0 [pid 5303] close(3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5303] <... close resumed>) = 0 [pid 5303] mkdir("./file1", 0777 [pid 4998] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5303] <... mkdir resumed>) = 0 [pid 4998] <... openat resumed>) = 4 [pid 5303] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [ 119.957355][ T5303] loop2: detected capacity change from 0 to 4096 [pid 4998] close(4) = 0 [pid 4998] rmdir("./23/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./23") = 0 [pid 4998] mkdir("./24", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5306 ./strace-static-x86_64: Process 5306 attached [pid 5306] chdir("./24") = 0 [pid 5296] <... sendfile resumed>) = 1048576 [pid 5306] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5306] setpgid(0, 0) = 0 [pid 5296] exit_group(0 [pid 5306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5296] <... exit_group resumed>) = ? [pid 5306] <... openat resumed>) = 3 [pid 5306] write(3, "1000", 4) = 4 [pid 5306] close(3) = 0 [pid 5306] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5306] memfd_create("syzkaller", 0 [pid 5296] +++ exited with 0 +++ [ 120.041696][ T5303] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5306] <... memfd_create resumed>) = 3 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5296, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 5306] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5001] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./23/binderfs") = 0 [pid 5001] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 120.093547][ T5303] NILFS (loop2): trying rollback from an earlier position [pid 5306] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5303] <... mount resumed>) = 0 [pid 5303] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5303] chdir("./file1") = 0 [pid 5303] ioctl(4, LOOP_CLR_FD) = 0 [pid 5303] close(4) = 0 [pid 5303] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5303] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5303] ftruncate(5, 33587195) = 0 [pid 5303] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5303] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 120.163626][ T5303] NILFS (loop2): recovery complete [ 120.182160][ T5307] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5303] sendfile(6, 7, NULL, 281474978811909 [pid 5306] <... write resumed>) = 2097152 [pid 5306] munmap(0x7f18ca796000, 2097152) = 0 [pid 5306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5001] <... umount2 resumed>) = 0 [pid 5306] <... openat resumed>) = 4 [pid 5001] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5306] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./23/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5306] <... ioctl resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5306] close(3 [pid 5001] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5306] <... close resumed>) = 0 [pid 5001] <... openat resumed>) = 4 [pid 5306] mkdir("./file1", 0777 [pid 5001] fstat(4, [pid 5306] <... mkdir resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5306] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./23/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./23") = 0 [ 120.332856][ T5306] loop1: detected capacity change from 0 to 4096 [pid 5001] mkdir("./24", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5308 [ 120.377772][ T5306] NILFS (loop1): invalid segment: Checksum error in segment payload ./strace-static-x86_64: Process 5308 attached [pid 5308] chdir("./24") = 0 [pid 5308] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5308] setpgid(0, 0) = 0 [pid 5308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5308] write(3, "1000", 4) = 4 [pid 5308] close(3) = 0 [pid 5308] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5308] memfd_create("syzkaller", 0) = 3 [pid 5308] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 120.444489][ T5306] NILFS (loop1): trying rollback from an earlier position [ 120.531515][ T5306] NILFS (loop1): recovery complete [pid 5308] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5306] <... mount resumed>) = 0 [pid 5306] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5306] chdir("./file1") = 0 [pid 5306] ioctl(4, LOOP_CLR_FD) = 0 [pid 5306] close(4) = 0 [pid 5306] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5306] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5306] ftruncate(5, 33587195) = 0 [pid 5306] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5306] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 120.558660][ T5309] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5306] sendfile(6, 7, NULL, 281474978811909 [pid 5308] <... write resumed>) = 2097152 [pid 5308] munmap(0x7f18ca796000, 2097152) = 0 [pid 5308] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5308] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5308] close(3) = 0 [ 120.645733][ T5308] loop4: detected capacity change from 0 to 4096 [pid 5308] mkdir("./file1", 0777) = 0 [ 120.726131][ T5308] NILFS (loop4): invalid segment: Checksum error in segment payload [ 120.739317][ T5308] NILFS (loop4): trying rollback from an earlier position [pid 5308] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5299] <... sendfile resumed>) = 1048576 [pid 5299] exit_group(0) = ? [pid 5299] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5299, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 120.821468][ T5308] NILFS (loop4): recovery complete [pid 5002] lstat("./24/binderfs", [pid 5308] <... mount resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5308] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5002] unlink("./24/binderfs" [pid 5308] <... openat resumed>) = 3 [pid 5002] <... unlink resumed>) = 0 [pid 5308] chdir("./file1" [pid 5002] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5308] <... chdir resumed>) = 0 [pid 5308] ioctl(4, LOOP_CLR_FD) = 0 [pid 5308] close(4) = 0 [pid 5308] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5308] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5308] ftruncate(5, 33587195 [pid 5301] <... sendfile resumed>) = 1048576 [pid 5301] exit_group(0) = ? [pid 5301] +++ exited with 0 +++ [pid 5308] <... ftruncate resumed>) = 0 [pid 5308] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5301, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5308] <... open resumed>) = 6 [pid 5308] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5000] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5308] sendfile(6, 7, NULL, 281474978811909 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [ 120.878968][ T5310] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./24/binderfs") = 0 [pid 5000] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5300] <... sendfile resumed>) = 1048576 [pid 5300] exit_group(0) = ? [pid 5300] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5300, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 4997] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4997] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./23/binderfs") = 0 [pid 4997] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./24/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./24/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./24") = 0 [pid 5002] mkdir("./25", 0777 [pid 5000] <... umount2 resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... openat resumed>) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5000] lstat("./24/file1", [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5311 ./strace-static-x86_64: Process 5311 attached [pid 5311] chdir("./25") = 0 [pid 5311] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5311] setpgid(0, 0) = 0 [pid 5000] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5311] write(3, "1000", 4) = 4 [pid 5000] openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5311] close(3 [pid 5000] <... openat resumed>) = 4 [pid 5311] <... close resumed>) = 0 [pid 5000] fstat(4, [pid 4997] <... umount2 resumed>) = 0 [pid 5311] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5311] memfd_create("syzkaller", 0) = 3 [pid 5000] getdents64(4, [pid 5311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5311] <... mmap resumed>) = 0x7f18ca796000 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] lstat("./23/file1", [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] close(4) = 0 [pid 4997] umount2("./23/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] rmdir("./24/file1") = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] getdents64(3, [pid 4997] openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] <... openat resumed>) = 4 [pid 5000] close(3 [pid 4997] fstat(4, [pid 5000] <... close resumed>) = 0 [pid 5000] rmdir("./24" [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4997] getdents64(4, [pid 5000] mkdir("./25", 0777 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] <... mkdir resumed>) = 0 [pid 4997] getdents64(4, [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] <... openat resumed>) = 3 [pid 4997] close(4 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4997] <... close resumed>) = 0 [pid 4997] rmdir("./23/file1" [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5311] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] close(3 [pid 4997] <... rmdir resumed>) = 0 [pid 4997] getdents64(3, [pid 5000] <... close resumed>) = 0 [pid 5303] <... sendfile resumed>) = 1048576 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5303] exit_group(0 [pid 4997] close(3 [pid 5303] <... exit_group resumed>) = ? [pid 5303] +++ exited with 0 +++ [pid 4997] <... close resumed>) = 0 [pid 4997] rmdir("./23" [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5312 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5303, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 4997] mkdir("./24", 0777 [pid 4999] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5312 attached [pid 4999] getdents64(3, [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5312] chdir("./25" [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5312] <... chdir resumed>) = 0 [pid 4999] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5312] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] close(3 [pid 5312] <... prctl resumed>) = 0 [pid 4999] lstat("./24/binderfs", [pid 5312] setpgid(0, 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] <... close resumed>) = 0 [pid 5312] <... setpgid resumed>) = 0 [pid 4999] unlink("./24/binderfs" [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... unlink resumed>) = 0 [pid 5312] <... openat resumed>) = 3 [pid 4999] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5312] write(3, "1000", 4) = 4 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5313 [pid 5312] close(3) = 0 [pid 5312] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5312] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5313 attached ) = 3 [pid 5312] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5313] chdir("./24" [pid 5312] <... mmap resumed>) = 0x7f18ca796000 [pid 5313] <... chdir resumed>) = 0 [pid 5313] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5313] setpgid(0, 0) = 0 [pid 5313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5313] write(3, "1000", 4) = 4 [pid 5313] close(3) = 0 [pid 5313] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5313] memfd_create("syzkaller", 0) = 3 [pid 5313] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5311] <... write resumed>) = 2097152 [pid 5312] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5311] munmap(0x7f18ca796000, 2097152) = 0 [pid 5311] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5311] ioctl(4, LOOP_SET_FD, 3 [pid 5313] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5311] <... ioctl resumed>) = 0 [pid 5311] close(3) = 0 [pid 5311] mkdir("./file1", 0777) = 0 [ 121.452774][ T5311] loop5: detected capacity change from 0 to 4096 [pid 5311] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./24/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5312] <... write resumed>) = 2097152 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, [pid 5312] munmap(0x7f18ca796000, 2097152 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4 [pid 5312] <... munmap resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./24/file1" [pid 5312] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] <... rmdir resumed>) = 0 [pid 5312] <... openat resumed>) = 4 [pid 4999] getdents64(3, [pid 5312] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5313] <... write resumed>) = 2097152 [ 121.524655][ T5311] NILFS (loop5): invalid segment: Checksum error in segment payload [ 121.548059][ T5312] loop3: detected capacity change from 0 to 4096 [ 121.554807][ T5311] NILFS (loop5): trying rollback from an earlier position [pid 4999] close(3 [pid 5313] munmap(0x7f18ca796000, 2097152 [pid 5312] <... ioctl resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./24" [pid 5313] <... munmap resumed>) = 0 [pid 5312] close(3 [pid 4999] <... rmdir resumed>) = 0 [pid 5312] <... close resumed>) = 0 [pid 4999] mkdir("./25", 0777 [pid 5313] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5312] mkdir("./file1", 0777 [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5312] <... mkdir resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5313] <... openat resumed>) = 4 [pid 5312] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5313] ioctl(4, LOOP_SET_FD, 3 [pid 5311] <... mount resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5313] <... ioctl resumed>) = 0 [pid 5313] close(3) = 0 [pid 5313] mkdir("./file1", 0777) = 0 [ 121.570572][ T5311] NILFS (loop5): recovery complete [ 121.584686][ T5314] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.587151][ T5313] loop0: detected capacity change from 0 to 4096 [ 121.601300][ T5312] NILFS (loop3): invalid segment: Checksum error in segment payload [ 121.610848][ T5312] NILFS (loop3): trying rollback from an earlier position [pid 5313] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5311] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4999] close(3 [pid 5311] <... openat resumed>) = 3 [pid 4999] <... close resumed>) = 0 [pid 5311] chdir("./file1" [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5311] <... chdir resumed>) = 0 [pid 5311] ioctl(4, LOOP_CLR_FD [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5316 [pid 5311] <... ioctl resumed>) = 0 [pid 5311] close(4) = 0 [pid 5311] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5311] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5311] ftruncate(5, 33587195) = 0 [pid 5311] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5311] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000./strace-static-x86_64: Process 5316 attached [pid 5312] <... mount resumed>) = 0 [pid 5311] <... open resumed>) = 7 [pid 5312] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5311] sendfile(6, 7, NULL, 281474978811909 [pid 5316] chdir("./25" [pid 5312] <... openat resumed>) = 3 [pid 5312] chdir("./file1") = 0 [pid 5316] <... chdir resumed>) = 0 [pid 5312] ioctl(4, LOOP_CLR_FD [pid 5316] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5312] <... ioctl resumed>) = 0 [pid 5312] close(4) = 0 [pid 5312] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5316] <... prctl resumed>) = 0 [pid 5312] <... open resumed>) = 4 [pid 5312] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5316] setpgid(0, 0 [pid 5312] <... open resumed>) = 5 [pid 5312] ftruncate(5, 33587195 [pid 5316] <... setpgid resumed>) = 0 [pid 5312] <... ftruncate resumed>) = 0 [pid 5312] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5312] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5316] <... openat resumed>) = 3 [ 121.630643][ T5312] NILFS (loop3): recovery complete [ 121.649398][ T5315] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.665884][ T5313] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5312] sendfile(6, 7, NULL, 281474978811909 [pid 5316] write(3, "1000", 4) = 4 [pid 5316] close(3) = 0 [pid 5316] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5316] memfd_create("syzkaller", 0) = 3 [pid 5316] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5316] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5306] <... sendfile resumed>) = 1048576 [pid 5306] exit_group(0) = ? [pid 5306] +++ exited with 0 +++ [ 121.735853][ T5313] NILFS (loop0): trying rollback from an earlier position [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5306, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./24/binderfs") = 0 [ 121.854474][ T5313] NILFS (loop0): recovery complete [pid 4998] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5313] <... mount resumed>) = 0 [pid 5313] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5313] chdir("./file1" [pid 5316] <... write resumed>) = 2097152 [pid 5313] <... chdir resumed>) = 0 [pid 5316] munmap(0x7f18ca796000, 2097152 [pid 5313] ioctl(4, LOOP_CLR_FD [pid 5316] <... munmap resumed>) = 0 [pid 5313] <... ioctl resumed>) = 0 [pid 5316] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5313] close(4) = 0 [pid 5316] <... openat resumed>) = 4 [pid 5313] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5316] ioctl(4, LOOP_SET_FD, 3 [pid 5313] <... open resumed>) = 4 [ 121.891888][ T5317] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5313] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5313] ftruncate(5, 33587195 [pid 5316] <... ioctl resumed>) = 0 [pid 5313] <... ftruncate resumed>) = 0 [pid 5316] close(3 [pid 5313] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5316] <... close resumed>) = 0 [pid 5313] <... open resumed>) = 6 [pid 4998] <... umount2 resumed>) = 0 [pid 5313] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5316] mkdir("./file1", 0777 [pid 5313] <... open resumed>) = 7 [pid 5316] <... mkdir resumed>) = 0 [pid 5313] sendfile(6, 7, NULL, 281474978811909 [pid 5316] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 121.936969][ T5316] loop2: detected capacity change from 0 to 4096 [pid 4998] lstat("./24/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, [pid 5308] <... sendfile resumed>) = 1048576 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5308] exit_group(0) = ? [pid 4998] getdents64(4, [pid 5308] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5308, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 122.006173][ T5316] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] close(4 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] <... close resumed>) = 0 [pid 5001] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] rmdir("./24/file1" [pid 5001] lstat("./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./24/binderfs") = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5001] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./24") = 0 [pid 4998] mkdir("./25", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [ 122.046977][ T5316] NILFS (loop2): trying rollback from an earlier position [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5318 ./strace-static-x86_64: Process 5318 attached [pid 5318] chdir("./25") = 0 [pid 5318] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 122.095162][ T5316] NILFS (loop2): recovery complete [pid 5318] setpgid(0, 0) = 0 [pid 5318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5316] <... mount resumed>) = 0 [pid 5318] write(3, "1000", 4 [pid 5316] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5001] <... umount2 resumed>) = 0 [pid 5318] <... write resumed>) = 4 [pid 5316] <... openat resumed>) = 3 [pid 5001] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5318] close(3 [pid 5316] chdir("./file1" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5318] <... close resumed>) = 0 [pid 5316] <... chdir resumed>) = 0 [pid 5001] lstat("./24/file1", [pid 5318] symlink("/dev/binderfs", "./binderfs" [pid 5316] ioctl(4, LOOP_CLR_FD [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5318] <... symlink resumed>) = 0 [pid 5316] <... ioctl resumed>) = 0 [pid 5001] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5316] close(4 [pid 5318] memfd_create("syzkaller", 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5316] <... close resumed>) = 0 [ 122.153922][ T5319] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5318] <... memfd_create resumed>) = 3 [pid 5316] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5001] <... openat resumed>) = 4 [pid 5318] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5316] <... open resumed>) = 4 [pid 5001] fstat(4, [pid 5318] <... mmap resumed>) = 0x7f18ca796000 [pid 5316] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5316] <... open resumed>) = 5 [pid 5316] ftruncate(5, 33587195) = 0 [pid 5316] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5316] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5316] sendfile(6, 7, NULL, 281474978811909 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./24/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./24") = 0 [pid 5001] mkdir("./25", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5320 ./strace-static-x86_64: Process 5320 attached [pid 5320] chdir("./25") = 0 [pid 5318] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5320] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5320] setpgid(0, 0) = 0 [pid 5320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5320] write(3, "1000", 4) = 4 [pid 5320] close(3) = 0 [pid 5320] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5320] memfd_create("syzkaller", 0) = 3 [pid 5320] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5320] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5318] <... write resumed>) = 2097152 [pid 5318] munmap(0x7f18ca796000, 2097152) = 0 [pid 5318] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5318] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5318] close(3) = 0 [pid 5318] mkdir("./file1", 0777) = 0 [ 122.401192][ T5318] loop1: detected capacity change from 0 to 4096 [pid 5318] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5320] <... write resumed>) = 2097152 [pid 5320] munmap(0x7f18ca796000, 2097152) = 0 [pid 5320] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5320] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5320] close(3) = 0 [pid 5320] mkdir("./file1", 0777) = 0 [ 122.441867][ T5318] NILFS (loop1): invalid segment: Checksum error in segment payload [ 122.463493][ T5318] NILFS (loop1): trying rollback from an earlier position [ 122.475076][ T5320] loop4: detected capacity change from 0 to 4096 [ 122.507807][ T5318] NILFS (loop1): recovery complete [pid 5320] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5318] <... mount resumed>) = 0 [pid 5318] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5318] chdir("./file1") = 0 [pid 5318] ioctl(4, LOOP_CLR_FD) = 0 [pid 5318] close(4) = 0 [pid 5318] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5318] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5318] ftruncate(5, 33587195) = 0 [pid 5318] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5318] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 122.536643][ T5320] NILFS (loop4): invalid segment: Checksum error in segment payload [ 122.550124][ T5321] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.562168][ T5320] NILFS (loop4): trying rollback from an earlier position [ 122.679395][ T5320] NILFS (loop4): recovery complete [pid 5318] sendfile(6, 7, NULL, 281474978811909 [pid 5312] <... sendfile resumed>) = 1048576 [pid 5312] exit_group(0) = ? [pid 5312] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5312, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5320] <... mount resumed>) = 0 [pid 5320] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5000] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5320] <... openat resumed>) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5320] chdir("./file1") = 0 [pid 5000] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5320] ioctl(4, LOOP_CLR_FD [pid 5000] <... openat resumed>) = 3 [pid 5320] <... ioctl resumed>) = 0 [pid 5000] fstat(3, [pid 5320] close(4 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5320] <... close resumed>) = 0 [pid 5320] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5000] getdents64(3, [pid 5320] <... open resumed>) = 4 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5320] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [ 122.707785][ T5322] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5320] <... open resumed>) = 5 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5320] ftruncate(5, 33587195) = 0 [pid 5000] lstat("./25/binderfs", [pid 5320] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5320] <... open resumed>) = 6 [pid 5000] unlink("./25/binderfs" [pid 5320] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5000] <... unlink resumed>) = 0 [pid 5000] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5320] <... open resumed>) = 7 [pid 5320] sendfile(6, 7, NULL, 281474978811909 [pid 5311] <... sendfile resumed>) = 1048576 [pid 5311] exit_group(0) = ? [pid 5311] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5311, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=25 /* 0.25 s */} --- [pid 5002] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./25/binderfs") = 0 [pid 5002] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./25/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./25/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./25/file1") = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./25") = 0 [pid 5000] mkdir("./26", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5323 [pid 5002] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./25/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./25/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5323 attached [pid 5002] getdents64(4, [pid 5323] chdir("./26" [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5323] <... chdir resumed>) = 0 [pid 5002] getdents64(4, [pid 5323] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5323] <... prctl resumed>) = 0 [pid 5002] close(4 [pid 5323] setpgid(0, 0 [pid 5002] <... close resumed>) = 0 [pid 5323] <... setpgid resumed>) = 0 [pid 5002] rmdir("./25/file1" [pid 5323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] <... rmdir resumed>) = 0 [pid 5323] <... openat resumed>) = 3 [pid 5002] getdents64(3, [pid 5323] write(3, "1000", 4 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5323] <... write resumed>) = 4 [pid 5002] close(3 [pid 5323] close(3 [pid 5002] <... close resumed>) = 0 [pid 5323] <... close resumed>) = 0 [pid 5002] rmdir("./25" [pid 5323] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5323] memfd_create("syzkaller", 0 [pid 5002] mkdir("./26", 0777 [pid 5323] <... memfd_create resumed>) = 3 [pid 5002] <... mkdir resumed>) = 0 [pid 5323] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5323] <... mmap resumed>) = 0x7f18ca796000 [pid 5002] <... openat resumed>) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5313] <... sendfile resumed>) = 1048576 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5324 [pid 5313] exit_group(0) = ? ./strace-static-x86_64: Process 5324 attached [pid 5324] chdir("./26") = 0 [pid 5324] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5313] +++ exited with 0 +++ [pid 5324] <... prctl resumed>) = 0 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5313, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 5324] setpgid(0, 0) = 0 [pid 5324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5324] write(3, "1000", 4) = 4 [pid 5324] close(3 [pid 4997] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5324] <... close resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5324] symlink("/dev/binderfs", "./binderfs" [pid 4997] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5324] <... symlink resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [pid 5324] memfd_create("syzkaller", 0 [pid 4997] fstat(3, [pid 5324] <... memfd_create resumed>) = 3 [pid 5323] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5324] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4997] getdents64(3, [pid 5324] <... mmap resumed>) = 0x7f18ca796000 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./24/binderfs") = 0 [pid 4997] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5323] <... write resumed>) = 2097152 [pid 5324] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5323] munmap(0x7f18ca796000, 2097152) = 0 [pid 5323] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5323] ioctl(4, LOOP_SET_FD, 3 [pid 5316] <... sendfile resumed>) = 1048576 [pid 5316] exit_group(0) = ? [pid 5323] <... ioctl resumed>) = 0 [pid 5323] close(3 [pid 5316] +++ exited with 0 +++ [pid 4997] <... umount2 resumed>) = 0 [pid 5324] <... write resumed>) = 2097152 [pid 5323] <... close resumed>) = 0 [pid 5323] mkdir("./file1", 0777 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5316, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5323] <... mkdir resumed>) = 0 [pid 4999] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5323] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5324] munmap(0x7f18ca796000, 2097152 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./25/binderfs", [pid 5324] <... munmap resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./25/binderfs") = 0 [pid 5324] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4999] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5324] <... openat resumed>) = 4 [ 123.299296][ T5323] loop3: detected capacity change from 0 to 4096 [pid 5324] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 4997] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./24/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./24/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./24/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./24") = 0 [pid 4997] mkdir("./25", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5324] close(3 [pid 4997] close(3 [pid 5324] <... close resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 5324] mkdir("./file1", 0777) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5324] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5325 [ 123.356273][ T5324] loop5: detected capacity change from 0 to 4096 [ 123.366384][ T5323] NILFS (loop3): invalid segment: Checksum error in segment payload ./strace-static-x86_64: Process 5325 attached [pid 5325] chdir("./25") = 0 [pid 5325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5325] setpgid(0, 0) = 0 [pid 5325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5325] write(3, "1000", 4) = 4 [pid 5325] close(3) = 0 [pid 5325] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5325] memfd_create("syzkaller", 0) = 3 [pid 5325] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 123.414283][ T5323] NILFS (loop3): trying rollback from an earlier position [ 123.428093][ T5324] NILFS (loop5): invalid segment: Checksum error in segment payload [ 123.465908][ T5324] NILFS (loop5): trying rollback from an earlier position [ 123.483668][ T5323] NILFS (loop3): recovery complete [pid 5325] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5323] <... mount resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5323] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 4999] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5323] chdir("./file1") = 0 [pid 5323] ioctl(4, LOOP_CLR_FD) = 0 [pid 5323] close(4) = 0 [pid 5323] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./25/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5323] <... open resumed>) = 4 [pid 4999] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5323] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4999] openat(AT_FDCWD, "./25/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5325] <... write resumed>) = 2097152 [pid 5323] <... open resumed>) = 5 [pid 4999] <... openat resumed>) = 4 [pid 5323] ftruncate(5, 33587195) = 0 [pid 5323] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 4999] fstat(4, [pid 5323] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 5323] <... open resumed>) = 7 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5323] sendfile(6, 7, NULL, 281474978811909 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4 [pid 5325] munmap(0x7f18ca796000, 2097152 [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./25/file1") = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5325] <... munmap resumed>) = 0 [pid 5325] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4999] close(3 [pid 5325] <... openat resumed>) = 4 [ 123.541860][ T5326] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.581041][ T5324] NILFS (loop5): recovery complete [pid 4999] <... close resumed>) = 0 [pid 5325] ioctl(4, LOOP_SET_FD, 3 [pid 4999] rmdir("./25" [pid 5325] <... ioctl resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5324] <... mount resumed>) = 0 [pid 5324] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5324] chdir("./file1") = 0 [pid 5324] ioctl(4, LOOP_CLR_FD) = 0 [pid 5324] close(4) = 0 [pid 5324] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5324] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5325] close(3 [pid 5324] ftruncate(5, 33587195 [pid 4999] mkdir("./26", 0777 [pid 5325] <... close resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5325] mkdir("./file1", 0777 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5325] <... mkdir resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5325] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [ 123.625587][ T5325] loop0: detected capacity change from 0 to 4096 [ 123.643154][ T5327] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5324] <... ftruncate resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 5324] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5324] <... open resumed>) = 6 [pid 5324] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5328 [pid 5324] <... open resumed>) = 7 [pid 5324] sendfile(6, 7, NULL, 281474978811909./strace-static-x86_64: Process 5328 attached [pid 5328] chdir("./26") = 0 [pid 5328] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5328] setpgid(0, 0) = 0 [pid 5328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5328] write(3, "1000", 4) = 4 [pid 5328] close(3) = 0 [pid 5328] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5328] memfd_create("syzkaller", 0) = 3 [pid 5328] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 123.677920][ T5325] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5328] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5318] <... sendfile resumed>) = 1048576 [ 123.736917][ T5325] NILFS (loop0): trying rollback from an earlier position [pid 5318] exit_group(0) = ? [pid 5318] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5318, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5320] <... sendfile resumed>) = 1048576 [pid 4998] fstat(3, [pid 5320] exit_group(0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5320] <... exit_group resumed>) = ? [pid 4998] getdents64(3, [pid 5320] +++ exited with 0 +++ [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5320, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 4998] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... restart_syscall resumed>) = 0 [pid 4998] lstat("./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./25/binderfs" [pid 5001] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... unlink resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 123.813391][ T5325] NILFS (loop0): recovery complete [pid 5325] <... mount resumed>) = 0 [pid 5001] lstat("./25/binderfs", [pid 5325] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5325] <... openat resumed>) = 3 [pid 5001] unlink("./25/binderfs" [pid 5325] chdir("./file1" [pid 5001] <... unlink resumed>) = 0 [pid 5325] <... chdir resumed>) = 0 [pid 5001] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5325] ioctl(4, LOOP_CLR_FD) = 0 [pid 5325] close(4 [pid 5328] <... write resumed>) = 2097152 [pid 5325] <... close resumed>) = 0 [pid 5325] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5325] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5325] ftruncate(5, 33587195) = 0 [pid 5325] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5325] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 123.860825][ T5329] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5325] sendfile(6, 7, NULL, 281474978811909 [pid 5328] munmap(0x7f18ca796000, 2097152) = 0 [pid 5328] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5328] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5328] close(3) = 0 [pid 5328] mkdir("./file1", 0777) = 0 [ 123.938889][ T5328] loop2: detected capacity change from 0 to 4096 [pid 5328] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 124.002603][ T5328] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 4998] lstat("./25/file1", [pid 5001] <... umount2 resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./25/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] lstat("./25/file1", [pid 4998] <... openat resumed>) = 4 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(4, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, [pid 5001] openat(AT_FDCWD, "./25/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./25/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./25") = 0 [pid 4998] mkdir("./26", 0777) = 0 [pid 5001] <... openat resumed>) = 4 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5001] fstat(4, [pid 4998] <... openat resumed>) = 3 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5001] getdents64(4, [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [ 124.062869][ T5328] NILFS (loop2): trying rollback from an earlier position [pid 4998] close(3 [pid 5001] getdents64(4, [pid 4998] <... close resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5330 [pid 5001] close(4./strace-static-x86_64: Process 5330 attached [pid 5330] chdir("./26") = 0 [pid 5330] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5330] setpgid(0, 0 [pid 5001] <... close resumed>) = 0 [pid 5330] <... setpgid resumed>) = 0 [pid 5330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5330] write(3, "1000", 4) = 4 [pid 5330] close(3) = 0 [pid 5330] symlink("/dev/binderfs", "./binderfs" [pid 5001] rmdir("./25/file1" [pid 5330] <... symlink resumed>) = 0 [pid 5330] memfd_create("syzkaller", 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5330] <... memfd_create resumed>) = 3 [pid 5001] getdents64(3, [pid 5330] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5330] <... mmap resumed>) = 0x7f18ca796000 [ 124.128415][ T5328] NILFS (loop2): recovery complete [pid 5001] close(3) = 0 [pid 5001] rmdir("./25") = 0 [pid 5001] mkdir("./26", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5328] <... mount resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5328] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5328] <... openat resumed>) = 3 [pid 5001] close(3 [pid 5328] chdir("./file1" [pid 5001] <... close resumed>) = 0 [pid 5328] <... chdir resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5328] ioctl(4, LOOP_CLR_FD) = 0 [pid 5328] close(4 [pid 5001] <... clone resumed>, child_tidptr=0x555556f7b690) = 5332 [pid 5328] <... close resumed>) = 0 [pid 5328] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5330] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5328] <... open resumed>) = 4 [ 124.187773][ T5331] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5328] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 ./strace-static-x86_64: Process 5332 attached [pid 5328] ftruncate(5, 33587195) = 0 [pid 5332] chdir("./26" [pid 5328] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5332] <... chdir resumed>) = 0 [pid 5328] <... open resumed>) = 6 [pid 5328] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5332] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5328] <... open resumed>) = 7 [pid 5332] <... prctl resumed>) = 0 [pid 5328] sendfile(6, 7, NULL, 281474978811909 [pid 5332] setpgid(0, 0) = 0 [pid 5332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5332] write(3, "1000", 4) = 4 [pid 5332] close(3) = 0 [pid 5332] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5332] memfd_create("syzkaller", 0) = 3 [pid 5332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5330] <... write resumed>) = 2097152 [pid 5330] munmap(0x7f18ca796000, 2097152) = 0 [pid 5330] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5330] ioctl(4, LOOP_SET_FD, 3 [ 124.373742][ T5330] loop1: detected capacity change from 0 to 4096 [pid 5332] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5330] <... ioctl resumed>) = 0 [pid 5330] close(3 [pid 5332] <... write resumed>) = 2097152 [pid 5330] <... close resumed>) = 0 [pid 5332] munmap(0x7f18ca796000, 2097152 [pid 5330] mkdir("./file1", 0777 [pid 5332] <... munmap resumed>) = 0 [pid 5330] <... mkdir resumed>) = 0 [pid 5332] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5330] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5332] <... openat resumed>) = 4 [pid 5332] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5323] <... sendfile resumed>) = 1048576 [pid 5332] close(3) = 0 [pid 5332] mkdir("./file1", 0777 [pid 5323] exit_group(0 [pid 5332] <... mkdir resumed>) = 0 [pid 5323] <... exit_group resumed>) = ? [pid 5332] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5323] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5323, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 124.476412][ T5332] loop4: detected capacity change from 0 to 4096 [ 124.491682][ T5330] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5000] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 124.533395][ T5330] NILFS (loop1): trying rollback from an earlier position [ 124.552530][ T5332] NILFS (loop4): invalid segment: Checksum error in segment payload [ 124.560847][ T5332] NILFS (loop4): trying rollback from an earlier position [ 124.575368][ T5330] NILFS (loop1): recovery complete [pid 5000] lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 124.588350][ T5332] NILFS (loop4): recovery complete [pid 5000] unlink("./26/binderfs") = 0 [pid 5000] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5330] <... mount resumed>) = 0 [pid 5330] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5330] chdir("./file1") = 0 [pid 5330] ioctl(4, LOOP_CLR_FD) = 0 [pid 5330] close(4) = 0 [pid 5330] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5330] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5330] ftruncate(5, 33587195) = 0 [pid 5330] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5330] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5330] sendfile(6, 7, NULL, 281474978811909 [pid 5332] <... mount resumed>) = 0 [pid 5332] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5332] chdir("./file1") = 0 [ 124.609164][ T5333] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.647937][ T5334] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5332] ioctl(4, LOOP_CLR_FD) = 0 [pid 5332] close(4) = 0 [pid 5332] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5332] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5332] ftruncate(5, 33587195) = 0 [pid 5332] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5332] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5332] sendfile(6, 7, NULL, 281474978811909 [pid 5324] <... sendfile resumed>) = 1048576 [pid 5324] exit_group(0) = ? [pid 5324] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5324, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 5002] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 5000] <... umount2 resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./26/binderfs") = 0 [pid 5002] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./26/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./26/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./26/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./26") = 0 [pid 5000] mkdir("./27", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5335 ./strace-static-x86_64: Process 5335 attached [pid 5335] chdir("./27") = 0 [pid 5335] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5335] setpgid(0, 0) = 0 [pid 5335] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5335] write(3, "1000", 4) = 4 [pid 5335] close(3) = 0 [pid 5335] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5335] memfd_create("syzkaller", 0) = 3 [pid 5335] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5335] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./26/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./26/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./26/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./26") = 0 [pid 5002] mkdir("./27", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5336 ./strace-static-x86_64: Process 5336 attached [pid 5336] chdir("./27") = 0 [pid 5336] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5336] setpgid(0, 0) = 0 [pid 5336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5336] write(3, "1000", 4) = 4 [pid 5336] close(3 [pid 5335] <... write resumed>) = 2097152 [pid 5325] <... sendfile resumed>) = 1048576 [pid 5336] <... close resumed>) = 0 [pid 5336] symlink("/dev/binderfs", "./binderfs" [pid 5325] exit_group(0 [pid 5336] <... symlink resumed>) = 0 [pid 5336] memfd_create("syzkaller", 0 [pid 5335] munmap(0x7f18ca796000, 2097152 [pid 5325] <... exit_group resumed>) = ? [pid 5336] <... memfd_create resumed>) = 3 [pid 5336] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5325] +++ exited with 0 +++ [pid 5335] <... munmap resumed>) = 0 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5325, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5335] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4997] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5335] <... openat resumed>) = 4 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5335] ioctl(4, LOOP_SET_FD, 3 [pid 4997] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, [pid 5336] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./25/binderfs") = 0 [pid 4997] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5335] <... ioctl resumed>) = 0 [pid 5335] close(3) = 0 [pid 5335] mkdir("./file1", 0777) = 0 [ 125.138300][ T5335] loop3: detected capacity change from 0 to 4096 [ 125.214724][ T5335] NILFS (loop3): invalid segment: Checksum error in segment payload [ 125.222839][ T5335] NILFS (loop3): trying rollback from an earlier position [pid 5335] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5336] <... write resumed>) = 2097152 [pid 5336] munmap(0x7f18ca796000, 2097152) = 0 [pid 5336] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5336] ioctl(4, LOOP_SET_FD, 3 [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5336] <... ioctl resumed>) = 0 [pid 5335] <... mount resumed>) = 0 [pid 5336] close(3 [pid 5335] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5336] <... close resumed>) = 0 [pid 5335] <... openat resumed>) = 3 [pid 4997] lstat("./25/file1", [pid 5336] mkdir("./file1", 0777 [pid 5335] chdir("./file1" [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5336] <... mkdir resumed>) = 0 [pid 5335] <... chdir resumed>) = 0 [pid 4997] umount2("./25/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5336] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5335] ioctl(4, LOOP_CLR_FD [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5335] <... ioctl resumed>) = 0 [ 125.288586][ T5335] NILFS (loop3): recovery complete [ 125.302740][ T5336] loop5: detected capacity change from 0 to 4096 [ 125.322829][ T5337] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4997] openat(AT_FDCWD, "./25/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5335] close(4 [pid 4997] <... openat resumed>) = 4 [pid 5335] <... close resumed>) = 0 [pid 4997] fstat(4, [pid 5335] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5335] <... open resumed>) = 4 [pid 5328] <... sendfile resumed>) = 1048576 [pid 4997] getdents64(4, [pid 5335] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5328] exit_group(0 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5335] <... open resumed>) = 5 [pid 5328] <... exit_group resumed>) = ? [pid 4997] getdents64(4, [pid 5335] ftruncate(5, 33587195 [pid 5328] +++ exited with 0 +++ [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5335] <... ftruncate resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5328, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 4997] close(4 [pid 5335] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4997] <... close resumed>) = 0 [pid 5335] <... open resumed>) = 6 [pid 4997] rmdir("./25/file1" [pid 5335] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4999] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... rmdir resumed>) = 0 [pid 5335] <... open resumed>) = 7 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] getdents64(3, [pid 5335] sendfile(6, 7, NULL, 281474978811909 [pid 4999] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [ 125.363221][ T5336] NILFS (loop5): invalid segment: Checksum error in segment payload [ 125.371270][ T5336] NILFS (loop5): trying rollback from an earlier position [pid 4999] <... openat resumed>) = 3 [pid 4997] close(3) = 0 [pid 4999] fstat(3, [pid 4997] rmdir("./25" [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, [pid 4997] mkdir("./26", 0777 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] <... mkdir resumed>) = 0 [pid 4999] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... openat resumed>) = 3 [pid 4999] lstat("./26/binderfs", [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] unlink("./26/binderfs" [pid 4997] close(3 [pid 4999] <... unlink resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 4999] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5338 ./strace-static-x86_64: Process 5338 attached [pid 5338] chdir("./26") = 0 [pid 5338] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5338] setpgid(0, 0) = 0 [pid 5338] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5338] write(3, "1000", 4) = 4 [pid 5338] close(3) = 0 [pid 5338] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5338] memfd_create("syzkaller", 0) = 3 [pid 5338] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 125.457993][ T5336] NILFS (loop5): recovery complete [pid 5336] <... mount resumed>) = 0 [pid 5336] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5336] chdir("./file1") = 0 [pid 5336] ioctl(4, LOOP_CLR_FD [pid 5338] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5336] <... ioctl resumed>) = 0 [pid 5336] close(4) = 0 [ 125.504582][ T5339] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5336] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5336] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5336] ftruncate(5, 33587195) = 0 [pid 5336] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5336] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5336] sendfile(6, 7, NULL, 281474978811909 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./26/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./26/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5338] <... write resumed>) = 2097152 [pid 4999] getdents64(4, [pid 5338] munmap(0x7f18ca796000, 2097152 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./26/file1") = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./26") = 0 [pid 4999] mkdir("./27", 0777) = 0 [pid 5338] <... munmap resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 5338] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 4999] <... close resumed>) = 0 [pid 5338] ioctl(4, LOOP_SET_FD, 3 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5338] <... ioctl resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5340 [pid 5338] close(3./strace-static-x86_64: Process 5340 attached ) = 0 [pid 5338] mkdir("./file1", 0777 [pid 5340] chdir("./27" [pid 5338] <... mkdir resumed>) = 0 [pid 5338] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5340] <... chdir resumed>) = 0 [pid 5340] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5340] setpgid(0, 0) = 0 [pid 5340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5340] write(3, "1000", 4) = 4 [pid 5340] close(3) = 0 [pid 5340] symlink("/dev/binderfs", "./binderfs") = 0 [ 125.704505][ T5338] loop0: detected capacity change from 0 to 4096 [pid 5332] <... sendfile resumed>) = 1048576 [pid 5330] <... sendfile resumed>) = 1048576 [pid 5340] memfd_create("syzkaller", 0 [pid 5332] exit_group(0 [pid 5330] exit_group(0) = ? [pid 5340] <... memfd_create resumed>) = 3 [pid 5332] <... exit_group resumed>) = ? [pid 5330] +++ exited with 0 +++ [pid 5340] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5332] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5330, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=28 /* 0.28 s */} --- [pid 5340] <... mmap resumed>) = 0x7f18ca796000 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5332, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=29 /* 0.29 s */} --- [pid 5001] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./26/binderfs") = 0 [pid 5001] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 125.772282][ T5338] NILFS (loop0): invalid segment: Checksum error in segment payload [ 125.780656][ T5338] NILFS (loop0): trying rollback from an earlier position [pid 4998] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5340] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] unlink("./26/binderfs") = 0 [ 125.830581][ T5338] NILFS (loop0): recovery complete [pid 4998] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5338] <... mount resumed>) = 0 [pid 5338] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5340] <... write resumed>) = 2097152 [pid 5338] <... openat resumed>) = 3 [pid 5340] munmap(0x7f18ca796000, 2097152 [pid 5338] chdir("./file1" [pid 5340] <... munmap resumed>) = 0 [pid 5338] <... chdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [ 125.881111][ T5341] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5340] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5338] ioctl(4, LOOP_CLR_FD [pid 5001] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5340] <... openat resumed>) = 4 [pid 5338] <... ioctl resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5340] ioctl(4, LOOP_SET_FD, 3 [pid 5338] close(4 [pid 5001] lstat("./26/file1", [pid 4998] <... umount2 resumed>) = 0 [pid 5340] <... ioctl resumed>) = 0 [pid 5338] <... close resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5340] close(3 [pid 5338] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5001] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5340] <... close resumed>) = 0 [pid 5338] <... open resumed>) = 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./26/file1", [pid 5340] mkdir("./file1", 0777 [pid 5338] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5340] <... mkdir resumed>) = 0 [pid 5338] <... open resumed>) = 5 [pid 5001] openat(AT_FDCWD, "./26/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5340] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5338] ftruncate(5, 33587195 [pid 5001] <... openat resumed>) = 4 [pid 4998] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5338] <... ftruncate resumed>) = 0 [pid 5001] fstat(4, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5338] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5338] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 125.956119][ T5340] loop2: detected capacity change from 0 to 4096 [pid 5338] sendfile(6, 7, NULL, 281474978811909 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] openat(AT_FDCWD, "./26/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] <... openat resumed>) = 4 [pid 5001] getdents64(4, [pid 4998] fstat(4, [pid 5001] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] close(4 [pid 4998] getdents64(4, [pid 5001] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] rmdir("./26/file1" [pid 4998] getdents64(4, [pid 5001] <... rmdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] getdents64(3, [pid 4998] close(4 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] <... close resumed>) = 0 [pid 5001] close(3 [pid 4998] rmdir("./26/file1" [pid 5001] <... close resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5001] rmdir("./26" [pid 4998] getdents64(3, [pid 5001] <... rmdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] mkdir("./27", 0777 [pid 4998] close(3 [pid 5001] <... mkdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4998] rmdir("./26" [pid 5001] <... openat resumed>) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4998] <... rmdir resumed>) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] mkdir("./27", 0777 [pid 5001] close(3) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5001] <... clone resumed>, child_tidptr=0x555556f7b690) = 5342 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5342 attached [pid 5342] chdir("./27") = 0 [pid 5342] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 126.013447][ T5340] NILFS (loop2): invalid segment: Checksum error in segment payload [ 126.045748][ T5340] NILFS (loop2): trying rollback from an earlier position [pid 4998] close(3 [pid 5342] setpgid(0, 0) = 0 [pid 4998] <... close resumed>) = 0 [pid 5342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5342] <... openat resumed>) = 3 [pid 5342] write(3, "1000", 4) = 4 [pid 5342] close(3) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5343 [pid 5342] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5342] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5343 attached ) = 3 [pid 5343] chdir("./27" [pid 5342] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5343] <... chdir resumed>) = 0 [pid 5342] <... mmap resumed>) = 0x7f18ca796000 [pid 5343] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5343] setpgid(0, 0) = 0 [pid 5343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5343] write(3, "1000", 4) = 4 [pid 5343] close(3) = 0 [pid 5343] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5343] memfd_create("syzkaller", 0) = 3 [pid 5343] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 126.135621][ T5340] NILFS (loop2): recovery complete [pid 5340] <... mount resumed>) = 0 [pid 5340] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5340] chdir("./file1") = 0 [pid 5340] ioctl(4, LOOP_CLR_FD [pid 5343] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5340] <... ioctl resumed>) = 0 [pid 5340] close(4) = 0 [pid 5342] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5340] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5340] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5340] ftruncate(5, 33587195) = 0 [ 126.174675][ T5344] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5340] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5340] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5340] sendfile(6, 7, NULL, 281474978811909 [pid 5342] <... write resumed>) = 2097152 [pid 5342] munmap(0x7f18ca796000, 2097152) = 0 [pid 5342] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5342] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5342] close(3) = 0 [pid 5343] <... write resumed>) = 2097152 [pid 5342] mkdir("./file1", 0777 [pid 5343] munmap(0x7f18ca796000, 2097152) = 0 [pid 5343] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5343] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5343] close(3) = 0 [pid 5343] mkdir("./file1", 0777) = 0 [ 126.280796][ T5342] loop4: detected capacity change from 0 to 4096 [ 126.315153][ T5343] loop1: detected capacity change from 0 to 4096 [pid 5343] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5342] <... mkdir resumed>) = 0 [ 126.347233][ T5343] NILFS (loop1): invalid segment: Checksum error in segment payload [ 126.357212][ T5343] NILFS (loop1): trying rollback from an earlier position [pid 5342] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5343] <... mount resumed>) = 0 [ 126.393861][ T5342] NILFS (loop4): invalid segment: Checksum error in segment payload [ 126.410218][ T5343] NILFS (loop1): recovery complete [ 126.422220][ T5345] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5343] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5343] chdir("./file1") = 0 [pid 5343] ioctl(4, LOOP_CLR_FD) = 0 [pid 5343] close(4) = 0 [pid 5342] <... mount resumed>) = 0 [pid 5343] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5342] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5342] chdir("./file1") = 0 [pid 5342] ioctl(4, LOOP_CLR_FD) = 0 [pid 5343] <... open resumed>) = 4 [pid 5342] close(4) = 0 [pid 5342] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5343] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5342] <... open resumed>) = 4 [pid 5343] <... open resumed>) = 5 [pid 5343] ftruncate(5, 33587195 [pid 5342] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5343] <... ftruncate resumed>) = 0 [pid 5343] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5342] <... open resumed>) = 5 [pid 5343] <... open resumed>) = 6 [pid 5343] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5342] ftruncate(5, 33587195 [pid 5343] <... open resumed>) = 7 [pid 5343] sendfile(6, 7, NULL, 281474978811909 [pid 5342] <... ftruncate resumed>) = 0 [ 126.438863][ T5342] NILFS (loop4): trying rollback from an earlier position [ 126.459058][ T5342] NILFS (loop4): recovery complete [ 126.480361][ T5346] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5342] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5342] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5342] sendfile(6, 7, NULL, 281474978811909 [pid 5335] <... sendfile resumed>) = 1048576 [pid 5335] exit_group(0) = ? [pid 5335] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5335, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- [pid 5000] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./27/binderfs") = 0 [pid 5000] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5336] <... sendfile resumed>) = 1048576 [pid 5336] exit_group(0) = ? [pid 5336] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5336, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5002] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./27/binderfs") = 0 [pid 5002] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./27/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./27/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./27/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./27") = 0 [pid 5000] mkdir("./28", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5347 ./strace-static-x86_64: Process 5347 attached [pid 5347] chdir("./28") = 0 [pid 5347] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5347] setpgid(0, 0 [pid 5002] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5347] <... setpgid resumed>) = 0 [pid 5347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5347] <... openat resumed>) = 3 [pid 5002] lstat("./27/file1", [pid 5347] write(3, "1000", 4) = 4 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5347] close(3 [pid 5002] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5347] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5347] symlink("/dev/binderfs", "./binderfs" [pid 5002] openat(AT_FDCWD, "./27/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5347] <... symlink resumed>) = 0 [pid 5002] <... openat resumed>) = 4 [pid 5347] memfd_create("syzkaller", 0 [pid 5002] fstat(4, [pid 5347] <... memfd_create resumed>) = 3 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5347] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] getdents64(4, [pid 5347] <... mmap resumed>) = 0x7f18ca796000 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./27/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./27") = 0 [pid 5002] mkdir("./28", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5348 [pid 5347] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5348 attached [pid 5348] chdir("./28") = 0 [pid 5348] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5348] setpgid(0, 0) = 0 [pid 5348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5348] write(3, "1000", 4) = 4 [pid 5348] close(3) = 0 [pid 5348] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5348] memfd_create("syzkaller", 0) = 3 [pid 5348] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5347] <... write resumed>) = 2097152 [pid 5347] munmap(0x7f18ca796000, 2097152) = 0 [pid 5347] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5347] ioctl(4, LOOP_SET_FD, 3 [pid 5348] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5347] <... ioctl resumed>) = 0 [pid 5347] close(3) = 0 [pid 5347] mkdir("./file1", 0777) = 0 [ 127.115216][ T5347] loop3: detected capacity change from 0 to 4096 [pid 5347] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5348] <... write resumed>) = 2097152 [pid 5348] munmap(0x7f18ca796000, 2097152) = 0 [pid 5348] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 127.171794][ T5347] NILFS (loop3): invalid segment: Checksum error in segment payload [ 127.193572][ T5347] NILFS (loop3): trying rollback from an earlier position [pid 5348] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5348] close(3) = 0 [pid 5348] mkdir("./file1", 0777) = 0 [pid 5348] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5338] <... sendfile resumed>) = 1048576 [pid 5338] exit_group(0) = ? [ 127.234178][ T5348] loop5: detected capacity change from 0 to 4096 [pid 5338] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5338, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 4997] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4997] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 127.284735][ T5348] NILFS (loop5): invalid segment: Checksum error in segment payload [ 127.294371][ T5348] NILFS (loop5): trying rollback from an earlier position [ 127.304357][ T5347] NILFS (loop3): recovery complete [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5347] <... mount resumed>) = 0 [pid 4997] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5347] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5347] <... openat resumed>) = 3 [pid 4997] lstat("./26/binderfs", [pid 5347] chdir("./file1" [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5347] <... chdir resumed>) = 0 [pid 4997] unlink("./26/binderfs" [pid 5347] ioctl(4, LOOP_CLR_FD) = 0 [pid 4997] <... unlink resumed>) = 0 [pid 5347] close(4 [pid 4997] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5348] <... mount resumed>) = 0 [pid 5347] <... close resumed>) = 0 [pid 5348] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5348] chdir("./file1" [pid 5347] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5348] <... chdir resumed>) = 0 [pid 5348] ioctl(4, LOOP_CLR_FD [pid 5347] <... open resumed>) = 4 [pid 5348] <... ioctl resumed>) = 0 [pid 5347] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5348] close(4 [pid 5347] <... open resumed>) = 5 [pid 5348] <... close resumed>) = 0 [pid 5347] ftruncate(5, 33587195 [pid 5348] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5347] <... ftruncate resumed>) = 0 [pid 5348] <... open resumed>) = 4 [pid 5347] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5348] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5347] <... open resumed>) = 6 [pid 5348] <... open resumed>) = 5 [pid 5347] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5348] ftruncate(5, 33587195 [pid 5347] <... open resumed>) = 7 [ 127.332181][ T5349] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.343261][ T5348] NILFS (loop5): recovery complete [ 127.358934][ T5350] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5348] <... ftruncate resumed>) = 0 [pid 5347] sendfile(6, 7, NULL, 281474978811909 [pid 5348] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5348] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5340] <... sendfile resumed>) = 1048576 [pid 5348] <... open resumed>) = 7 [pid 5340] exit_group(0 [pid 5348] sendfile(6, 7, NULL, 281474978811909 [pid 5340] <... exit_group resumed>) = ? [pid 5340] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5340, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 4999] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./27/binderfs") = 0 [pid 4999] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./26/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./26/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./26/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, [pid 5343] <... sendfile resumed>) = 1048576 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5343] exit_group(0 [pid 4997] getdents64(4, [pid 5343] <... exit_group resumed>) = ? [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5343] +++ exited with 0 +++ [pid 4997] close(4) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5343, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 4997] rmdir("./26/file1" [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 4997] <... rmdir resumed>) = 0 [pid 4998] <... restart_syscall resumed>) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3 [pid 4998] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] rmdir("./26" [pid 4998] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... rmdir resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 4997] mkdir("./27", 0777 [pid 5342] <... sendfile resumed>) = 1048576 [pid 4998] fstat(3, [pid 4997] <... mkdir resumed>) = 0 [pid 5342] exit_group(0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5342] <... exit_group resumed>) = ? [pid 4998] getdents64(3, [pid 4997] <... openat resumed>) = 3 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5342] +++ exited with 0 +++ [pid 4998] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5342, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] close(3 [pid 4998] lstat("./27/binderfs", [pid 4997] <... close resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] unlink("./27/binderfs") = 0 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5351 [pid 4998] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5351 attached [pid 5001] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5351] chdir("./27" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5351] <... chdir resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5351] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] <... openat resumed>) = 3 [pid 5351] <... prctl resumed>) = 0 [pid 5001] fstat(3, [pid 5351] setpgid(0, 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5351] <... setpgid resumed>) = 0 [pid 5001] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5351] <... openat resumed>) = 3 [pid 5001] lstat("./27/binderfs", [pid 4999] <... umount2 resumed>) = 0 [pid 5351] write(3, "1000", 4 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5351] <... write resumed>) = 4 [pid 5001] unlink("./27/binderfs" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5351] close(3 [pid 5001] <... unlink resumed>) = 0 [pid 5351] <... close resumed>) = 0 [pid 5001] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] lstat("./27/file1", [pid 5351] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5351] <... symlink resumed>) = 0 [pid 4999] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5351] memfd_create("syzkaller", 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5351] <... memfd_create resumed>) = 3 [pid 4999] openat(AT_FDCWD, "./27/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5351] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] <... openat resumed>) = 4 [pid 5351] <... mmap resumed>) = 0x7f18ca796000 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./27/file1") = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./27") = 0 [pid 4999] mkdir("./28", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5352 ./strace-static-x86_64: Process 5352 attached [pid 5352] chdir("./28") = 0 [pid 5352] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5352] setpgid(0, 0) = 0 [pid 5352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5352] write(3, "1000", 4) = 4 [pid 5352] close(3) = 0 [pid 5352] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5352] memfd_create("syzkaller", 0) = 3 [pid 5352] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5351] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5352] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./27/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./27/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5351] <... write resumed>) = 2097152 [pid 4998] fstat(4, [pid 5351] munmap(0x7f18ca796000, 2097152 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5351] <... munmap resumed>) = 0 [pid 4998] getdents64(4, [pid 5351] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5001] <... umount2 resumed>) = 0 [pid 5351] <... openat resumed>) = 4 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5351] ioctl(4, LOOP_SET_FD, 3 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] close(4 [pid 5351] <... ioctl resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5351] close(3 [pid 4998] rmdir("./27/file1" [pid 5351] <... close resumed>) = 0 [pid 5351] mkdir("./file1", 0777 [pid 4998] <... rmdir resumed>) = 0 [pid 5351] <... mkdir resumed>) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./27/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5351] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5001] openat(AT_FDCWD, "./27/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] close(3 [pid 5352] <... write resumed>) = 2097152 [pid 5001] <... openat resumed>) = 4 [pid 4998] <... close resumed>) = 0 [pid 5001] fstat(4, [pid 4998] rmdir("./27" [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5352] munmap(0x7f18ca796000, 2097152 [pid 5001] getdents64(4, [pid 4998] <... rmdir resumed>) = 0 [pid 5352] <... munmap resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] mkdir("./28", 0777 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5352] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5001] close(4 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5352] <... openat resumed>) = 4 [pid 5001] <... close resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5352] ioctl(4, LOOP_SET_FD, 3 [pid 5001] rmdir("./27/file1" [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5001] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] rmdir("./27" [pid 4998] close(3 [pid 5001] <... rmdir resumed>) = 0 [ 127.951914][ T5351] loop0: detected capacity change from 0 to 4096 [ 127.991171][ T5352] loop2: detected capacity change from 0 to 4096 [pid 4998] <... close resumed>) = 0 [pid 5001] mkdir("./28", 0777 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5353 attached [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5353] chdir("./28" [pid 5001] <... openat resumed>) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5354 [pid 5353] <... chdir resumed>) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5353 [pid 5353] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5352] <... ioctl resumed>) = 0 [pid 5352] close(3./strace-static-x86_64: Process 5354 attached ) = 0 [pid 5354] chdir("./28" [pid 5353] setpgid(0, 0 [pid 5352] mkdir("./file1", 0777 [pid 5354] <... chdir resumed>) = 0 [pid 5353] <... setpgid resumed>) = 0 [pid 5352] <... mkdir resumed>) = 0 [pid 5354] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5352] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5354] <... prctl resumed>) = 0 [ 128.014622][ T5351] NILFS (loop0): invalid segment: Checksum error in segment payload [ 128.026789][ T5351] NILFS (loop0): trying rollback from an earlier position [pid 5354] setpgid(0, 0 [pid 5353] <... openat resumed>) = 3 [pid 5354] <... setpgid resumed>) = 0 [pid 5353] write(3, "1000", 4 [pid 5354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5353] <... write resumed>) = 4 [pid 5354] <... openat resumed>) = 3 [pid 5353] close(3 [pid 5354] write(3, "1000", 4 [pid 5353] <... close resumed>) = 0 [pid 5354] <... write resumed>) = 4 [pid 5353] symlink("/dev/binderfs", "./binderfs" [pid 5354] close(3 [pid 5353] <... symlink resumed>) = 0 [pid 5354] <... close resumed>) = 0 [pid 5353] memfd_create("syzkaller", 0 [pid 5354] symlink("/dev/binderfs", "./binderfs" [pid 5353] <... memfd_create resumed>) = 3 [pid 5354] <... symlink resumed>) = 0 [pid 5353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5354] memfd_create("syzkaller", 0 [pid 5353] <... mmap resumed>) = 0x7f18ca796000 [pid 5354] <... memfd_create resumed>) = 3 [ 128.060914][ T5352] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5354] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5354] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 128.103839][ T5352] NILFS (loop2): trying rollback from an earlier position [ 128.124396][ T5352] NILFS (loop2): recovery complete [ 128.134718][ T5351] NILFS (loop0): recovery complete [pid 5353] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5352] <... mount resumed>) = 0 [pid 5352] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5352] chdir("./file1") = 0 [pid 5352] ioctl(4, LOOP_CLR_FD [pid 5351] <... mount resumed>) = 0 [pid 5352] <... ioctl resumed>) = 0 [pid 5351] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5352] close(4 [pid 5351] <... openat resumed>) = 3 [pid 5352] <... close resumed>) = 0 [pid 5351] chdir("./file1" [pid 5352] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5351] <... chdir resumed>) = 0 [pid 5352] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5351] ioctl(4, LOOP_CLR_FD [pid 5352] <... open resumed>) = 5 [pid 5351] <... ioctl resumed>) = 0 [ 128.154566][ T5355] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.168576][ T5356] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5352] ftruncate(5, 33587195 [pid 5351] close(4 [pid 5352] <... ftruncate resumed>) = 0 [pid 5351] <... close resumed>) = 0 [pid 5352] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5351] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5352] <... open resumed>) = 6 [pid 5351] <... open resumed>) = 4 [pid 5352] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5351] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5352] <... open resumed>) = 7 [pid 5351] <... open resumed>) = 5 [pid 5352] sendfile(6, 7, NULL, 281474978811909 [pid 5351] ftruncate(5, 33587195) = 0 [pid 5351] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5353] <... write resumed>) = 2097152 [pid 5351] <... open resumed>) = 6 [pid 5353] munmap(0x7f18ca796000, 2097152 [pid 5351] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5351] sendfile(6, 7, NULL, 281474978811909 [pid 5353] <... munmap resumed>) = 0 [pid 5353] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5353] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5353] close(3) = 0 [pid 5353] mkdir("./file1", 0777) = 0 [pid 5353] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5354] <... write resumed>) = 2097152 [ 128.285029][ T5353] loop1: detected capacity change from 0 to 4096 [pid 5354] munmap(0x7f18ca796000, 2097152) = 0 [pid 5354] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5354] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5354] close(3) = 0 [pid 5354] mkdir("./file1", 0777 [pid 5348] <... sendfile resumed>) = 1048576 [pid 5354] <... mkdir resumed>) = 0 [pid 5348] exit_group(0 [pid 5354] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5348] <... exit_group resumed>) = ? [pid 5348] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5348, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [ 128.365194][ T5354] loop4: detected capacity change from 0 to 4096 [ 128.367132][ T5353] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5002] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./28/binderfs") = 0 [ 128.405965][ T5354] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5002] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5347] <... sendfile resumed>) = 1048576 [pid 5347] exit_group(0) = ? [pid 5347] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5347, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5000] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./28/binderfs") = 0 [ 128.460885][ T5354] NILFS (loop4): trying rollback from an earlier position [ 128.472644][ T5353] NILFS (loop1): trying rollback from an earlier position [pid 5000] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = 0 [pid 5354] <... mount resumed>) = 0 [pid 5354] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5002] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5354] chdir("./file1") = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5354] ioctl(4, LOOP_CLR_FD [ 128.536710][ T5354] NILFS (loop4): recovery complete [ 128.541982][ T5353] NILFS (loop1): recovery complete [ 128.562562][ T5358] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] lstat("./28/file1", [pid 5354] <... ioctl resumed>) = 0 [pid 5353] <... mount resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5354] close(4 [pid 5353] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5002] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5354] <... close resumed>) = 0 [pid 5354] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5353] <... openat resumed>) = 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5354] <... open resumed>) = 4 [pid 5353] chdir("./file1" [pid 5002] openat(AT_FDCWD, "./28/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5354] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5353] <... chdir resumed>) = 0 [pid 5002] <... openat resumed>) = 4 [pid 5354] <... open resumed>) = 5 [pid 5353] ioctl(4, LOOP_CLR_FD [pid 5002] fstat(4, [pid 5354] ftruncate(5, 33587195 [pid 5353] <... ioctl resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5354] <... ftruncate resumed>) = 0 [pid 5353] close(4 [pid 5002] getdents64(4, [pid 5354] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5353] <... close resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5354] <... open resumed>) = 6 [pid 5353] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5002] getdents64(4, [pid 5354] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5353] <... open resumed>) = 4 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5354] <... open resumed>) = 7 [pid 5353] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] close(4 [pid 5354] sendfile(6, 7, NULL, 281474978811909 [pid 5353] <... open resumed>) = 5 [pid 5002] <... close resumed>) = 0 [pid 5353] ftruncate(5, 33587195 [pid 5002] rmdir("./28/file1" [pid 5353] <... ftruncate resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [ 128.585636][ T5357] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5353] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] getdents64(3, [pid 5353] <... open resumed>) = 6 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5353] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5002] close(3 [pid 5353] <... open resumed>) = 7 [pid 5353] sendfile(6, 7, NULL, 281474978811909 [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./28") = 0 [pid 5002] mkdir("./29", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5359 attached , child_tidptr=0x555556f7b690) = 5359 [pid 5000] <... umount2 resumed>) = 0 [pid 5359] chdir("./29" [pid 5000] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5359] <... chdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5359] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] lstat("./28/file1", [pid 5359] <... prctl resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5359] setpgid(0, 0 [pid 5000] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5359] <... setpgid resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5359] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] openat(AT_FDCWD, "./28/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5359] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 4 [pid 5359] write(3, "1000", 4) = 4 [pid 5000] fstat(4, [pid 5359] close(3 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5359] <... close resumed>) = 0 [pid 5000] getdents64(4, [pid 5359] symlink("/dev/binderfs", "./binderfs" [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5359] <... symlink resumed>) = 0 [pid 5000] getdents64(4, [pid 5359] memfd_create("syzkaller", 0 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5359] <... memfd_create resumed>) = 3 [pid 5000] close(4 [pid 5359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5000] <... close resumed>) = 0 [pid 5000] rmdir("./28/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./28") = 0 [pid 5000] mkdir("./29", 0777 [pid 5359] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... mkdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5359] <... write resumed>) = 2097152 [pid 5000] <... openat resumed>) = 3 [pid 5359] munmap(0x7f18ca796000, 2097152 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5359] <... munmap resumed>) = 0 [pid 5000] close(3 [pid 5359] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] <... close resumed>) = 0 [pid 5359] <... openat resumed>) = 4 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5359] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5360 ./strace-static-x86_64: Process 5360 attached [pid 5359] <... ioctl resumed>) = 0 [pid 5360] chdir("./29" [pid 5359] close(3 [pid 5360] <... chdir resumed>) = 0 [pid 5359] <... close resumed>) = 0 [pid 5360] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5359] mkdir("./file1", 0777 [pid 5360] <... prctl resumed>) = 0 [pid 5359] <... mkdir resumed>) = 0 [pid 5360] setpgid(0, 0 [pid 5359] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5360] <... setpgid resumed>) = 0 [pid 5360] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 128.865129][ T5359] loop5: detected capacity change from 0 to 4096 [pid 5360] write(3, "1000", 4) = 4 [pid 5360] close(3) = 0 [pid 5360] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5360] memfd_create("syzkaller", 0) = 3 [pid 5360] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 128.915471][ T5359] NILFS (loop5): invalid segment: Checksum error in segment payload [ 128.929035][ T5359] NILFS (loop5): trying rollback from an earlier position [ 129.011307][ T5359] NILFS (loop5): recovery complete [pid 5360] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5359] <... mount resumed>) = 0 [pid 5359] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5359] chdir("./file1") = 0 [pid 5359] ioctl(4, LOOP_CLR_FD) = 0 [pid 5359] close(4) = 0 [pid 5359] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5359] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5359] ftruncate(5, 33587195) = 0 [pid 5359] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5359] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 129.050953][ T5361] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5359] sendfile(6, 7, NULL, 281474978811909 [pid 5360] <... write resumed>) = 2097152 [pid 5360] munmap(0x7f18ca796000, 2097152) = 0 [pid 5360] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5360] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5360] close(3) = 0 [pid 5360] mkdir("./file1", 0777) = 0 [ 129.168856][ T5360] loop3: detected capacity change from 0 to 4096 [ 129.235723][ T5360] NILFS (loop3): invalid segment: Checksum error in segment payload [ 129.276995][ T5360] NILFS (loop3): trying rollback from an earlier position [pid 5360] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5352] <... sendfile resumed>) = 1048576 [pid 5351] <... sendfile resumed>) = 1048576 [pid 5352] exit_group(0 [pid 5351] exit_group(0 [pid 5360] <... mount resumed>) = 0 [pid 5352] <... exit_group resumed>) = ? [pid 5351] <... exit_group resumed>) = ? [pid 5360] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5352] +++ exited with 0 +++ [pid 5360] <... openat resumed>) = 3 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5352, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5360] chdir("./file1") = 0 [pid 5351] +++ exited with 0 +++ [pid 5360] ioctl(4, LOOP_CLR_FD [pid 4999] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5351, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5360] <... ioctl resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5360] close(4 [pid 4999] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5360] <... close resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5360] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4999] fstat(3, [pid 5360] <... open resumed>) = 4 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5360] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4999] getdents64(3, [pid 4997] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5360] <... open resumed>) = 5 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 129.372301][ T5360] NILFS (loop3): recovery complete [ 129.381361][ T5362] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5360] ftruncate(5, 33587195 [pid 4999] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5360] <... ftruncate resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5360] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4999] lstat("./28/binderfs", [pid 4997] <... openat resumed>) = 3 [pid 5360] <... open resumed>) = 6 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] fstat(3, [pid 5360] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4999] unlink("./28/binderfs" [pid 5360] <... open resumed>) = 7 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5360] sendfile(6, 7, NULL, 281474978811909 [pid 4999] <... unlink resumed>) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./27/binderfs") = 0 [pid 4997] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5354] <... sendfile resumed>) = 1048576 [pid 5354] exit_group(0) = ? [pid 5354] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5354, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./28/binderfs") = 0 [pid 5001] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./27/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./27/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./27/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./27/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./27") = 0 [pid 4997] mkdir("./28", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5363 [pid 4999] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5363 attached [pid 5363] chdir("./28") = 0 [pid 5363] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5363] <... prctl resumed>) = 0 [pid 5363] setpgid(0, 0) = 0 [pid 5363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5363] <... openat resumed>) = 3 [pid 5363] write(3, "1000", 4 [pid 4999] lstat("./28/file1", [pid 5363] <... write resumed>) = 4 [pid 5363] close(3) = 0 [pid 5363] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5363] memfd_create("syzkaller", 0) = 3 [pid 5363] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./28/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./28/file1") = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./28") = 0 [pid 4999] mkdir("./29", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5353] <... sendfile resumed>) = 1048576 [pid 4999] <... openat resumed>) = 3 [pid 5353] exit_group(0 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5353] <... exit_group resumed>) = ? [pid 4999] close(3 [pid 5353] +++ exited with 0 +++ [pid 4999] <... close resumed>) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5353, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5363] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5364 ./strace-static-x86_64: Process 5364 attached [pid 5364] chdir("./29" [pid 4998] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5364] <... chdir resumed>) = 0 [pid 5364] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5364] <... prctl resumed>) = 0 [pid 5364] setpgid(0, 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5364] <... setpgid resumed>) = 0 [pid 5001] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5364] <... openat resumed>) = 3 [pid 5001] lstat("./28/file1", [pid 4998] <... openat resumed>) = 3 [pid 5364] write(3, "1000", 4 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5364] <... write resumed>) = 4 [pid 5001] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] fstat(3, [pid 5364] close(3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5364] <... close resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./28/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] getdents64(3, [pid 5364] symlink("/dev/binderfs", "./binderfs" [pid 5001] <... openat resumed>) = 4 [pid 5364] <... symlink resumed>) = 0 [pid 5001] fstat(4, [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5364] memfd_create("syzkaller", 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5364] <... memfd_create resumed>) = 3 [pid 5001] getdents64(4, [pid 5364] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5364] <... mmap resumed>) = 0x7f18ca796000 [pid 5001] getdents64(4, [pid 5363] <... write resumed>) = 2097152 [pid 5001] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] lstat("./28/binderfs", [pid 5001] close(4) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] rmdir("./28/file1" [pid 4998] unlink("./28/binderfs" [pid 5001] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, [pid 4998] <... unlink resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5363] munmap(0x7f18ca796000, 2097152 [pid 5001] close(3 [pid 5363] <... munmap resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5363] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5001] rmdir("./28" [pid 5363] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... rmdir resumed>) = 0 [pid 5001] mkdir("./29", 0777) = 0 [pid 5364] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5363] <... ioctl resumed>) = 0 [pid 5363] close(3 [pid 5001] <... openat resumed>) = 3 [pid 5363] <... close resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5363] mkdir("./file1", 0777) = 0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5363] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [ 129.872431][ T5363] loop0: detected capacity change from 0 to 4096 [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5365 ./strace-static-x86_64: Process 5365 attached [pid 5365] chdir("./29") = 0 [pid 5365] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5364] <... write resumed>) = 2097152 [pid 4998] <... umount2 resumed>) = 0 [pid 5365] <... prctl resumed>) = 0 [pid 5364] munmap(0x7f18ca796000, 2097152 [pid 4998] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5365] setpgid(0, 0) = 0 [pid 5364] <... munmap resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5364] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] lstat("./28/file1", [pid 5365] <... openat resumed>) = 3 [pid 5364] <... openat resumed>) = 4 [pid 5365] write(3, "1000", 4 [pid 5364] ioctl(4, LOOP_SET_FD, 3 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5365] <... write resumed>) = 4 [pid 5365] close(3 [pid 5364] <... ioctl resumed>) = 0 [pid 4998] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5365] <... close resumed>) = 0 [pid 5364] close(3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5365] symlink("/dev/binderfs", "./binderfs" [pid 5364] <... close resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./28/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5365] <... symlink resumed>) = 0 [pid 5364] mkdir("./file1", 0777 [pid 5365] memfd_create("syzkaller", 0 [pid 4998] <... openat resumed>) = 4 [pid 5365] <... memfd_create resumed>) = 3 [pid 4998] fstat(4, [pid 5365] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5365] <... mmap resumed>) = 0x7f18ca796000 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./28/file1" [pid 5364] <... mkdir resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5364] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./28") = 0 [pid 4998] mkdir("./29", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5365] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5366 [ 129.963479][ T5363] NILFS (loop0): invalid segment: Checksum error in segment payload [ 129.971540][ T5363] NILFS (loop0): trying rollback from an earlier position [ 129.983306][ T5364] loop2: detected capacity change from 0 to 4096 ./strace-static-x86_64: Process 5366 attached [pid 5366] chdir("./29") = 0 [pid 5366] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5366] setpgid(0, 0) = 0 [ 130.053261][ T5364] NILFS (loop2): invalid segment: Checksum error in segment payload [ 130.063662][ T5364] NILFS (loop2): trying rollback from an earlier position [pid 5366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5366] write(3, "1000", 4) = 4 [pid 5366] close(3) = 0 [pid 5366] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5366] memfd_create("syzkaller", 0) = 3 [pid 5366] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5365] <... write resumed>) = 2097152 [pid 5365] munmap(0x7f18ca796000, 2097152 [pid 5359] <... sendfile resumed>) = 1048576 [pid 5359] exit_group(0) = ? [pid 5359] +++ exited with 0 +++ [pid 5365] <... munmap resumed>) = 0 [pid 5364] <... mount resumed>) = 0 [ 130.098835][ T5363] NILFS (loop0): recovery complete [ 130.100005][ T5364] NILFS (loop2): recovery complete [ 130.134181][ T5368] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5359, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5366] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5365] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5363] <... mount resumed>) = 0 [pid 5365] <... openat resumed>) = 4 [pid 5364] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5363] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5365] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5364] <... openat resumed>) = 3 [pid 5363] <... openat resumed>) = 3 [pid 5365] close(3 [pid 5364] chdir("./file1" [pid 5363] chdir("./file1" [pid 5365] <... close resumed>) = 0 [pid 5002] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5365] mkdir("./file1", 0777 [pid 5364] <... chdir resumed>) = 0 [pid 5363] <... chdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5365] <... mkdir resumed>) = 0 [pid 5364] ioctl(4, LOOP_CLR_FD [pid 5363] ioctl(4, LOOP_CLR_FD [pid 5002] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5365] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5364] <... ioctl resumed>) = 0 [pid 5363] <... ioctl resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5364] close(4 [pid 5363] close(4 [pid 5002] fstat(3, [pid 5366] <... write resumed>) = 2097152 [pid 5364] <... close resumed>) = 0 [pid 5363] <... close resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5366] munmap(0x7f18ca796000, 2097152 [pid 5364] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5363] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5002] getdents64(3, [pid 5364] <... open resumed>) = 4 [pid 5363] <... open resumed>) = 4 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [ 130.149987][ T5367] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.164965][ T5365] loop4: detected capacity change from 0 to 4096 [pid 5366] <... munmap resumed>) = 0 [pid 5364] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5363] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5363] <... open resumed>) = 5 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5363] ftruncate(5, 33587195 [pid 5002] lstat("./29/binderfs", [pid 5366] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5364] <... open resumed>) = 5 [pid 5363] <... ftruncate resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5366] <... openat resumed>) = 4 [pid 5364] ftruncate(5, 33587195 [pid 5363] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] unlink("./29/binderfs" [pid 5366] ioctl(4, LOOP_SET_FD, 3 [pid 5364] <... ftruncate resumed>) = 0 [pid 5363] <... open resumed>) = 6 [pid 5002] <... unlink resumed>) = 0 [pid 5366] <... ioctl resumed>) = 0 [pid 5364] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5363] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5002] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5366] close(3 [pid 5364] <... open resumed>) = 6 [pid 5366] <... close resumed>) = 0 [pid 5364] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5363] <... open resumed>) = 7 [pid 5366] mkdir("./file1", 0777 [pid 5364] <... open resumed>) = 7 [pid 5363] sendfile(6, 7, NULL, 281474978811909 [pid 5366] <... mkdir resumed>) = 0 [pid 5364] sendfile(6, 7, NULL, 281474978811909 [ 130.230997][ T5366] loop1: detected capacity change from 0 to 4096 [ 130.231577][ T5365] NILFS (loop4): invalid segment: Checksum error in segment payload [ 130.279732][ T5365] NILFS (loop4): trying rollback from an earlier position [ 130.298589][ T5366] NILFS (loop1): invalid segment: Checksum error in segment payload [ 130.310603][ T5365] NILFS (loop4): recovery complete [pid 5366] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5365] <... mount resumed>) = 0 [pid 5365] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5365] chdir("./file1") = 0 [pid 5365] ioctl(4, LOOP_CLR_FD) = 0 [pid 5365] close(4) = 0 [pid 5365] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5365] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5365] ftruncate(5, 33587195) = 0 [pid 5365] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [ 130.338821][ T5366] NILFS (loop1): trying rollback from an earlier position [ 130.342077][ T5369] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5365] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5002] <... umount2 resumed>) = 0 [pid 5365] sendfile(6, 7, NULL, 281474978811909 [pid 5002] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./29/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./29/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./29/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [ 130.441100][ T5366] NILFS (loop1): recovery complete [pid 5002] rmdir("./29" [pid 5360] <... sendfile resumed>) = 1048576 [pid 5002] <... rmdir resumed>) = 0 [pid 5360] exit_group(0 [pid 5002] mkdir("./30", 0777 [pid 5366] <... mount resumed>) = 0 [pid 5360] <... exit_group resumed>) = ? [pid 5002] <... mkdir resumed>) = 0 [pid 5366] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5360] +++ exited with 0 +++ [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5366] <... openat resumed>) = 3 [pid 5002] <... openat resumed>) = 3 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5360, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5366] chdir("./file1" [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 5366] <... chdir resumed>) = 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... restart_syscall resumed>) = 0 [pid 5366] ioctl(4, LOOP_CLR_FD [pid 5002] close(3 [pid 5366] <... ioctl resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5366] close(4) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5366] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5000] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5366] <... open resumed>) = 4 [pid 5366] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5371 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5366] <... open resumed>) = 5 [pid 5000] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5366] ftruncate(5, 33587195 [pid 5000] <... openat resumed>) = 3 [pid 5366] <... ftruncate resumed>) = 0 [pid 5000] fstat(3, [pid 5366] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 130.496489][ T5370] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5366] <... open resumed>) = 6 [pid 5000] getdents64(3, [pid 5366] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5366] <... open resumed>) = 7 [pid 5000] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5366] sendfile(6, 7, NULL, 281474978811909 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./29/binderfs") = 0 [pid 5000] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5371 attached [pid 5371] chdir("./30") = 0 [pid 5371] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5371] setpgid(0, 0) = 0 [pid 5371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5371] write(3, "1000", 4) = 4 [pid 5371] close(3) = 0 [pid 5371] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5371] memfd_create("syzkaller", 0) = 3 [pid 5371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5371] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5371] munmap(0x7f18ca796000, 2097152) = 0 [pid 5371] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5371] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5371] close(3 [pid 5000] <... umount2 resumed>) = 0 [pid 5371] <... close resumed>) = 0 [pid 5000] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5371] mkdir("./file1", 0777 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5371] <... mkdir resumed>) = 0 [pid 5371] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5000] lstat("./29/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./29/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 130.787728][ T5371] loop5: detected capacity change from 0 to 4096 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./29/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./29") = 0 [pid 5000] mkdir("./30", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5372 [ 130.858254][ T5371] NILFS (loop5): invalid segment: Checksum error in segment payload [ 130.895425][ T5371] NILFS (loop5): trying rollback from an earlier position ./strace-static-x86_64: Process 5372 attached [pid 5372] chdir("./30") = 0 [pid 5372] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5372] setpgid(0, 0) = 0 [pid 5372] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5372] write(3, "1000", 4) = 4 [pid 5372] close(3) = 0 [pid 5372] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5372] memfd_create("syzkaller", 0) = 3 [pid 5372] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 130.993177][ T5371] NILFS (loop5): recovery complete [pid 5372] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5371] <... mount resumed>) = 0 [pid 5371] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5371] chdir("./file1") = 0 [pid 5371] ioctl(4, LOOP_CLR_FD) = 0 [pid 5371] close(4) = 0 [ 131.023033][ T5373] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5371] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5372] <... write resumed>) = 2097152 [pid 5371] <... open resumed>) = 4 [pid 5371] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5371] ftruncate(5, 33587195) = 0 [pid 5371] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5371] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5371] sendfile(6, 7, NULL, 281474978811909 [pid 5372] munmap(0x7f18ca796000, 2097152) = 0 [pid 5372] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5372] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5372] close(3) = 0 [pid 5372] mkdir("./file1", 0777) = 0 [ 131.147817][ T5372] loop3: detected capacity change from 0 to 4096 [pid 5372] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5364] <... sendfile resumed>) = 1048576 [pid 5364] exit_group(0) = ? [pid 5364] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5364, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 4999] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 131.219765][ T5372] NILFS (loop3): invalid segment: Checksum error in segment payload [ 131.249608][ T5372] NILFS (loop3): trying rollback from an earlier position [pid 4999] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5363] <... sendfile resumed>) = 1048576 [pid 4999] <... openat resumed>) = 3 [pid 4999] fstat(3, [pid 5363] exit_group(0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5363] <... exit_group resumed>) = ? [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./29/binderfs" [pid 5363] +++ exited with 0 +++ [pid 4999] <... unlink resumed>) = 0 [ 131.326280][ T5372] NILFS (loop3): recovery complete [pid 4999] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5363, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5372] <... mount resumed>) = 0 [pid 5372] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5372] chdir("./file1") = 0 [pid 5372] ioctl(4, LOOP_CLR_FD [pid 4997] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5372] <... ioctl resumed>) = 0 [pid 5372] close(4) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5372] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4997] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5372] <... open resumed>) = 4 [pid 4997] fstat(3, [pid 5372] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, [pid 5372] <... open resumed>) = 5 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./28/binderfs", [pid 5372] ftruncate(5, 33587195 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5372] <... ftruncate resumed>) = 0 [pid 5372] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4997] unlink("./28/binderfs" [pid 5372] <... open resumed>) = 6 [pid 5372] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4997] <... unlink resumed>) = 0 [pid 5372] <... open resumed>) = 7 [pid 5372] sendfile(6, 7, NULL, 281474978811909 [ 131.349161][ T5374] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4997] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5365] <... sendfile resumed>) = 1048576 [pid 5365] exit_group(0) = ? [pid 5365] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5365, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5001] unlink("./29/binderfs") = 0 [pid 4999] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./29/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./29/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./29/file1") = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./29") = 0 [pid 4999] mkdir("./30", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5375 ./strace-static-x86_64: Process 5375 attached [pid 4997] <... umount2 resumed>) = 0 [pid 5375] chdir("./30" [pid 4997] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5375] <... chdir resumed>) = 0 [pid 5375] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5375] <... prctl resumed>) = 0 [pid 5375] setpgid(0, 0 [pid 4997] lstat("./28/file1", [pid 5375] <... setpgid resumed>) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5375] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4997] umount2("./28/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5375] <... openat resumed>) = 3 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5375] write(3, "1000", 4 [pid 4997] openat(AT_FDCWD, "./28/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5375] <... write resumed>) = 4 [pid 5375] close(3 [pid 5366] <... sendfile resumed>) = 1048576 [pid 4997] <... openat resumed>) = 4 [pid 5375] <... close resumed>) = 0 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5375] symlink("/dev/binderfs", "./binderfs" [pid 4997] getdents64(4, [pid 5375] <... symlink resumed>) = 0 [pid 5366] exit_group(0 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5375] memfd_create("syzkaller", 0 [pid 5366] <... exit_group resumed>) = ? [pid 5375] <... memfd_create resumed>) = 3 [pid 5366] +++ exited with 0 +++ [pid 4997] getdents64(4, [pid 5375] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5366, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5375] <... mmap resumed>) = 0x7f18ca796000 [pid 4997] close(4 [pid 5001] <... umount2 resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 4998] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] rmdir("./28/file1" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... rmdir resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 4997] getdents64(3, [pid 4998] fstat(3, [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] close(3 [pid 4998] getdents64(3, [pid 4997] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] rmdir("./28" [pid 4998] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... rmdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] mkdir("./29", 0777 [pid 4998] lstat("./29/binderfs", [pid 5001] lstat("./29/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] <... mkdir resumed>) = 0 [pid 4998] unlink("./29/binderfs" [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4998] <... unlink resumed>) = 0 [pid 4998] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... openat resumed>) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] close(3) = 0 [pid 5001] openat(AT_FDCWD, "./29/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./29/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./29" [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... rmdir resumed>) = 0 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5376 [pid 5001] mkdir("./30", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5376 attached [pid 5376] chdir("./29") = 0 [pid 5376] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5376] setpgid(0, 0 [pid 5001] <... clone resumed>, child_tidptr=0x555556f7b690) = 5377 [pid 5376] <... setpgid resumed>) = 0 [pid 5376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5376] write(3, "1000", 4) = 4 [pid 5376] close(3) = 0 [pid 5376] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5377 attached ) = 0 [pid 5377] chdir("./30" [pid 5376] memfd_create("syzkaller", 0 [pid 5377] <... chdir resumed>) = 0 [pid 5376] <... memfd_create resumed>) = 3 [pid 5377] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5376] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5377] <... prctl resumed>) = 0 [pid 5376] <... mmap resumed>) = 0x7f18ca796000 [pid 5377] setpgid(0, 0 [pid 5375] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5377] <... setpgid resumed>) = 0 [pid 5377] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5377] write(3, "1000", 4) = 4 [pid 5377] close(3) = 0 [pid 5377] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5377] memfd_create("syzkaller", 0) = 3 [pid 5377] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5376] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5377] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5375] <... write resumed>) = 2097152 [pid 5375] munmap(0x7f18ca796000, 2097152) = 0 [pid 5375] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5375] ioctl(4, LOOP_SET_FD, 3 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./29/file1", [pid 5375] <... ioctl resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5375] close(3 [pid 4998] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5375] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5375] mkdir("./file1", 0777 [pid 4998] openat(AT_FDCWD, "./29/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5377] <... write resumed>) = 2097152 [pid 5375] <... mkdir resumed>) = 0 [pid 4998] <... openat resumed>) = 4 [pid 5377] munmap(0x7f18ca796000, 2097152 [pid 5375] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 5376] <... write resumed>) = 2097152 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./29/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./29") = 0 [pid 4998] mkdir("./30", 0777) = 0 [ 131.874116][ T5375] loop2: detected capacity change from 0 to 4096 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5378 [pid 5376] munmap(0x7f18ca796000, 2097152) = 0 ./strace-static-x86_64: Process 5378 attached [pid 5378] chdir("./30") = 0 [pid 5376] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5378] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5376] <... openat resumed>) = 4 [pid 5378] <... prctl resumed>) = 0 [pid 5377] <... munmap resumed>) = 0 [pid 5376] ioctl(4, LOOP_SET_FD, 3 [pid 5378] setpgid(0, 0 [pid 5377] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5378] <... setpgid resumed>) = 0 [pid 5378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5377] <... openat resumed>) = 4 [pid 5378] write(3, "1000", 4) = 4 [pid 5378] close(3) = 0 [pid 5378] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5378] memfd_create("syzkaller", 0) = 3 [pid 5378] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 131.943186][ T5375] NILFS (loop2): invalid segment: Checksum error in segment payload [ 131.961000][ T5376] loop0: detected capacity change from 0 to 4096 [ 131.966780][ T5375] NILFS (loop2): trying rollback from an earlier position [pid 5377] ioctl(4, LOOP_SET_FD, 3 [pid 5376] <... ioctl resumed>) = 0 [pid 5376] close(3) = 0 [pid 5376] mkdir("./file1", 0777) = 0 [pid 5376] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5377] <... ioctl resumed>) = 0 [pid 5377] close(3) = 0 [pid 5377] mkdir("./file1", 0777) = 0 [ 131.993654][ T5377] loop4: detected capacity change from 0 to 4096 [ 132.016148][ T5375] NILFS (loop2): recovery complete [ 132.025404][ T5376] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5377] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5378] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5375] <... mount resumed>) = 0 [pid 5375] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5375] chdir("./file1") = 0 [pid 5375] ioctl(4, LOOP_CLR_FD) = 0 [pid 5375] close(4) = 0 [pid 5375] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5375] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5375] ftruncate(5, 33587195 [pid 5371] <... sendfile resumed>) = 1048576 [pid 5375] <... ftruncate resumed>) = 0 [pid 5375] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [ 132.038210][ T5379] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5371] exit_group(0 [pid 5375] <... open resumed>) = 6 [pid 5375] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5375] sendfile(6, 7, NULL, 281474978811909 [pid 5371] <... exit_group resumed>) = ? [pid 5371] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5371, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=28 /* 0.28 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5378] <... write resumed>) = 2097152 [pid 5002] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5378] munmap(0x7f18ca796000, 2097152 [pid 5002] unlink("./30/binderfs") = 0 [pid 5378] <... munmap resumed>) = 0 [ 132.077886][ T5377] NILFS (loop4): invalid segment: Checksum error in segment payload [ 132.104317][ T5376] NILFS (loop0): trying rollback from an earlier position [ 132.111405][ T5377] NILFS (loop4): trying rollback from an earlier position [pid 5002] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5378] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5378] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5376] <... mount resumed>) = 0 [pid 5378] close(3) = 0 [pid 5378] mkdir("./file1", 0777) = 0 [ 132.157725][ T5377] NILFS (loop4): recovery complete [ 132.161393][ T5378] loop1: detected capacity change from 0 to 4096 [ 132.163708][ T5376] NILFS (loop0): recovery complete [ 132.190109][ T5381] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5378] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5377] <... mount resumed>) = 0 [pid 5376] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5002] <... umount2 resumed>) = 0 [pid 5377] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5376] <... openat resumed>) = 3 [pid 5377] <... openat resumed>) = 3 [pid 5376] chdir("./file1" [pid 5377] chdir("./file1" [pid 5376] <... chdir resumed>) = 0 [pid 5377] <... chdir resumed>) = 0 [pid 5376] ioctl(4, LOOP_CLR_FD [pid 5377] ioctl(4, LOOP_CLR_FD [pid 5376] <... ioctl resumed>) = 0 [pid 5377] <... ioctl resumed>) = 0 [pid 5376] close(4 [pid 5377] close(4 [pid 5376] <... close resumed>) = 0 [pid 5377] <... close resumed>) = 0 [pid 5376] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5377] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5002] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./30/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./30/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5377] <... open resumed>) = 4 [pid 5376] <... open resumed>) = 4 [pid 5377] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5376] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5377] <... open resumed>) = 5 [pid 5376] <... open resumed>) = 5 [pid 5002] <... openat resumed>) = 4 [pid 5377] ftruncate(5, 33587195 [pid 5376] ftruncate(5, 33587195 [pid 5002] fstat(4, [pid 5377] <... ftruncate resumed>) = 0 [pid 5376] <... ftruncate resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5377] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5376] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5377] <... open resumed>) = 6 [pid 5376] <... open resumed>) = 6 [pid 5002] getdents64(4, [pid 5377] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5376] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5377] <... open resumed>) = 7 [pid 5376] <... open resumed>) = 7 [ 132.207883][ T5380] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.233647][ T5378] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5002] getdents64(4, [pid 5377] sendfile(6, 7, NULL, 281474978811909 [pid 5376] sendfile(6, 7, NULL, 281474978811909 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./30/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./30") = 0 [pid 5002] mkdir("./31", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5382 [ 132.271492][ T5378] NILFS (loop1): trying rollback from an earlier position ./strace-static-x86_64: Process 5382 attached [pid 5382] chdir("./31") = 0 [pid 5382] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5382] setpgid(0, 0) = 0 [pid 5382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5382] write(3, "1000", 4) = 4 [pid 5382] close(3) = 0 [pid 5382] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5382] memfd_create("syzkaller", 0) = 3 [pid 5382] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 132.370448][ T5378] NILFS (loop1): recovery complete [pid 5382] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5378] <... mount resumed>) = 0 [pid 5378] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5378] chdir("./file1") = 0 [pid 5378] ioctl(4, LOOP_CLR_FD) = 0 [pid 5378] close(4) = 0 [pid 5378] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [ 132.431692][ T5383] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5378] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5378] ftruncate(5, 33587195) = 0 [pid 5378] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5378] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5378] sendfile(6, 7, NULL, 281474978811909 [pid 5372] <... sendfile resumed>) = 1048576 [pid 5372] exit_group(0) = ? [pid 5372] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5372, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5382] <... write resumed>) = 2097152 [pid 5000] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5382] munmap(0x7f18ca796000, 2097152 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5382] <... munmap resumed>) = 0 [pid 5000] unlink("./30/binderfs" [pid 5382] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] <... unlink resumed>) = 0 [pid 5382] <... openat resumed>) = 4 [pid 5000] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5382] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5382] close(3) = 0 [pid 5382] mkdir("./file1", 0777) = 0 [ 132.628892][ T5382] loop5: detected capacity change from 0 to 4096 [ 132.689341][ T5382] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5382] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./30/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./30/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 132.737747][ T5382] NILFS (loop5): trying rollback from an earlier position [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./30/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./30") = 0 [pid 5000] mkdir("./31", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5384 ./strace-static-x86_64: Process 5384 attached [pid 5384] chdir("./31") = 0 [pid 5384] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5384] setpgid(0, 0) = 0 [pid 5384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5384] write(3, "1000", 4) = 4 [pid 5384] close(3) = 0 [pid 5384] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5384] memfd_create("syzkaller", 0) = 3 [pid 5384] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 132.853347][ T5382] NILFS (loop5): recovery complete [pid 5382] <... mount resumed>) = 0 [pid 5382] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5382] chdir("./file1") = 0 [pid 5382] ioctl(4, LOOP_CLR_FD) = 0 [pid 5382] close(4) = 0 [pid 5382] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5382] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5382] ftruncate(5, 33587195) = 0 [pid 5382] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [ 132.903531][ T5385] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5382] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5382] sendfile(6, 7, NULL, 281474978811909 [pid 5384] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5384] munmap(0x7f18ca796000, 2097152) = 0 [pid 5384] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5384] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5384] close(3) = 0 [pid 5384] mkdir("./file1", 0777) = 0 [pid 5384] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5375] <... sendfile resumed>) = 1048576 [pid 5375] exit_group(0) = ? [pid 5375] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5375, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=28 /* 0.28 s */} --- [pid 4999] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./30/binderfs") = 0 [ 133.104436][ T5384] loop3: detected capacity change from 0 to 4096 [ 133.134706][ T5384] NILFS (loop3): invalid segment: Checksum error in segment payload [ 133.142849][ T5384] NILFS (loop3): trying rollback from an earlier position [ 133.253285][ T5384] NILFS (loop3): recovery complete [pid 4999] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5384] <... mount resumed>) = 0 [pid 5384] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5384] chdir("./file1" [pid 5377] <... sendfile resumed>) = 1048576 [pid 5384] <... chdir resumed>) = 0 [pid 5384] ioctl(4, LOOP_CLR_FD [pid 5377] exit_group(0 [pid 5384] <... ioctl resumed>) = 0 [pid 5377] <... exit_group resumed>) = ? [pid 5384] close(4) = 0 [pid 5384] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5384] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5384] ftruncate(5, 33587195) = 0 [pid 5384] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5384] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 133.282086][ T5386] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5384] sendfile(6, 7, NULL, 281474978811909 [pid 5377] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5377, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5001] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./30/binderfs") = 0 [pid 5001] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./30/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./30/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./30/file1") = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./30") = 0 [pid 4999] mkdir("./31", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5376] <... sendfile resumed>) = 1048576 [pid 5376] exit_group(0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5376] <... exit_group resumed>) = ? [pid 4999] close(3 [pid 5376] +++ exited with 0 +++ [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5387 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5376, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 4997] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4997] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5387 attached [pid 5001] <... umount2 resumed>) = 0 [pid 4997] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5387] chdir("./31" [pid 5001] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5387] <... chdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... openat resumed>) = 3 [pid 5387] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] lstat("./30/file1", [pid 4997] fstat(3, [pid 5387] <... prctl resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5387] setpgid(0, 0 [pid 5001] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] getdents64(3, [pid 5387] <... setpgid resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5387] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] openat(AT_FDCWD, "./30/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5387] <... openat resumed>) = 3 [pid 5001] <... openat resumed>) = 4 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5387] write(3, "1000", 4 [pid 5001] fstat(4, [pid 4997] lstat("./29/binderfs", [pid 5387] <... write resumed>) = 4 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5387] close(3 [pid 5001] getdents64(4, [pid 4997] unlink("./29/binderfs" [pid 5387] <... close resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] <... unlink resumed>) = 0 [pid 5387] symlink("/dev/binderfs", "./binderfs" [pid 5001] getdents64(4, [pid 4997] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5387] <... symlink resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5387] memfd_create("syzkaller", 0 [pid 5001] close(4 [pid 5387] <... memfd_create resumed>) = 3 [pid 5001] <... close resumed>) = 0 [pid 5387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] rmdir("./30/file1" [pid 5387] <... mmap resumed>) = 0x7f18ca796000 [pid 5001] <... rmdir resumed>) = 0 [pid 5378] <... sendfile resumed>) = 1048576 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5378] exit_group(0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./30" [pid 5378] <... exit_group resumed>) = ? [pid 5001] <... rmdir resumed>) = 0 [pid 5001] mkdir("./31", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5378] +++ exited with 0 +++ [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5378, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5001] <... clone resumed>, child_tidptr=0x555556f7b690) = 5388 ./strace-static-x86_64: Process 5388 attached [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5388] chdir("./31" [pid 4998] <... restart_syscall resumed>) = 0 [pid 5388] <... chdir resumed>) = 0 [pid 4998] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5388] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5388] <... prctl resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5388] setpgid(0, 0) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5388] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] fstat(3, [pid 5388] <... openat resumed>) = 3 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5388] write(3, "1000", 4 [pid 4997] <... umount2 resumed>) = 0 [pid 5388] <... write resumed>) = 4 [pid 4998] getdents64(3, [pid 5388] close(3 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5388] <... close resumed>) = 0 [pid 5388] symlink("/dev/binderfs", "./binderfs" [pid 4998] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5388] <... symlink resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5388] memfd_create("syzkaller", 0 [pid 4998] lstat("./30/binderfs", [pid 5388] <... memfd_create resumed>) = 3 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5388] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4998] unlink("./30/binderfs") = 0 [pid 4998] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./29/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./29/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./29/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5388] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./29/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./29" [pid 5387] <... write resumed>) = 2097152 [pid 4997] <... rmdir resumed>) = 0 [pid 5387] munmap(0x7f18ca796000, 2097152 [pid 4997] mkdir("./30", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5387] <... munmap resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5387] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5387] ioctl(4, LOOP_SET_FD, 3 [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5389 ./strace-static-x86_64: Process 5389 attached [pid 5389] chdir("./30") = 0 [pid 5389] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5388] <... write resumed>) = 2097152 [pid 5389] <... prctl resumed>) = 0 [pid 5388] munmap(0x7f18ca796000, 2097152 [pid 5389] setpgid(0, 0) = 0 [pid 5388] <... munmap resumed>) = 0 [pid 5389] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5388] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5389] <... openat resumed>) = 3 [pid 5388] <... openat resumed>) = 4 [pid 5389] write(3, "1000", 4 [pid 5388] ioctl(4, LOOP_SET_FD, 3 [pid 5387] <... ioctl resumed>) = 0 [ 133.737259][ T5387] loop2: detected capacity change from 0 to 4096 [pid 5389] <... write resumed>) = 4 [pid 5387] close(3 [pid 5388] <... ioctl resumed>) = 0 [pid 5387] <... close resumed>) = 0 [pid 5387] mkdir("./file1", 0777 [pid 5389] close(3 [pid 5388] close(3 [pid 5387] <... mkdir resumed>) = 0 [pid 5387] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5389] <... close resumed>) = 0 [pid 5388] <... close resumed>) = 0 [pid 5389] symlink("/dev/binderfs", "./binderfs" [pid 5388] mkdir("./file1", 0777 [pid 5389] <... symlink resumed>) = 0 [pid 5389] memfd_create("syzkaller", 0 [pid 5388] <... mkdir resumed>) = 0 [pid 5389] <... memfd_create resumed>) = 3 [pid 5388] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 133.784963][ T5388] loop4: detected capacity change from 0 to 4096 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5389] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] lstat("./30/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 133.836468][ T5387] NILFS (loop2): invalid segment: Checksum error in segment payload [ 133.845065][ T5388] NILFS (loop4): invalid segment: Checksum error in segment payload [ 133.869704][ T5387] NILFS (loop2): trying rollback from an earlier position [pid 4998] openat(AT_FDCWD, "./30/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./30/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./30") = 0 [pid 4998] mkdir("./31", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [ 133.881102][ T5388] NILFS (loop4): trying rollback from an earlier position [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5390 ./strace-static-x86_64: Process 5390 attached [pid 5390] chdir("./31") = 0 [pid 5390] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5390] setpgid(0, 0) = 0 [pid 5390] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5389] <... write resumed>) = 2097152 [pid 5390] <... openat resumed>) = 3 [pid 5389] munmap(0x7f18ca796000, 2097152 [pid 5390] write(3, "1000", 4 [pid 5389] <... munmap resumed>) = 0 [pid 5390] <... write resumed>) = 4 [pid 5390] close(3 [pid 5389] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5390] <... close resumed>) = 0 [pid 5389] <... openat resumed>) = 4 [pid 5388] <... mount resumed>) = 0 [ 133.955190][ T5388] NILFS (loop4): recovery complete [ 133.966786][ T5387] NILFS (loop2): recovery complete [ 133.984643][ T5391] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5390] symlink("/dev/binderfs", "./binderfs" [pid 5389] ioctl(4, LOOP_SET_FD, 3 [pid 5388] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5390] <... symlink resumed>) = 0 [pid 5390] memfd_create("syzkaller", 0 [pid 5388] <... openat resumed>) = 3 [pid 5390] <... memfd_create resumed>) = 3 [pid 5388] chdir("./file1" [pid 5387] <... mount resumed>) = 0 [pid 5388] <... chdir resumed>) = 0 [pid 5387] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5388] ioctl(4, LOOP_CLR_FD [pid 5390] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5387] <... openat resumed>) = 3 [pid 5388] <... ioctl resumed>) = 0 [pid 5390] <... mmap resumed>) = 0x7f18ca796000 [pid 5388] close(4 [pid 5387] chdir("./file1" [pid 5388] <... close resumed>) = 0 [pid 5387] <... chdir resumed>) = 0 [pid 5389] <... ioctl resumed>) = 0 [pid 5388] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5387] ioctl(4, LOOP_CLR_FD) = 0 [pid 5387] close(4) = 0 [pid 5387] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5389] close(3 [pid 5388] <... open resumed>) = 4 [pid 5387] <... open resumed>) = 4 [pid 5382] <... sendfile resumed>) = 1048576 [pid 5387] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5389] <... close resumed>) = 0 [pid 5388] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5387] <... open resumed>) = 5 [pid 5382] exit_group(0 [pid 5387] ftruncate(5, 33587195 [pid 5389] mkdir("./file1", 0777 [pid 5387] <... ftruncate resumed>) = 0 [pid 5382] <... exit_group resumed>) = ? [pid 5388] <... open resumed>) = 5 [pid 5387] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5390] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5389] <... mkdir resumed>) = 0 [pid 5388] ftruncate(5, 33587195 [pid 5387] <... open resumed>) = 6 [pid 5382] +++ exited with 0 +++ [ 134.001528][ T5389] loop0: detected capacity change from 0 to 4096 [ 134.005105][ T5392] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5389] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5388] <... ftruncate resumed>) = 0 [pid 5387] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5388] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5387] <... open resumed>) = 7 [pid 5388] <... open resumed>) = 6 [pid 5387] sendfile(6, 7, NULL, 281474978811909 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5382, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5388] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5388] sendfile(6, 7, NULL, 281474978811909 [pid 5002] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./31/binderfs") = 0 [ 134.073540][ T5389] NILFS (loop0): invalid segment: Checksum error in segment payload [ 134.082164][ T5389] NILFS (loop0): trying rollback from an earlier position [pid 5002] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5390] <... write resumed>) = 2097152 [pid 5390] munmap(0x7f18ca796000, 2097152) = 0 [pid 5390] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5390] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5389] <... mount resumed>) = 0 [pid 5390] close(3 [pid 5389] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5390] <... close resumed>) = 0 [pid 5389] <... openat resumed>) = 3 [pid 5384] <... sendfile resumed>) = 1048576 [pid 5390] mkdir("./file1", 0777 [pid 5389] chdir("./file1" [pid 5384] exit_group(0) = ? [pid 5390] <... mkdir resumed>) = 0 [pid 5389] <... chdir resumed>) = 0 [pid 5384] +++ exited with 0 +++ [pid 5389] ioctl(4, LOOP_CLR_FD [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5384, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5390] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5389] <... ioctl resumed>) = 0 [pid 5389] close(4) = 0 [pid 5000] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5389] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5389] <... open resumed>) = 4 [pid 5389] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5389] ftruncate(5, 33587195 [pid 5000] <... openat resumed>) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 5389] <... ftruncate resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5389] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5389] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5000] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5389] <... open resumed>) = 7 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 134.168288][ T5389] NILFS (loop0): recovery complete [ 134.187408][ T5390] loop1: detected capacity change from 0 to 4096 [ 134.193698][ T5393] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5389] sendfile(6, 7, NULL, 281474978811909 [pid 5000] lstat("./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./31/binderfs") = 0 [pid 5000] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = 0 [ 134.268492][ T5390] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5002] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./31/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./31/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./31/file1") = 0 [ 134.330988][ T5390] NILFS (loop1): trying rollback from an earlier position [ 134.362303][ T5390] NILFS (loop1): recovery complete [pid 5390] <... mount resumed>) = 0 [pid 5002] getdents64(3, [pid 5390] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5390] <... openat resumed>) = 3 [pid 5002] close(3 [pid 5390] chdir("./file1") = 0 [pid 5002] <... close resumed>) = 0 [pid 5390] ioctl(4, LOOP_CLR_FD [pid 5002] rmdir("./31" [pid 5390] <... ioctl resumed>) = 0 [pid 5390] close(4 [pid 5002] <... rmdir resumed>) = 0 [pid 5390] <... close resumed>) = 0 [pid 5002] mkdir("./32", 0777) = 0 [pid 5390] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5390] <... open resumed>) = 4 [pid 5002] <... openat resumed>) = 3 [pid 5390] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5390] <... open resumed>) = 5 [pid 5002] close(3) = 0 [ 134.372658][ T5394] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5390] ftruncate(5, 33587195 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5390] <... ftruncate resumed>) = 0 [pid 5390] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5395 [pid 5390] <... open resumed>) = 6 [pid 5390] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5390] sendfile(6, 7, NULL, 281474978811909./strace-static-x86_64: Process 5395 attached [pid 5395] chdir("./32") = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5395] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5395] setpgid(0, 0) = 0 [pid 5395] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5395] write(3, "1000", 4) = 4 [pid 5395] close(3) = 0 [pid 5395] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5395] memfd_create("syzkaller", 0) = 3 [pid 5000] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5395] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5395] <... mmap resumed>) = 0x7f18ca796000 [pid 5000] lstat("./31/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./31/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./31/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./31") = 0 [pid 5000] mkdir("./32", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5396 ./strace-static-x86_64: Process 5396 attached [pid 5396] chdir("./32") = 0 [pid 5396] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5396] setpgid(0, 0) = 0 [pid 5396] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5396] write(3, "1000", 4) = 4 [pid 5396] close(3) = 0 [pid 5396] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5396] memfd_create("syzkaller", 0) = 3 [pid 5395] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5396] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5395] <... write resumed>) = 2097152 [pid 5395] munmap(0x7f18ca796000, 2097152) = 0 [pid 5395] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5395] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5395] close(3 [pid 5396] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5395] <... close resumed>) = 0 [pid 5395] mkdir("./file1", 0777) = 0 [ 134.644290][ T5395] loop5: detected capacity change from 0 to 4096 [pid 5395] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5396] <... write resumed>) = 2097152 [ 134.701601][ T5395] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5396] munmap(0x7f18ca796000, 2097152) = 0 [pid 5396] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 134.752948][ T5395] NILFS (loop5): trying rollback from an earlier position [ 134.759520][ T5396] loop3: detected capacity change from 0 to 4096 [pid 5396] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5396] close(3) = 0 [pid 5396] mkdir("./file1", 0777) = 0 [ 134.799879][ T5395] NILFS (loop5): recovery complete [pid 5396] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5395] <... mount resumed>) = 0 [pid 5395] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5395] chdir("./file1") = 0 [pid 5395] ioctl(4, LOOP_CLR_FD) = 0 [pid 5395] close(4) = 0 [pid 5395] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [ 134.831692][ T5397] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5395] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5395] ftruncate(5, 33587195) = 0 [pid 5395] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5395] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 134.885233][ T5396] NILFS (loop3): invalid segment: Checksum error in segment payload [ 134.900403][ T5396] NILFS (loop3): trying rollback from an earlier position [ 134.965504][ T5396] NILFS (loop3): recovery complete [pid 5395] sendfile(6, 7, NULL, 281474978811909 [pid 5396] <... mount resumed>) = 0 [pid 5396] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5396] chdir("./file1") = 0 [pid 5396] ioctl(4, LOOP_CLR_FD) = 0 [ 135.005400][ T5398] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5396] close(4) = 0 [pid 5396] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5396] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5396] ftruncate(5, 33587195) = 0 [pid 5396] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5396] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5396] sendfile(6, 7, NULL, 281474978811909 [pid 5388] <... sendfile resumed>) = 1048576 [pid 5388] exit_group(0) = ? [pid 5388] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5388, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5001] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./31/binderfs") = 0 [pid 5001] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5387] <... sendfile resumed>) = 1048576 [pid 5387] exit_group(0) = ? [pid 5389] <... sendfile resumed>) = 1048576 [pid 5387] +++ exited with 0 +++ [pid 5390] <... sendfile resumed>) = 1048576 [pid 5389] exit_group(0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5387, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5390] exit_group(0 [pid 5389] <... exit_group resumed>) = ? [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 5389] +++ exited with 0 +++ [pid 5390] <... exit_group resumed>) = ? [pid 4999] <... restart_syscall resumed>) = 0 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5389, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 4997] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5390] +++ exited with 0 +++ [pid 4997] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5390, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 4997] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... restart_syscall resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [pid 4999] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] fstat(3, [pid 4999] <... openat resumed>) = 3 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] fstat(3, [pid 4998] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] getdents64(3, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] getdents64(3, [pid 4998] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] <... openat resumed>) = 3 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] fstat(3, [pid 4997] lstat("./30/binderfs", [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] lstat("./31/binderfs", [pid 4998] getdents64(3, [pid 4997] unlink("./30/binderfs" [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] <... unlink resumed>) = 0 [pid 4999] unlink("./31/binderfs" [pid 4998] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... unlink resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] lstat("./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./31/binderfs") = 0 [pid 4998] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./31/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./31/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./31/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./31") = 0 [pid 5001] mkdir("./32", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5399 ./strace-static-x86_64: Process 5399 attached [pid 5399] chdir("./32") = 0 [pid 5399] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5399] setpgid(0, 0) = 0 [pid 5399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5399] write(3, "1000", 4) = 4 [pid 5399] close(3 [pid 4997] <... umount2 resumed>) = 0 [pid 5399] <... close resumed>) = 0 [pid 5399] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5399] memfd_create("syzkaller", 0) = 3 [pid 5399] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4997] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5399] <... mmap resumed>) = 0x7f18ca796000 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./30/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./30/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./30/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./30/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./30") = 0 [pid 4997] mkdir("./31", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5399] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5400 [pid 4998] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5400 attached [pid 5400] chdir("./31") = 0 [pid 5400] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5400] setpgid(0, 0) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5400] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5400] <... openat resumed>) = 3 [pid 5400] write(3, "1000", 4) = 4 [pid 5400] close(3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5400] <... close resumed>) = 0 [pid 5400] symlink("/dev/binderfs", "./binderfs" [pid 4998] lstat("./31/file1", [pid 5400] <... symlink resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5400] memfd_create("syzkaller", 0 [pid 4998] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5400] <... memfd_create resumed>) = 3 [pid 5400] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5399] <... write resumed>) = 2097152 [pid 4999] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5400] <... mmap resumed>) = 0x7f18ca796000 [pid 5399] munmap(0x7f18ca796000, 2097152 [pid 4998] openat(AT_FDCWD, "./31/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... openat resumed>) = 4 [pid 4999] lstat("./31/file1", [pid 4998] fstat(4, [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] openat(AT_FDCWD, "./31/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] getdents64(4, [pid 4999] <... openat resumed>) = 4 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5399] <... munmap resumed>) = 0 [pid 4999] fstat(4, [pid 4998] close(4 [pid 5399] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... close resumed>) = 0 [pid 5399] <... openat resumed>) = 4 [pid 4999] getdents64(4, [pid 4998] rmdir("./31/file1" [pid 5399] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] <... rmdir resumed>) = 0 [pid 4999] getdents64(4, [pid 4998] getdents64(3, [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(4 [pid 4998] close(3 [pid 4999] <... close resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 4999] rmdir("./31/file1" [pid 4998] rmdir("./31" [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, [pid 4998] mkdir("./32", 0777 [pid 5400] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5399] <... ioctl resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 4999] close(3 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5399] close(3 [pid 4999] <... close resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5399] <... close resumed>) = 0 [pid 4999] rmdir("./31" [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5399] mkdir("./file1", 0777 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] mkdir("./32", 0777 [pid 4998] close(3 [pid 5399] <... mkdir resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5399] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5401 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5401 attached , child_tidptr=0x555556f7b690) = 5402 [pid 5401] chdir("./32") = 0 [pid 5401] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 135.670710][ T5399] loop4: detected capacity change from 0 to 4096 [pid 5401] setpgid(0, 0) = 0 [pid 5401] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5401] write(3, "1000", 4) = 4 [pid 5401] close(3) = 0 [pid 5401] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5401] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5402 attached ) = 3 [pid 5401] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5402] chdir("./32") = 0 [pid 5402] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5402] setpgid(0, 0) = 0 [pid 5402] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5402] write(3, "1000", 4) = 4 [pid 5402] close(3) = 0 [pid 5402] symlink("/dev/binderfs", "./binderfs" [pid 5400] <... write resumed>) = 2097152 [pid 5402] <... symlink resumed>) = 0 [pid 5400] munmap(0x7f18ca796000, 2097152 [pid 5402] memfd_create("syzkaller", 0) = 3 [pid 5400] <... munmap resumed>) = 0 [pid 5402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5400] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5402] <... mmap resumed>) = 0x7f18ca796000 [pid 5400] <... openat resumed>) = 4 [ 135.732810][ T5399] NILFS (loop4): invalid segment: Checksum error in segment payload [ 135.753007][ T5399] NILFS (loop4): trying rollback from an earlier position [pid 5400] ioctl(4, LOOP_SET_FD, 3 [pid 5401] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5402] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5400] <... ioctl resumed>) = 0 [pid 5400] close(3) = 0 [pid 5400] mkdir("./file1", 0777) = 0 [ 135.806341][ T5400] loop0: detected capacity change from 0 to 4096 [ 135.827006][ T5399] NILFS (loop4): recovery complete [pid 5400] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5399] <... mount resumed>) = 0 [pid 5399] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5401] <... write resumed>) = 2097152 [pid 5399] chdir("./file1") = 0 [pid 5399] ioctl(4, LOOP_CLR_FD) = 0 [ 135.857512][ T5403] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.875327][ T5400] NILFS (loop0): invalid segment: Checksum error in segment payload [ 135.895457][ T5400] NILFS (loop0): trying rollback from an earlier position [pid 5399] close(4 [pid 5402] <... write resumed>) = 2097152 [pid 5401] munmap(0x7f18ca796000, 2097152 [pid 5399] <... close resumed>) = 0 [pid 5402] munmap(0x7f18ca796000, 2097152 [pid 5399] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5402] <... munmap resumed>) = 0 [pid 5401] <... munmap resumed>) = 0 [pid 5402] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5401] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5402] <... openat resumed>) = 4 [pid 5401] <... openat resumed>) = 4 [pid 5399] <... open resumed>) = 4 [ 135.914802][ T5400] NILFS (loop0): recovery complete [pid 5402] ioctl(4, LOOP_SET_FD, 3 [pid 5401] ioctl(4, LOOP_SET_FD, 3 [pid 5399] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5402] <... ioctl resumed>) = 0 [pid 5401] <... ioctl resumed>) = 0 [pid 5399] ftruncate(5, 33587195 [pid 5402] close(3 [pid 5401] close(3 [pid 5399] <... ftruncate resumed>) = 0 [pid 5402] <... close resumed>) = 0 [pid 5401] <... close resumed>) = 0 [pid 5399] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5402] mkdir("./file1", 0777 [pid 5401] mkdir("./file1", 0777 [pid 5399] <... open resumed>) = 6 [pid 5402] <... mkdir resumed>) = 0 [pid 5401] <... mkdir resumed>) = 0 [pid 5400] <... mount resumed>) = 0 [pid 5399] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5402] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5401] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5399] <... open resumed>) = 7 [pid 5400] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5399] sendfile(6, 7, NULL, 281474978811909 [pid 5400] <... openat resumed>) = 3 [pid 5400] chdir("./file1") = 0 [pid 5400] ioctl(4, LOOP_CLR_FD) = 0 [pid 5400] close(4) = 0 [ 135.941990][ T5402] loop2: detected capacity change from 0 to 4096 [ 135.949319][ T5401] loop1: detected capacity change from 0 to 4096 [ 135.956498][ T5404] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5396] <... sendfile resumed>) = 1048576 [pid 5400] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5396] exit_group(0 [pid 5400] <... open resumed>) = 4 [pid 5396] <... exit_group resumed>) = ? [pid 5400] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5396] +++ exited with 0 +++ [pid 5400] ftruncate(5, 33587195) = 0 [pid 5400] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5400] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5400] sendfile(6, 7, NULL, 281474978811909 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5396, si_uid=0, si_status=0, si_utime=0, si_stime=34 /* 0.34 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 5395] <... sendfile resumed>) = 1048576 [pid 5000] <... restart_syscall resumed>) = 0 [pid 5395] exit_group(0) = ? [pid 5000] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5395] +++ exited with 0 +++ [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5395, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5002] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... openat resumed>) = 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] fstat(3, [pid 5002] <... openat resumed>) = 3 [pid 5002] fstat(3, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 136.033204][ T5402] NILFS (loop2): invalid segment: Checksum error in segment payload [ 136.042382][ T5401] NILFS (loop1): invalid segment: Checksum error in segment payload [ 136.053666][ T5402] NILFS (loop2): trying rollback from an earlier position [ 136.071695][ T5401] NILFS (loop1): trying rollback from an earlier position [pid 5002] getdents64(3, [pid 5000] getdents64(3, [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] lstat("./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] unlink("./32/binderfs") = 0 [pid 5000] lstat("./32/binderfs", [pid 5002] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 136.102543][ T5402] NILFS (loop2): recovery complete [pid 5000] unlink("./32/binderfs") = 0 [pid 5402] <... mount resumed>) = 0 [pid 5402] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5000] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5402] <... openat resumed>) = 3 [pid 5402] chdir("./file1") = 0 [pid 5402] ioctl(4, LOOP_CLR_FD) = 0 [pid 5401] <... mount resumed>) = 0 [pid 5402] close(4 [pid 5401] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5402] <... close resumed>) = 0 [pid 5402] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5401] <... openat resumed>) = 3 [pid 5401] chdir("./file1" [pid 5402] <... open resumed>) = 4 [pid 5402] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5401] <... chdir resumed>) = 0 [pid 5402] <... open resumed>) = 5 [pid 5401] ioctl(4, LOOP_CLR_FD [pid 5402] ftruncate(5, 33587195 [pid 5401] <... ioctl resumed>) = 0 [pid 5402] <... ftruncate resumed>) = 0 [pid 5401] close(4 [pid 5402] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5401] <... close resumed>) = 0 [pid 5402] <... open resumed>) = 6 [pid 5401] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5402] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5401] <... open resumed>) = 4 [pid 5401] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5402] sendfile(6, 7, NULL, 281474978811909 [pid 5401] <... open resumed>) = 5 [pid 5401] ftruncate(5, 33587195) = 0 [ 136.140424][ T5405] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.153364][ T5401] NILFS (loop1): recovery complete [ 136.180336][ T5406] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5401] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5401] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5401] sendfile(6, 7, NULL, 281474978811909 [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./32/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./32/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./32/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./32") = 0 [pid 5002] mkdir("./33", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5000] <... umount2 resumed>) = 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5407 [pid 5000] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5407 attached ) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./32/file1", [pid 5407] chdir("./33" [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5407] <... chdir resumed>) = 0 [pid 5000] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5407] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5407] <... prctl resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./32/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5407] setpgid(0, 0) = 0 [pid 5000] <... openat resumed>) = 4 [pid 5407] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] fstat(4, [pid 5407] <... openat resumed>) = 3 [pid 5407] write(3, "1000", 4 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5407] <... write resumed>) = 4 [pid 5000] getdents64(4, [pid 5407] close(3 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5407] <... close resumed>) = 0 [pid 5000] getdents64(4, [pid 5407] symlink("/dev/binderfs", "./binderfs" [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5407] <... symlink resumed>) = 0 [pid 5000] close(4) = 0 [pid 5407] memfd_create("syzkaller", 0 [pid 5000] rmdir("./32/file1" [pid 5407] <... memfd_create resumed>) = 3 [pid 5000] <... rmdir resumed>) = 0 [pid 5407] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] getdents64(3, [pid 5407] <... mmap resumed>) = 0x7f18ca796000 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./32") = 0 [pid 5000] mkdir("./33", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5408 [pid 5407] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5408 attached [pid 5408] chdir("./33") = 0 [pid 5408] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5408] setpgid(0, 0) = 0 [pid 5408] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5408] write(3, "1000", 4) = 4 [pid 5408] close(3) = 0 [pid 5408] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5408] memfd_create("syzkaller", 0) = 3 [pid 5408] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5407] <... write resumed>) = 2097152 [pid 5407] munmap(0x7f18ca796000, 2097152) = 0 [pid 5407] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5407] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5408] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5407] close(3) = 0 [pid 5407] mkdir("./file1", 0777) = 0 [ 136.634375][ T5407] loop5: detected capacity change from 0 to 4096 [pid 5407] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5408] <... write resumed>) = 2097152 [pid 5408] munmap(0x7f18ca796000, 2097152) = 0 [ 136.692974][ T5407] NILFS (loop5): invalid segment: Checksum error in segment payload [ 136.716951][ T5407] NILFS (loop5): trying rollback from an earlier position [pid 5408] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5408] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5408] close(3) = 0 [pid 5408] mkdir("./file1", 0777) = 0 [pid 5407] <... mount resumed>) = 0 [pid 5408] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5407] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5407] chdir("./file1") = 0 [pid 5407] ioctl(4, LOOP_CLR_FD) = 0 [pid 5407] close(4) = 0 [ 136.775204][ T5408] loop3: detected capacity change from 0 to 4096 [ 136.786312][ T5407] NILFS (loop5): recovery complete [ 136.803422][ T5409] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5407] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5407] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5407] ftruncate(5, 33587195) = 0 [pid 5407] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5407] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 136.846988][ T5408] NILFS (loop3): invalid segment: Checksum error in segment payload [ 136.894097][ T5408] NILFS (loop3): trying rollback from an earlier position [ 136.984097][ T5408] NILFS (loop3): recovery complete [pid 5407] sendfile(6, 7, NULL, 281474978811909 [pid 5408] <... mount resumed>) = 0 [pid 5408] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5408] chdir("./file1") = 0 [pid 5408] ioctl(4, LOOP_CLR_FD) = 0 [pid 5408] close(4) = 0 [pid 5408] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5408] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5408] ftruncate(5, 33587195) = 0 [pid 5408] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5408] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 137.018399][ T5410] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5408] sendfile(6, 7, NULL, 281474978811909 [pid 5399] <... sendfile resumed>) = 1048576 [pid 5399] exit_group(0) = ? [pid 5399] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5399, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5001] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5400] <... sendfile resumed>) = 1048576 [pid 5001] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5400] exit_group(0 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./32/binderfs", [pid 5400] <... exit_group resumed>) = ? [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./32/binderfs") = 0 [pid 5001] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5400] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5400, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 4997] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5401] <... sendfile resumed>) = 1048576 [pid 4997] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5401] exit_group(0) = ? [pid 5401] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5401, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./31/binderfs" [pid 4998] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... unlink resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./32/binderfs") = 0 [pid 4998] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5402] <... sendfile resumed>) = 1048576 [pid 5402] exit_group(0) = ? [pid 5402] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5402, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, [pid 5001] <... umount2 resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./32/file1", [pid 4999] lstat("./32/binderfs", [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./32/binderfs" [pid 5001] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] openat(AT_FDCWD, "./32/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./32/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./32") = 0 [pid 5001] mkdir("./33", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5411 ./strace-static-x86_64: Process 5411 attached [pid 4997] <... umount2 resumed>) = 0 [pid 5411] chdir("./33" [pid 4997] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5411] <... chdir resumed>) = 0 [pid 5411] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5411] setpgid(0, 0) = 0 [pid 5411] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5411] <... openat resumed>) = 3 [pid 5411] write(3, "1000", 4 [pid 4997] lstat("./31/file1", [pid 5411] <... write resumed>) = 4 [pid 5411] close(3) = 0 [pid 5411] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5411] memfd_create("syzkaller", 0 [pid 4997] umount2("./31/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5411] <... memfd_create resumed>) = 3 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5411] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4997] openat(AT_FDCWD, "./31/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5411] <... mmap resumed>) = 0x7f18ca796000 [pid 4997] <... openat resumed>) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 5411] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] <... umount2 resumed>) = 0 [pid 4997] rmdir("./31/file1" [pid 4998] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... rmdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] getdents64(3, [pid 4998] lstat("./32/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] close(3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... close resumed>) = 0 [pid 5411] <... write resumed>) = 2097152 [pid 4998] openat(AT_FDCWD, "./32/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] rmdir("./31" [pid 5411] munmap(0x7f18ca796000, 2097152 [pid 4998] <... openat resumed>) = 4 [pid 4997] <... rmdir resumed>) = 0 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 4997] mkdir("./32", 0777 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] <... mkdir resumed>) = 0 [pid 4998] getdents64(4, [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5411] <... munmap resumed>) = 0 [pid 4998] close(4 [pid 4997] <... openat resumed>) = 3 [pid 5411] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4998] <... close resumed>) = 0 [pid 5411] <... openat resumed>) = 4 [pid 4998] rmdir("./32/file1" [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5411] ioctl(4, LOOP_SET_FD, 3 [pid 4998] <... rmdir resumed>) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] getdents64(3, [pid 4997] close(3 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 4998] close(3 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... close resumed>) = 0 [pid 4998] rmdir("./32" [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5412 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] mkdir("./33", 0777 [pid 4999] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5411] <... ioctl resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5411] close(3 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5411] <... close resumed>) = 0 [pid 4999] lstat("./32/file1", [pid 4998] <... openat resumed>) = 3 [pid 5411] mkdir("./file1", 0777 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5411] <... mkdir resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5412 attached [pid 5411] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5412] chdir("./32" [pid 4999] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5412] <... chdir resumed>) = 0 [pid 5412] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5412] <... prctl resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./32/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5412] setpgid(0, 0 [pid 4999] <... openat resumed>) = 4 [pid 5412] <... setpgid resumed>) = 0 [pid 4999] fstat(4, [pid 5412] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] close(3 [pid 5412] <... openat resumed>) = 3 [pid 4999] getdents64(4, [pid 5412] write(3, "1000", 4 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5412] <... write resumed>) = 4 [pid 4999] getdents64(4, [pid 5412] close(3 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [ 137.543418][ T5411] loop4: detected capacity change from 0 to 4096 [pid 5412] <... close resumed>) = 0 [pid 4999] close(4 [pid 5412] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... close resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5412] <... symlink resumed>) = 0 [pid 4999] rmdir("./32/file1" [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5412] memfd_create("syzkaller", 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5412] <... memfd_create resumed>) = 3 [pid 4999] getdents64(3, [pid 5412] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5412] <... mmap resumed>) = 0x7f18ca796000 [pid 4999] close(3./strace-static-x86_64: Process 5413 attached ) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5413 [pid 4999] rmdir("./32") = 0 [pid 4999] mkdir("./33", 0777 [pid 5413] chdir("./33" [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5413] <... chdir resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5413] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5413] <... prctl resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5413] setpgid(0, 0 [pid 4999] close(3 [pid 5413] <... setpgid resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5413] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5413] <... openat resumed>) = 3 [pid 5413] write(3, "1000", 4 [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5414 [pid 5413] <... write resumed>) = 4 [pid 5413] close(3) = 0 ./strace-static-x86_64: Process 5414 attached [pid 5413] symlink("/dev/binderfs", "./binderfs" [pid 5414] chdir("./33" [pid 5413] <... symlink resumed>) = 0 [pid 5414] <... chdir resumed>) = 0 [pid 5413] memfd_create("syzkaller", 0 [pid 5414] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5413] <... memfd_create resumed>) = 3 [pid 5414] <... prctl resumed>) = 0 [pid 5413] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5414] setpgid(0, 0 [pid 5413] <... mmap resumed>) = 0x7f18ca796000 [pid 5414] <... setpgid resumed>) = 0 [ 137.590368][ T5411] NILFS (loop4): invalid segment: Checksum error in segment payload [ 137.619535][ T5411] NILFS (loop4): trying rollback from an earlier position [pid 5414] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5414] write(3, "1000", 4) = 4 [pid 5414] close(3) = 0 [pid 5414] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5414] memfd_create("syzkaller", 0) = 3 [pid 5414] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5413] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5412] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 137.707494][ T5411] NILFS (loop4): recovery complete [pid 5414] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5411] <... mount resumed>) = 0 [pid 5411] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5411] chdir("./file1") = 0 [pid 5411] ioctl(4, LOOP_CLR_FD) = 0 [pid 5411] close(4) = 0 [pid 5411] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5411] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5412] <... write resumed>) = 2097152 [pid 5411] <... open resumed>) = 5 [pid 5411] ftruncate(5, 33587195 [pid 5412] munmap(0x7f18ca796000, 2097152 [pid 5411] <... ftruncate resumed>) = 0 [pid 5412] <... munmap resumed>) = 0 [ 137.736586][ T5415] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5411] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5411] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5412] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5411] <... open resumed>) = 7 [pid 5412] <... openat resumed>) = 4 [pid 5411] sendfile(6, 7, NULL, 281474978811909 [pid 5412] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5412] close(3) = 0 [pid 5412] mkdir("./file1", 0777) = 0 [pid 5412] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5413] <... write resumed>) = 2097152 [pid 5414] <... write resumed>) = 2097152 [pid 5414] munmap(0x7f18ca796000, 2097152) = 0 [pid 5413] munmap(0x7f18ca796000, 2097152 [pid 5414] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 137.804710][ T5412] loop0: detected capacity change from 0 to 4096 [pid 5414] ioctl(4, LOOP_SET_FD, 3 [pid 5413] <... munmap resumed>) = 0 [pid 5413] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5414] <... ioctl resumed>) = 0 [pid 5413] ioctl(4, LOOP_SET_FD, 3 [pid 5414] close(3) = 0 [pid 5414] mkdir("./file1", 0777) = 0 [ 137.849068][ T5414] loop2: detected capacity change from 0 to 4096 [ 137.863963][ T5412] NILFS (loop0): invalid segment: Checksum error in segment payload [ 137.876751][ T5413] loop1: detected capacity change from 0 to 4096 [pid 5414] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5413] <... ioctl resumed>) = 0 [pid 5413] close(3) = 0 [pid 5413] mkdir("./file1", 0777) = 0 [pid 5413] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5407] <... sendfile resumed>) = 1048576 [ 137.901055][ T5412] NILFS (loop0): trying rollback from an earlier position [ 137.921085][ T5414] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5407] exit_group(0) = ? [pid 5407] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5407, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5002] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [ 137.943813][ T5413] NILFS (loop1): invalid segment: Checksum error in segment payload [ 137.953549][ T5413] NILFS (loop1): trying rollback from an earlier position [ 137.965831][ T5414] NILFS (loop2): trying rollback from an earlier position [ 137.986009][ T5412] NILFS (loop0): recovery complete [pid 5002] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./33/binderfs") = 0 [ 138.000474][ T5413] NILFS (loop1): recovery complete [pid 5002] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5412] <... mount resumed>) = 0 [pid 5412] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5412] chdir("./file1") = 0 [pid 5412] ioctl(4, LOOP_CLR_FD) = 0 [pid 5412] close(4 [pid 5413] <... mount resumed>) = 0 [pid 5412] <... close resumed>) = 0 [pid 5412] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5412] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5413] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5412] <... open resumed>) = 5 [pid 5412] ftruncate(5, 33587195) = 0 [pid 5413] <... openat resumed>) = 3 [pid 5412] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5413] chdir("./file1" [pid 5408] <... sendfile resumed>) = 1048576 [pid 5413] <... chdir resumed>) = 0 [pid 5412] <... open resumed>) = 6 [pid 5408] exit_group(0 [pid 5413] ioctl(4, LOOP_CLR_FD [pid 5408] <... exit_group resumed>) = ? [pid 5413] <... ioctl resumed>) = 0 [pid 5412] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5408] +++ exited with 0 +++ [pid 5413] close(4) = 0 [pid 5412] <... open resumed>) = 7 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5408, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5413] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5412] sendfile(6, 7, NULL, 281474978811909 [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 5413] <... open resumed>) = 4 [pid 5000] <... restart_syscall resumed>) = 0 [pid 5413] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5413] ftruncate(5, 33587195) = 0 [pid 5000] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5413] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5413] <... open resumed>) = 6 [pid 5000] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5413] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5000] <... openat resumed>) = 3 [pid 5413] <... open resumed>) = 7 [pid 5000] fstat(3, [pid 5413] sendfile(6, 7, NULL, 281474978811909 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 138.035807][ T5416] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.051328][ T5417] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./33/binderfs") = 0 [ 138.107338][ T5414] NILFS (loop2): recovery complete [pid 5000] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5414] <... mount resumed>) = 0 [pid 5414] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5414] chdir("./file1") = 0 [pid 5414] ioctl(4, LOOP_CLR_FD) = 0 [pid 5414] close(4) = 0 [pid 5414] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5002] <... umount2 resumed>) = 0 [pid 5414] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5414] <... open resumed>) = 5 [pid 5414] ftruncate(5, 33587195 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5414] <... ftruncate resumed>) = 0 [pid 5002] lstat("./33/file1", [pid 5414] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5414] <... open resumed>) = 6 [ 138.165922][ T5418] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5414] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5414] <... open resumed>) = 7 [pid 5002] openat(AT_FDCWD, "./33/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5414] sendfile(6, 7, NULL, 281474978811909 [pid 5002] <... openat resumed>) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./33/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./33") = 0 [pid 5002] mkdir("./34", 0777 [pid 5000] <... umount2 resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5419 ./strace-static-x86_64: Process 5419 attached [pid 5419] chdir("./34") = 0 [pid 5419] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5419] setpgid(0, 0) = 0 [pid 5419] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5000] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./33/file1", [pid 5419] write(3, "1000", 4) = 4 [pid 5419] close(3 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5419] <... close resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./33/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5419] symlink("/dev/binderfs", "./binderfs" [pid 5000] <... openat resumed>) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5419] <... symlink resumed>) = 0 [pid 5419] memfd_create("syzkaller", 0 [pid 5000] getdents64(4, [pid 5419] <... memfd_create resumed>) = 3 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, [pid 5419] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./33/file1" [pid 5419] <... mmap resumed>) = 0x7f18ca796000 [pid 5000] <... rmdir resumed>) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./33") = 0 [pid 5000] mkdir("./34", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5420 ./strace-static-x86_64: Process 5420 attached [pid 5420] chdir("./34") = 0 [pid 5420] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5420] setpgid(0, 0) = 0 [pid 5420] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5420] write(3, "1000", 4) = 4 [pid 5420] close(3) = 0 [pid 5420] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5420] memfd_create("syzkaller", 0) = 3 [pid 5420] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5419] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5420] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5419] <... write resumed>) = 2097152 [pid 5419] munmap(0x7f18ca796000, 2097152) = 0 [pid 5419] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5419] ioctl(4, LOOP_SET_FD, 3 [pid 5420] <... write resumed>) = 2097152 [pid 5420] munmap(0x7f18ca796000, 2097152 [pid 5419] <... ioctl resumed>) = 0 [pid 5419] close(3 [pid 5420] <... munmap resumed>) = 0 [pid 5419] <... close resumed>) = 0 [pid 5420] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5419] mkdir("./file1", 0777 [ 138.548874][ T5419] loop5: detected capacity change from 0 to 4096 [pid 5420] ioctl(4, LOOP_SET_FD, 3 [pid 5419] <... mkdir resumed>) = 0 [pid 5419] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5420] <... ioctl resumed>) = 0 [pid 5420] close(3) = 0 [pid 5420] mkdir("./file1", 0777) = 0 [ 138.601155][ T5420] loop3: detected capacity change from 0 to 4096 [ 138.624338][ T5419] NILFS (loop5): invalid segment: Checksum error in segment payload [ 138.639706][ T5419] NILFS (loop5): trying rollback from an earlier position [ 138.656051][ T5420] NILFS (loop3): invalid segment: Checksum error in segment payload [ 138.695334][ T5420] NILFS (loop3): trying rollback from an earlier position [pid 5420] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5419] <... mount resumed>) = 0 [pid 5419] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5419] chdir("./file1") = 0 [pid 5419] ioctl(4, LOOP_CLR_FD) = 0 [ 138.724901][ T5419] NILFS (loop5): recovery complete [ 138.743569][ T5421] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5419] close(4) = 0 [pid 5419] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5419] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5419] ftruncate(5, 33587195) = 0 [pid 5419] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5419] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 138.795229][ T5420] NILFS (loop3): recovery complete [pid 5419] sendfile(6, 7, NULL, 281474978811909 [pid 5420] <... mount resumed>) = 0 [pid 5420] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5420] chdir("./file1") = 0 [pid 5411] <... sendfile resumed>) = 1048576 [pid 5420] ioctl(4, LOOP_CLR_FD) = 0 [pid 5411] exit_group(0 [pid 5420] close(4) = 0 [pid 5411] <... exit_group resumed>) = ? [pid 5420] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5420] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5411] +++ exited with 0 +++ [pid 5420] ftruncate(5, 33587195 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5411, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} --- [pid 5420] <... ftruncate resumed>) = 0 [pid 5420] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5420] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5420] sendfile(6, 7, NULL, 281474978811909 [pid 5001] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 138.835873][ T5422] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] lstat("./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./33/binderfs") = 0 [pid 5001] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5001] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./33/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./33/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./33/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./33") = 0 [pid 5001] mkdir("./34", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5423 ./strace-static-x86_64: Process 5423 attached [pid 5423] chdir("./34") = 0 [pid 5423] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5423] setpgid(0, 0) = 0 [pid 5423] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5423] write(3, "1000", 4) = 4 [pid 5423] close(3) = 0 [pid 5423] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5423] memfd_create("syzkaller", 0) = 3 [pid 5423] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5413] <... sendfile resumed>) = 1048576 [pid 5413] exit_group(0) = ? [pid 5413] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5413, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 4998] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5423] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5412] <... sendfile resumed>) = 1048576 [pid 4998] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5412] exit_group(0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5412] <... exit_group resumed>) = ? [pid 4998] lstat("./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./33/binderfs" [pid 5412] +++ exited with 0 +++ [pid 4998] <... unlink resumed>) = 0 [pid 4998] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5412, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [pid 4997] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4997] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./32/binderfs") = 0 [pid 4997] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5414] <... sendfile resumed>) = 1048576 [pid 5414] exit_group(0) = ? [pid 5414] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5414, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./33/binderfs" [pid 5423] <... write resumed>) = 2097152 [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5423] munmap(0x7f18ca796000, 2097152) = 0 [pid 5423] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5423] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5423] close(3) = 0 [pid 5423] mkdir("./file1", 0777) = 0 [ 139.348396][ T5423] loop4: detected capacity change from 0 to 4096 [pid 5423] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./33/file1", [pid 4997] <... umount2 resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./33/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./33/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./33") = 0 [pid 4998] mkdir("./34", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./32/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./32/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5424 [pid 4997] openat(AT_FDCWD, "./32/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 139.435622][ T5423] NILFS (loop4): invalid segment: Checksum error in segment payload [ 139.474849][ T5423] NILFS (loop4): trying rollback from an earlier position [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./32/file1") = 0 [pid 4997] getdents64(3, ./strace-static-x86_64: Process 5424 attached 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5424] chdir("./34" [pid 4999] <... umount2 resumed>) = 0 [pid 5424] <... chdir resumed>) = 0 [pid 4997] close(3 [pid 5424] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4997] <... close resumed>) = 0 [pid 5424] <... prctl resumed>) = 0 [pid 5424] setpgid(0, 0 [pid 4999] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] rmdir("./32" [pid 5424] <... setpgid resumed>) = 0 [pid 5424] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... rmdir resumed>) = 0 [pid 5424] <... openat resumed>) = 3 [pid 4999] lstat("./33/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5424] write(3, "1000", 4 [pid 4999] openat(AT_FDCWD, "./33/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] mkdir("./33", 0777 [pid 5424] <... write resumed>) = 4 [pid 4999] <... openat resumed>) = 4 [pid 5424] close(3 [pid 4999] fstat(4, [pid 4997] <... mkdir resumed>) = 0 [pid 5424] <... close resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5424] symlink("/dev/binderfs", "./binderfs" [pid 4999] getdents64(4, [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5424] <... symlink resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, [pid 5424] memfd_create("syzkaller", 0 [pid 4997] <... openat resumed>) = 3 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5424] <... memfd_create resumed>) = 3 [pid 4999] close(4 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5424] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./33/file1" [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5424] <... mmap resumed>) = 0x7f18ca796000 [pid 4999] <... rmdir resumed>) = 0 [pid 4997] close(3 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] <... close resumed>) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./33") = 0 [pid 4999] mkdir("./34", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5425 ./strace-static-x86_64: Process 5425 attached [pid 5425] chdir("./34") = 0 [pid 5425] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5425] setpgid(0, 0) = 0 [pid 5425] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5425] write(3, "1000", 4) = 4 [pid 5425] close(3) = 0 [pid 5425] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5427 [pid 5425] memfd_create("syzkaller", 0) = 3 [pid 5425] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5427 attached ) = 0x7f18ca796000 [pid 5427] chdir("./33") = 0 [pid 5427] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5427] setpgid(0, 0) = 0 [pid 5427] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 139.587884][ T5423] NILFS (loop4): recovery complete [pid 5427] write(3, "1000", 4) = 4 [pid 5423] <... mount resumed>) = 0 [pid 5427] close(3 [pid 5423] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5427] <... close resumed>) = 0 [pid 5423] <... openat resumed>) = 3 [pid 5427] symlink("/dev/binderfs", "./binderfs" [pid 5423] chdir("./file1" [pid 5427] <... symlink resumed>) = 0 [pid 5423] <... chdir resumed>) = 0 [pid 5427] memfd_create("syzkaller", 0 [pid 5423] ioctl(4, LOOP_CLR_FD [pid 5427] <... memfd_create resumed>) = 3 [pid 5423] <... ioctl resumed>) = 0 [pid 5427] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5423] close(4 [pid 5427] <... mmap resumed>) = 0x7f18ca796000 [pid 5423] <... close resumed>) = 0 [pid 5423] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5423] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5423] ftruncate(5, 33587195) = 0 [pid 5423] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5423] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5424] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5423] <... open resumed>) = 7 [ 139.629646][ T5426] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5423] sendfile(6, 7, NULL, 281474978811909 [pid 5425] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5427] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5425] <... write resumed>) = 2097152 [pid 5424] <... write resumed>) = 2097152 [pid 5424] munmap(0x7f18ca796000, 2097152) = 0 [pid 5425] munmap(0x7f18ca796000, 2097152 [pid 5424] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5424] ioctl(4, LOOP_SET_FD, 3 [pid 5425] <... munmap resumed>) = 0 [pid 5425] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5424] <... ioctl resumed>) = 0 [pid 5425] ioctl(4, LOOP_SET_FD, 3 [pid 5424] close(3) = 0 [pid 5425] <... ioctl resumed>) = 0 [pid 5425] close(3 [pid 5424] mkdir("./file1", 0777) = 0 [pid 5424] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5427] <... write resumed>) = 2097152 [ 139.784566][ T5424] loop1: detected capacity change from 0 to 4096 [ 139.817315][ T5425] loop2: detected capacity change from 0 to 4096 [pid 5425] <... close resumed>) = 0 [pid 5427] munmap(0x7f18ca796000, 2097152 [pid 5425] mkdir("./file1", 0777 [pid 5427] <... munmap resumed>) = 0 [pid 5425] <... mkdir resumed>) = 0 [pid 5425] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5427] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5427] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5427] close(3) = 0 [pid 5420] <... sendfile resumed>) = 1048576 [pid 5420] exit_group(0) = ? [pid 5419] <... sendfile resumed>) = 1048576 [pid 5420] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5420, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5427] mkdir("./file1", 0777) = 0 [ 139.848742][ T5424] NILFS (loop1): invalid segment: Checksum error in segment payload [ 139.861554][ T5424] NILFS (loop1): trying rollback from an earlier position [ 139.865140][ T5427] loop0: detected capacity change from 0 to 4096 [ 139.892383][ T5424] NILFS (loop1): recovery complete [pid 5427] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5000] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5419] exit_group(0) = ? [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5419] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5419, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 5000] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, [pid 5002] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] getdents64(3, [pid 5002] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] fstat(3, [pid 5000] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] lstat("./34/binderfs", [pid 5002] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] unlink("./34/binderfs" [pid 5002] lstat("./34/binderfs", [pid 5000] <... unlink resumed>) = 0 [ 139.898075][ T5425] NILFS (loop2): invalid segment: Checksum error in segment payload [ 139.907328][ T5425] NILFS (loop2): trying rollback from an earlier position [ 139.934210][ T5427] NILFS (loop0): invalid segment: Checksum error in segment payload [ 139.934603][ T5425] NILFS (loop2): recovery complete [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] unlink("./34/binderfs" [pid 5424] <... mount resumed>) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 5424] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5002] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5424] <... openat resumed>) = 3 [pid 5424] chdir("./file1") = 0 [pid 5424] ioctl(4, LOOP_CLR_FD) = 0 [pid 5424] close(4) = 0 [pid 5424] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5425] <... mount resumed>) = 0 [pid 5424] <... open resumed>) = 4 [pid 5425] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5424] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5425] <... openat resumed>) = 3 [pid 5424] <... open resumed>) = 5 [pid 5425] chdir("./file1" [pid 5424] ftruncate(5, 33587195 [pid 5425] <... chdir resumed>) = 0 [pid 5425] ioctl(4, LOOP_CLR_FD [pid 5424] <... ftruncate resumed>) = 0 [pid 5425] <... ioctl resumed>) = 0 [pid 5424] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5425] close(4) = 0 [pid 5424] <... open resumed>) = 6 [pid 5425] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5424] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5425] <... open resumed>) = 4 [pid 5425] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5424] <... open resumed>) = 7 [pid 5425] <... open resumed>) = 5 [pid 5424] sendfile(6, 7, NULL, 281474978811909 [pid 5425] ftruncate(5, 33587195) = 0 [pid 5425] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5425] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 139.943922][ T5427] NILFS (loop0): trying rollback from an earlier position [ 139.955498][ T5428] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 139.987714][ T5429] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5425] sendfile(6, 7, NULL, 281474978811909 [pid 5427] <... mount resumed>) = 0 [pid 5427] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5427] chdir("./file1") = 0 [pid 5427] ioctl(4, LOOP_CLR_FD) = 0 [pid 5427] close(4) = 0 [pid 5427] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [ 140.016679][ T5427] NILFS (loop0): recovery complete [pid 5427] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5427] ftruncate(5, 33587195) = 0 [pid 5427] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5427] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 140.039032][ T5430] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5427] sendfile(6, 7, NULL, 281474978811909 [pid 5002] <... umount2 resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5002] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./34/file1", [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] lstat("./34/file1", [pid 5002] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] openat(AT_FDCWD, "./34/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... openat resumed>) = 4 [pid 5000] openat(AT_FDCWD, "./34/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] fstat(4, [pid 5000] <... openat resumed>) = 4 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] fstat(4, [pid 5002] getdents64(4, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, [pid 5002] getdents64(4, [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] getdents64(4, [pid 5002] close(4 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] <... close resumed>) = 0 [pid 5000] close(4 [pid 5002] rmdir("./34/file1" [pid 5000] <... close resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5000] rmdir("./34/file1" [pid 5002] getdents64(3, [pid 5000] <... rmdir resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] getdents64(3, [pid 5002] close(3 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] <... close resumed>) = 0 [pid 5000] close(3 [pid 5002] rmdir("./34" [pid 5000] <... close resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5000] rmdir("./34" [pid 5002] mkdir("./35", 0777 [pid 5000] <... rmdir resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5000] mkdir("./35", 0777 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] <... mkdir resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5000] <... openat resumed>) = 3 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5002] close(3 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... close resumed>) = 0 [pid 5000] close(3 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5431 ./strace-static-x86_64: Process 5432 attached [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5432 ./strace-static-x86_64: Process 5431 attached [pid 5432] chdir("./35") = 0 [pid 5431] chdir("./35") = 0 [pid 5431] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5431] setpgid(0, 0) = 0 [pid 5431] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5432] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5431] write(3, "1000", 4 [pid 5432] <... prctl resumed>) = 0 [pid 5431] <... write resumed>) = 4 [pid 5431] close(3) = 0 [pid 5432] setpgid(0, 0 [pid 5431] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5431] memfd_create("syzkaller", 0) = 3 [pid 5431] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5432] <... setpgid resumed>) = 0 [pid 5432] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5432] write(3, "1000", 4) = 4 [pid 5432] close(3) = 0 [pid 5432] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5432] memfd_create("syzkaller", 0) = 3 [pid 5432] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5432] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5431] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5432] <... write resumed>) = 2097152 [pid 5432] munmap(0x7f18ca796000, 2097152) = 0 [pid 5432] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5432] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5432] close(3 [pid 5431] <... write resumed>) = 2097152 [pid 5431] munmap(0x7f18ca796000, 2097152 [pid 5432] <... close resumed>) = 0 [pid 5432] mkdir("./file1", 0777 [pid 5431] <... munmap resumed>) = 0 [pid 5432] <... mkdir resumed>) = 0 [pid 5431] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5432] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5431] <... openat resumed>) = 4 [ 140.543990][ T5432] loop3: detected capacity change from 0 to 4096 [ 140.581361][ T5431] loop5: detected capacity change from 0 to 4096 [pid 5431] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5431] close(3) = 0 [pid 5431] mkdir("./file1", 0777) = 0 [ 140.586244][ T5432] NILFS (loop3): invalid segment: Checksum error in segment payload [ 140.629193][ T5432] NILFS (loop3): trying rollback from an earlier position [ 140.642203][ T5431] NILFS (loop5): invalid segment: Checksum error in segment payload [ 140.676934][ T5431] NILFS (loop5): trying rollback from an earlier position [ 140.715952][ T5432] NILFS (loop3): recovery complete [pid 5431] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5432] <... mount resumed>) = 0 [pid 5432] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5432] chdir("./file1") = 0 [pid 5432] ioctl(4, LOOP_CLR_FD) = 0 [ 140.737250][ T5433] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.771085][ T5431] NILFS (loop5): recovery complete [pid 5432] close(4) = 0 [pid 5432] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5431] <... mount resumed>) = 0 [pid 5432] <... open resumed>) = 4 [pid 5432] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5431] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5432] ftruncate(5, 33587195) = 0 [pid 5431] <... openat resumed>) = 3 [pid 5432] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5431] chdir("./file1" [pid 5432] <... open resumed>) = 6 [pid 5431] <... chdir resumed>) = 0 [pid 5432] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5431] ioctl(4, LOOP_CLR_FD [pid 5432] <... open resumed>) = 7 [pid 5432] sendfile(6, 7, NULL, 281474978811909 [pid 5431] <... ioctl resumed>) = 0 [ 140.783817][ T5434] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5431] close(4) = 0 [pid 5423] <... sendfile resumed>) = 1048576 [pid 5431] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5423] exit_group(0 [pid 5431] <... open resumed>) = 4 [pid 5423] <... exit_group resumed>) = ? [pid 5431] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5423] +++ exited with 0 +++ [pid 5431] <... open resumed>) = 5 [pid 5431] ftruncate(5, 33587195 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5423, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5431] <... ftruncate resumed>) = 0 [pid 5001] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5431] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5001] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5431] <... open resumed>) = 6 [pid 5001] <... openat resumed>) = 3 [pid 5431] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5001] fstat(3, [pid 5431] <... open resumed>) = 7 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5431] sendfile(6, 7, NULL, 281474978811909 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./34/binderfs") = 0 [pid 5001] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5427] <... sendfile resumed>) = 1048576 [pid 5427] exit_group(0) = ? [pid 5427] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5427, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5425] <... sendfile resumed>) = 1048576 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5425] exit_group(0 [pid 5001] lstat("./34/file1", [pid 4997] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5425] <... exit_group resumed>) = ? [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... openat resumed>) = 3 [pid 4997] fstat(3, [pid 5425] +++ exited with 0 +++ [pid 5001] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5425, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=29 /* 0.29 s */} --- [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5424] <... sendfile resumed>) = 1048576 [pid 5001] openat(AT_FDCWD, "./34/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5424] exit_group(0 [pid 5001] <... openat resumed>) = 4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./33/binderfs", [pid 5424] <... exit_group resumed>) = ? [pid 5001] fstat(4, [pid 4999] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5424] +++ exited with 0 +++ [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4997] unlink("./33/binderfs" [pid 5001] getdents64(4, [pid 4999] fstat(3, [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5424, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 4997] <... unlink resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(4, [pid 4999] getdents64(3, [pid 5001] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] close(4 [pid 4999] lstat("./34/binderfs", [pid 4998] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... close resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] rmdir("./34/file1" [pid 4999] unlink("./34/binderfs" [pid 4998] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... rmdir resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5001] getdents64(3, [pid 4999] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] fstat(3, [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] close(3 [pid 4998] getdents64(3, [pid 5001] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] rmdir("./34" [pid 4998] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./34/binderfs") = 0 [pid 4998] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... rmdir resumed>) = 0 [pid 5001] mkdir("./35", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5435 ./strace-static-x86_64: Process 5435 attached [pid 5435] chdir("./35") = 0 [pid 5435] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5435] setpgid(0, 0) = 0 [pid 5435] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5435] write(3, "1000", 4) = 4 [pid 5435] close(3) = 0 [pid 5435] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5435] memfd_create("syzkaller", 0) = 3 [pid 5435] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5435] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./33/file1", [pid 4999] <... umount2 resumed>) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./33/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = 0 [pid 4999] lstat("./34/file1", [pid 4998] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] openat(AT_FDCWD, "./33/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... openat resumed>) = 4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] fstat(4, [pid 4999] openat(AT_FDCWD, "./34/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] lstat("./34/file1", [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... openat resumed>) = 4 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, [pid 4999] fstat(4, [pid 4998] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] getdents64(4, [pid 4999] getdents64(4, [pid 4998] openat(AT_FDCWD, "./34/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, [pid 4998] <... openat resumed>) = 4 [pid 4997] close(4 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] fstat(4, [pid 4999] close(4 [pid 4997] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] rmdir("./33/file1" [pid 4999] rmdir("./34/file1" [pid 4998] getdents64(4, [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, [pid 4998] getdents64(4, [pid 4997] getdents64(3, [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(3 [pid 4998] close(4 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 4999] rmdir("./34" [pid 4997] close(3 [pid 4998] rmdir("./34/file1" [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./35", 0777 [pid 4998] <... rmdir resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 4997] rmdir("./33" [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] getdents64(3, [pid 4997] <... rmdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4998] close(3 [pid 4997] mkdir("./34", 0777 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4998] <... close resumed>) = 0 [pid 4997] <... mkdir resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] rmdir("./34" [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4999] close(3 [pid 4998] <... rmdir resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [pid 4999] <... close resumed>) = 0 [pid 5435] <... write resumed>) = 2097152 [pid 5435] munmap(0x7f18ca796000, 2097152 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4998] mkdir("./35", 0777 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] close(3 [pid 5435] <... munmap resumed>) = 0 [pid 5435] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5435] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5436 [pid 4998] <... mkdir resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... openat resumed>) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5437 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5438 ./strace-static-x86_64: Process 5437 attached ./strace-static-x86_64: Process 5436 attached [pid 5437] chdir("./34") = 0 [pid 5437] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5437] setpgid(0, 0 [pid 5436] chdir("./35" [pid 5437] <... setpgid resumed>) = 0 [pid 5437] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5436] <... chdir resumed>) = 0 [pid 5436] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5436] setpgid(0, 0./strace-static-x86_64: Process 5438 attached ) = 0 [pid 5438] chdir("./35" [pid 5437] <... openat resumed>) = 3 [pid 5436] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5438] <... chdir resumed>) = 0 [pid 5437] write(3, "1000", 4 [pid 5436] <... openat resumed>) = 3 [pid 5438] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5437] <... write resumed>) = 4 [pid 5436] write(3, "1000", 4 [pid 5438] <... prctl resumed>) = 0 [pid 5437] close(3 [pid 5436] <... write resumed>) = 4 [pid 5438] setpgid(0, 0 [pid 5437] <... close resumed>) = 0 [pid 5436] close(3 [pid 5438] <... setpgid resumed>) = 0 [pid 5437] symlink("/dev/binderfs", "./binderfs" [pid 5436] <... close resumed>) = 0 [pid 5438] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5437] <... symlink resumed>) = 0 [pid 5436] symlink("/dev/binderfs", "./binderfs" [pid 5438] <... openat resumed>) = 3 [pid 5437] memfd_create("syzkaller", 0 [pid 5436] <... symlink resumed>) = 0 [pid 5435] <... ioctl resumed>) = 0 [ 141.457462][ T5435] loop4: detected capacity change from 0 to 4096 [pid 5438] write(3, "1000", 4 [pid 5437] <... memfd_create resumed>) = 3 [pid 5436] memfd_create("syzkaller", 0 [pid 5438] <... write resumed>) = 4 [pid 5437] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5436] <... memfd_create resumed>) = 3 [pid 5435] close(3 [pid 5438] close(3 [pid 5437] <... mmap resumed>) = 0x7f18ca796000 [pid 5436] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5438] <... close resumed>) = 0 [pid 5436] <... mmap resumed>) = 0x7f18ca796000 [pid 5435] <... close resumed>) = 0 [pid 5438] symlink("/dev/binderfs", "./binderfs" [pid 5435] mkdir("./file1", 0777 [pid 5438] <... symlink resumed>) = 0 [pid 5435] <... mkdir resumed>) = 0 [pid 5438] memfd_create("syzkaller", 0 [pid 5435] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5438] <... memfd_create resumed>) = 3 [pid 5438] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5438] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5437] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 141.572150][ T5435] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5436] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5437] <... write resumed>) = 2097152 [pid 5437] munmap(0x7f18ca796000, 2097152 [pid 5438] <... write resumed>) = 2097152 [pid 5437] <... munmap resumed>) = 0 [ 141.623232][ T5435] NILFS (loop4): trying rollback from an earlier position [pid 5437] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5438] munmap(0x7f18ca796000, 2097152 [pid 5436] <... write resumed>) = 2097152 [pid 5437] <... openat resumed>) = 4 [pid 5435] <... mount resumed>) = 0 [pid 5436] munmap(0x7f18ca796000, 2097152 [pid 5437] ioctl(4, LOOP_SET_FD, 3 [pid 5438] <... munmap resumed>) = 0 [pid 5436] <... munmap resumed>) = 0 [pid 5435] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5438] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5435] <... openat resumed>) = 3 [pid 5438] <... openat resumed>) = 4 [pid 5435] chdir("./file1" [pid 5438] ioctl(4, LOOP_SET_FD, 3 [pid 5435] <... chdir resumed>) = 0 [pid 5437] <... ioctl resumed>) = 0 [pid 5436] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5435] ioctl(4, LOOP_CLR_FD [pid 5437] close(3 [pid 5436] <... openat resumed>) = 4 [pid 5437] <... close resumed>) = 0 [pid 5436] ioctl(4, LOOP_SET_FD, 3 [pid 5437] mkdir("./file1", 0777 [pid 5435] <... ioctl resumed>) = 0 [pid 5437] <... mkdir resumed>) = 0 [pid 5437] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5435] close(4 [pid 5431] <... sendfile resumed>) = 1048576 [pid 5435] <... close resumed>) = 0 [pid 5431] exit_group(0 [pid 5436] <... ioctl resumed>) = 0 [pid 5436] close(3) = 0 [pid 5436] mkdir("./file1", 0777 [pid 5438] <... ioctl resumed>) = 0 [pid 5435] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5431] <... exit_group resumed>) = ? [ 141.663688][ T5435] NILFS (loop4): recovery complete [ 141.672720][ T5439] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.686452][ T5437] loop0: detected capacity change from 0 to 4096 [ 141.690387][ T5438] loop1: detected capacity change from 0 to 4096 [ 141.699041][ T5436] loop2: detected capacity change from 0 to 4096 [pid 5438] close(3 [pid 5435] <... open resumed>) = 4 [pid 5431] +++ exited with 0 +++ [pid 5438] <... close resumed>) = 0 [pid 5436] <... mkdir resumed>) = 0 [pid 5435] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5431, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5436] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5002] <... restart_syscall resumed>) = 0 [pid 5438] mkdir("./file1", 0777 [pid 5435] <... open resumed>) = 5 [pid 5002] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5438] <... mkdir resumed>) = 0 [pid 5435] ftruncate(5, 33587195 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 5438] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5435] <... ftruncate resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5435] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5435] <... open resumed>) = 6 [pid 5002] lstat("./35/binderfs", [pid 5435] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./35/binderfs") = 0 [ 141.743540][ T5437] NILFS (loop0): invalid segment: Checksum error in segment payload [ 141.751599][ T5437] NILFS (loop0): trying rollback from an earlier position [ 141.769796][ T5436] NILFS (loop2): invalid segment: Checksum error in segment payload [ 141.786110][ T5436] NILFS (loop2): trying rollback from an earlier position [pid 5002] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5435] <... open resumed>) = 7 [pid 5435] sendfile(6, 7, NULL, 281474978811909 [pid 5432] <... sendfile resumed>) = 1048576 [ 141.788631][ T5438] NILFS (loop1): invalid segment: Checksum error in segment payload [ 141.814000][ T5437] NILFS (loop0): recovery complete [ 141.827619][ T5438] NILFS (loop1): trying rollback from an earlier position [pid 5432] exit_group(0) = ? [pid 5437] <... mount resumed>) = 0 [pid 5437] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5432] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5432, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5000] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5437] chdir("./file1" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5437] <... chdir resumed>) = 0 [pid 5437] ioctl(4, LOOP_CLR_FD) = 0 [pid 5437] close(4) = 0 [pid 5437] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5000] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5437] <... open resumed>) = 4 [pid 5000] <... openat resumed>) = 3 [pid 5437] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5000] fstat(3, [pid 5437] <... open resumed>) = 5 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5437] ftruncate(5, 33587195 [ 141.855054][ T5436] NILFS (loop2): recovery complete [ 141.865061][ T5440] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] getdents64(3, [pid 5437] <... ftruncate resumed>) = 0 [pid 5436] <... mount resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5437] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5436] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5002] <... umount2 resumed>) = 0 [pid 5000] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5437] <... open resumed>) = 6 [pid 5436] <... openat resumed>) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5437] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5436] chdir("./file1" [pid 5002] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] lstat("./35/binderfs", [pid 5437] <... open resumed>) = 7 [pid 5436] <... chdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 141.911137][ T5441] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.911934][ T5438] NILFS (loop1): recovery complete [pid 5437] sendfile(6, 7, NULL, 281474978811909 [pid 5436] ioctl(4, LOOP_CLR_FD [pid 5002] lstat("./35/file1", [pid 5000] unlink("./35/binderfs" [pid 5438] <... mount resumed>) = 0 [pid 5436] <... ioctl resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 5000] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5436] close(4) = 0 [pid 5002] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5438] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5436] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5438] <... openat resumed>) = 3 [pid 5002] openat(AT_FDCWD, "./35/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5438] chdir("./file1" [pid 5436] <... open resumed>) = 4 [pid 5002] <... openat resumed>) = 4 [pid 5438] <... chdir resumed>) = 0 [pid 5436] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] fstat(4, [pid 5438] ioctl(4, LOOP_CLR_FD [pid 5436] <... open resumed>) = 5 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5438] <... ioctl resumed>) = 0 [pid 5436] ftruncate(5, 33587195 [pid 5002] getdents64(4, [pid 5438] close(4 [pid 5436] <... ftruncate resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5438] <... close resumed>) = 0 [pid 5436] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] getdents64(4, [pid 5438] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5436] <... open resumed>) = 6 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [ 141.961000][ T5442] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5438] <... open resumed>) = 4 [pid 5436] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5002] close(4 [pid 5438] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5436] <... open resumed>) = 7 [pid 5002] <... close resumed>) = 0 [pid 5438] <... open resumed>) = 5 [pid 5436] sendfile(6, 7, NULL, 281474978811909 [pid 5002] rmdir("./35/file1") = 0 [pid 5438] ftruncate(5, 33587195 [pid 5002] getdents64(3, [pid 5438] <... ftruncate resumed>) = 0 [pid 5438] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5438] <... open resumed>) = 6 [pid 5002] close(3 [pid 5000] <... umount2 resumed>) = 0 [pid 5438] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5002] <... close resumed>) = 0 [pid 5438] <... open resumed>) = 7 [pid 5002] rmdir("./35" [pid 5000] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5438] sendfile(6, 7, NULL, 281474978811909 [pid 5002] <... rmdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] mkdir("./36", 0777 [pid 5000] lstat("./35/file1", [pid 5002] <... mkdir resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... openat resumed>) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5000] openat(AT_FDCWD, "./35/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... openat resumed>) = 4 [pid 5002] close(3 [pid 5000] fstat(4, [pid 5002] <... close resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5443 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./35/file1") = 0 [pid 5000] getdents64(3, ./strace-static-x86_64: Process 5443 attached 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5443] chdir("./36" [pid 5000] close(3) = 0 [pid 5000] rmdir("./35" [pid 5443] <... chdir resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5443] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] mkdir("./36", 0777 [pid 5443] <... prctl resumed>) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 5443] setpgid(0, 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5443] <... setpgid resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5443] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5443] <... openat resumed>) = 3 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5443] write(3, "1000", 4 [pid 5000] close(3 [pid 5443] <... write resumed>) = 4 [pid 5000] <... close resumed>) = 0 [pid 5443] close(3 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5443] <... close resumed>) = 0 [pid 5443] symlink("/dev/binderfs", "./binderfs" [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5444 [pid 5443] <... symlink resumed>) = 0 [pid 5443] memfd_create("syzkaller", 0) = 3 ./strace-static-x86_64: Process 5444 attached [pid 5443] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5444] chdir("./36" [pid 5443] <... mmap resumed>) = 0x7f18ca796000 [pid 5444] <... chdir resumed>) = 0 [pid 5444] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5444] setpgid(0, 0) = 0 [pid 5444] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5444] write(3, "1000", 4) = 4 [pid 5444] close(3) = 0 [pid 5444] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5444] memfd_create("syzkaller", 0) = 3 [pid 5444] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5443] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5444] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5443] <... write resumed>) = 2097152 [pid 5443] munmap(0x7f18ca796000, 2097152) = 0 [pid 5443] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5443] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5443] close(3) = 0 [pid 5443] mkdir("./file1", 0777) = 0 [ 142.347632][ T5443] loop5: detected capacity change from 0 to 4096 [pid 5443] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5444] <... write resumed>) = 2097152 [pid 5444] munmap(0x7f18ca796000, 2097152) = 0 [pid 5444] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 142.407630][ T5443] NILFS (loop5): invalid segment: Checksum error in segment payload [ 142.442339][ T5443] NILFS (loop5): trying rollback from an earlier position [pid 5444] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5444] close(3) = 0 [pid 5444] mkdir("./file1", 0777) = 0 [ 142.469232][ T5444] loop3: detected capacity change from 0 to 4096 [ 142.500515][ T5444] NILFS (loop3): invalid segment: Checksum error in segment payload [ 142.507520][ T5443] NILFS (loop5): recovery complete [ 142.510805][ T5444] NILFS (loop3): trying rollback from an earlier position [pid 5444] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5443] <... mount resumed>) = 0 [pid 5443] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5443] chdir("./file1") = 0 [pid 5443] ioctl(4, LOOP_CLR_FD) = 0 [pid 5443] close(4) = 0 [pid 5443] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5443] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5443] ftruncate(5, 33587195) = 0 [pid 5443] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5443] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 142.568317][ T5445] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.595199][ T5444] NILFS (loop3): recovery complete [pid 5443] sendfile(6, 7, NULL, 281474978811909 [pid 5444] <... mount resumed>) = 0 [pid 5444] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5444] chdir("./file1") = 0 [pid 5444] ioctl(4, LOOP_CLR_FD) = 0 [pid 5444] close(4) = 0 [pid 5444] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5444] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5444] ftruncate(5, 33587195) = 0 [pid 5444] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5444] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 142.624258][ T5446] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5444] sendfile(6, 7, NULL, 281474978811909 [pid 5435] <... sendfile resumed>) = 1048576 [pid 5435] exit_group(0) = ? [pid 5435] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5435, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5001] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./35/binderfs") = 0 [pid 5001] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5437] <... sendfile resumed>) = 1048576 [pid 5437] exit_group(0) = ? [pid 5437] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5437, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 4997] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4997] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./34/binderfs") = 0 [pid 4997] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./35/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./35/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./35/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./35") = 0 [pid 5001] mkdir("./36", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5447 ./strace-static-x86_64: Process 5447 attached [pid 5436] <... sendfile resumed>) = 1048576 [pid 4997] <... umount2 resumed>) = 0 [pid 5447] chdir("./36" [pid 5436] exit_group(0 [pid 4997] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5447] <... chdir resumed>) = 0 [pid 5436] <... exit_group resumed>) = ? [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5447] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5436] +++ exited with 0 +++ [pid 4997] lstat("./34/file1", [pid 5447] <... prctl resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5436, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5447] setpgid(0, 0 [pid 4997] umount2("./34/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5447] <... setpgid resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5447] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4997] openat(AT_FDCWD, "./34/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5447] <... openat resumed>) = 3 [pid 4997] <... openat resumed>) = 4 [pid 5447] write(3, "1000", 4 [pid 4997] fstat(4, [pid 5447] <... write resumed>) = 4 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5447] close(3 [pid 4999] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] getdents64(4, [pid 5447] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5447] symlink("/dev/binderfs", "./binderfs" [pid 4997] getdents64(4, [pid 5447] <... symlink resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5447] memfd_create("syzkaller", 0 [pid 4999] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] close(4 [pid 5447] <... memfd_create resumed>) = 3 [pid 4999] <... openat resumed>) = 3 [pid 4997] <... close resumed>) = 0 [pid 5447] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] fstat(3, [pid 4997] rmdir("./34/file1" [pid 5447] <... mmap resumed>) = 0x7f18ca796000 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 5447] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] getdents64(3, [pid 4997] getdents64(3, [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] close(3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... close resumed>) = 0 [pid 4999] lstat("./35/binderfs", [pid 4997] rmdir("./34" [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 4997] mkdir("./35", 0777 [pid 5438] <... sendfile resumed>) = 1048576 [pid 4999] unlink("./35/binderfs" [pid 4997] <... mkdir resumed>) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3 [pid 5438] exit_group(0 [pid 4999] <... unlink resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5438] <... exit_group resumed>) = ? [pid 4999] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5448 [pid 5438] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5438, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./35/binderfs") = 0 [pid 4998] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5448 attached [pid 5448] chdir("./35") = 0 [pid 5448] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5448] setpgid(0, 0) = 0 [pid 5448] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5448] write(3, "1000", 4) = 4 [pid 5448] close(3) = 0 [pid 5448] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5448] memfd_create("syzkaller", 0) = 3 [pid 5448] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5447] <... write resumed>) = 2097152 [pid 5447] munmap(0x7f18ca796000, 2097152) = 0 [pid 5447] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5447] ioctl(4, LOOP_SET_FD, 3 [pid 5448] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5447] <... ioctl resumed>) = 0 [pid 5447] close(3) = 0 [pid 5447] mkdir("./file1", 0777) = 0 [ 143.395246][ T5447] loop4: detected capacity change from 0 to 4096 [pid 5447] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./35/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./35/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./35/file1") = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./35") = 0 [pid 4999] mkdir("./36", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 143.477579][ T5447] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 4999] close(3 [pid 5448] <... write resumed>) = 2097152 [pid 4999] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5449 [pid 4998] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5449 attached [pid 4998] lstat("./35/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5449] chdir("./36" [pid 4998] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5449] <... chdir resumed>) = 0 [pid 5448] munmap(0x7f18ca796000, 2097152 [pid 5449] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5449] <... prctl resumed>) = 0 [pid 5449] setpgid(0, 0 [pid 5448] <... munmap resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./35/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5449] <... setpgid resumed>) = 0 [pid 5449] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5448] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4998] <... openat resumed>) = 4 [pid 5449] <... openat resumed>) = 3 [pid 5448] <... openat resumed>) = 4 [pid 5449] write(3, "1000", 4 [pid 5448] ioctl(4, LOOP_SET_FD, 3 [pid 4998] fstat(4, [pid 5449] <... write resumed>) = 4 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5449] close(3) = 0 [pid 5449] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5449] memfd_create("syzkaller", 0) = 3 [pid 5449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4998] getdents64(4, [pid 5448] <... ioctl resumed>) = 0 [pid 5448] close(3) = 0 [pid 5448] mkdir("./file1", 0777) = 0 [ 143.530372][ T5447] NILFS (loop4): trying rollback from an earlier position [ 143.565898][ T5448] loop0: detected capacity change from 0 to 4096 [pid 5448] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4 [pid 5443] <... sendfile resumed>) = 1048576 [pid 4998] <... close resumed>) = 0 [pid 5443] exit_group(0 [pid 4998] rmdir("./35/file1" [pid 5443] <... exit_group resumed>) = ? [pid 5449] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] <... rmdir resumed>) = 0 [pid 5443] +++ exited with 0 +++ [pid 4998] getdents64(3, [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5443, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3 [pid 5002] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... close resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5002] fstat(3, [pid 4998] rmdir("./35" [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] <... rmdir resumed>) = 0 [ 143.604820][ T5448] NILFS (loop0): invalid segment: Checksum error in segment payload [ 143.618989][ T5447] NILFS (loop4): recovery complete [ 143.644628][ T5448] NILFS (loop0): trying rollback from an earlier position [pid 5002] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] mkdir("./36", 0777 [pid 5447] <... mount resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5447] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5002] lstat("./36/binderfs", [pid 5447] <... openat resumed>) = 3 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5447] chdir("./file1" [pid 5002] unlink("./36/binderfs" [pid 4998] <... mkdir resumed>) = 0 [pid 5447] <... chdir resumed>) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 5447] ioctl(4, LOOP_CLR_FD [pid 5002] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5447] <... ioctl resumed>) = 0 [pid 5447] close(4) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5447] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5447] <... open resumed>) = 4 [pid 5447] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5447] <... open resumed>) = 5 [pid 5447] ftruncate(5, 33587195 [pid 4998] close(3 [pid 5447] <... ftruncate resumed>) = 0 [pid 5447] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4998] <... close resumed>) = 0 [pid 5447] <... open resumed>) = 6 [pid 5447] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5447] <... open resumed>) = 7 [pid 5447] sendfile(6, 7, NULL, 281474978811909./strace-static-x86_64: Process 5451 attached [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5451 [pid 5451] chdir("./36") = 0 [pid 5449] <... write resumed>) = 2097152 [ 143.662335][ T5450] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.695289][ T5448] NILFS (loop0): recovery complete [pid 5451] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5451] setpgid(0, 0 [pid 5448] <... mount resumed>) = 0 [pid 5451] <... setpgid resumed>) = 0 [pid 5448] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5451] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5449] munmap(0x7f18ca796000, 2097152 [pid 5448] <... openat resumed>) = 3 [pid 5451] <... openat resumed>) = 3 [pid 5448] chdir("./file1" [pid 5451] write(3, "1000", 4 [pid 5448] <... chdir resumed>) = 0 [pid 5451] <... write resumed>) = 4 [pid 5448] ioctl(4, LOOP_CLR_FD [pid 5451] close(3 [pid 5448] <... ioctl resumed>) = 0 [pid 5451] <... close resumed>) = 0 [pid 5448] close(4 [pid 5451] symlink("/dev/binderfs", "./binderfs" [pid 5449] <... munmap resumed>) = 0 [pid 5448] <... close resumed>) = 0 [pid 5448] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5449] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5451] <... symlink resumed>) = 0 [pid 5449] ioctl(4, LOOP_SET_FD, 3 [pid 5451] memfd_create("syzkaller", 0 [pid 5448] <... open resumed>) = 4 [pid 5451] <... memfd_create resumed>) = 3 [pid 5448] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5451] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5448] <... open resumed>) = 5 [pid 5451] <... mmap resumed>) = 0x7f18ca796000 [pid 5448] ftruncate(5, 33587195) = 0 [pid 5449] <... ioctl resumed>) = 0 [pid 5449] close(3) = 0 [pid 5449] mkdir("./file1", 0777 [pid 5448] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5449] <... mkdir resumed>) = 0 [pid 5448] <... open resumed>) = 6 [pid 5448] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5448] sendfile(6, 7, NULL, 281474978811909 [ 143.735961][ T5452] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.772824][ T5449] loop2: detected capacity change from 0 to 4096 [pid 5449] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5444] <... sendfile resumed>) = 1048576 [pid 5444] exit_group(0) = ? [pid 5444] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5444, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5000] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5451] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./36/binderfs") = 0 [pid 5000] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./36/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 143.853839][ T5449] NILFS (loop2): invalid segment: Checksum error in segment payload [ 143.862074][ T5449] NILFS (loop2): trying rollback from an earlier position [pid 5002] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./36/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./36/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3 [pid 5451] <... write resumed>) = 2097152 [pid 5002] <... close resumed>) = 0 [pid 5451] munmap(0x7f18ca796000, 2097152 [pid 5002] rmdir("./36" [pid 5451] <... munmap resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5451] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] mkdir("./37", 0777) = 0 [pid 5451] <... openat resumed>) = 4 [pid 5451] ioctl(4, LOOP_SET_FD, 3 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5451] <... ioctl resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5451] close(3 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5451] <... close resumed>) = 0 [pid 5002] close(3) = 0 [pid 5451] mkdir("./file1", 0777 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5451] <... mkdir resumed>) = 0 [pid 5451] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5453 ./strace-static-x86_64: Process 5453 attached [pid 5453] chdir("./37") = 0 [pid 5453] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 143.974064][ T5451] loop1: detected capacity change from 0 to 4096 [ 143.992757][ T5449] NILFS (loop2): recovery complete [ 144.010380][ T5451] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5453] setpgid(0, 0) = 0 [pid 5453] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5449] <... mount resumed>) = 0 [pid 5449] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5449] chdir("./file1" [pid 5453] <... openat resumed>) = 3 [pid 5449] <... chdir resumed>) = 0 [pid 5449] ioctl(4, LOOP_CLR_FD [pid 5453] write(3, "1000", 4 [pid 5449] <... ioctl resumed>) = 0 [pid 5449] close(4 [pid 5453] <... write resumed>) = 4 [pid 5449] <... close resumed>) = 0 [pid 5453] close(3 [pid 5449] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5453] <... close resumed>) = 0 [pid 5449] <... open resumed>) = 4 [pid 5449] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5449] ftruncate(5, 33587195 [pid 5453] symlink("/dev/binderfs", "./binderfs" [pid 5449] <... ftruncate resumed>) = 0 [pid 5449] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5453] <... symlink resumed>) = 0 [pid 5449] <... open resumed>) = 6 [pid 5449] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5453] memfd_create("syzkaller", 0) = 3 [pid 5449] <... open resumed>) = 7 [pid 5449] sendfile(6, 7, NULL, 281474978811909 [pid 5453] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./36/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 144.044486][ T5454] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./36/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./36/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5453] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] close(3) = 0 [pid 5000] rmdir("./36") = 0 [pid 5000] mkdir("./37", 0777) = 0 [ 144.112304][ T5451] NILFS (loop1): trying rollback from an earlier position [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5455 ./strace-static-x86_64: Process 5455 attached [pid 5455] chdir("./37") = 0 [pid 5455] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5455] setpgid(0, 0) = 0 [pid 5455] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5455] write(3, "1000", 4) = 4 [pid 5455] close(3) = 0 [pid 5455] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5455] memfd_create("syzkaller", 0) = 3 [pid 5455] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 144.203228][ T5451] NILFS (loop1): recovery complete [pid 5451] <... mount resumed>) = 0 [pid 5455] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5453] <... write resumed>) = 2097152 [pid 5451] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5453] munmap(0x7f18ca796000, 2097152 [pid 5451] chdir("./file1") = 0 [pid 5451] ioctl(4, LOOP_CLR_FD) = 0 [pid 5451] close(4) = 0 [pid 5453] <... munmap resumed>) = 0 [pid 5451] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5453] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5451] <... open resumed>) = 4 [pid 5451] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5453] <... openat resumed>) = 4 [ 144.246113][ T5456] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5451] ftruncate(5, 33587195 [pid 5453] ioctl(4, LOOP_SET_FD, 3 [pid 5451] <... ftruncate resumed>) = 0 [pid 5453] <... ioctl resumed>) = 0 [pid 5451] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5453] close(3 [pid 5451] <... open resumed>) = 6 [pid 5453] <... close resumed>) = 0 [pid 5451] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5453] mkdir("./file1", 0777 [pid 5451] <... open resumed>) = 7 [pid 5453] <... mkdir resumed>) = 0 [pid 5451] sendfile(6, 7, NULL, 281474978811909 [ 144.296150][ T5453] loop5: detected capacity change from 0 to 4096 [pid 5453] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5455] <... write resumed>) = 2097152 [pid 5455] munmap(0x7f18ca796000, 2097152) = 0 [pid 5455] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 144.377679][ T5453] NILFS (loop5): invalid segment: Checksum error in segment payload [ 144.411250][ T5453] NILFS (loop5): trying rollback from an earlier position [pid 5455] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5455] close(3) = 0 [pid 5455] mkdir("./file1", 0777) = 0 [ 144.427369][ T5455] loop3: detected capacity change from 0 to 4096 [ 144.488680][ T5453] NILFS (loop5): recovery complete [pid 5455] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5453] <... mount resumed>) = 0 [pid 5453] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5453] chdir("./file1") = 0 [pid 5453] ioctl(4, LOOP_CLR_FD) = 0 [pid 5453] close(4) = 0 [pid 5453] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5453] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [ 144.520241][ T5455] NILFS (loop3): invalid segment: Checksum error in segment payload [ 144.524470][ T5457] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5453] ftruncate(5, 33587195) = 0 [pid 5453] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5453] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 144.586187][ T5455] NILFS (loop3): trying rollback from an earlier position [ 144.687416][ T5455] NILFS (loop3): recovery complete [pid 5453] sendfile(6, 7, NULL, 281474978811909 [pid 5455] <... mount resumed>) = 0 [pid 5455] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5455] chdir("./file1") = 0 [pid 5455] ioctl(4, LOOP_CLR_FD) = 0 [pid 5455] close(4) = 0 [pid 5455] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5455] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5455] ftruncate(5, 33587195) = 0 [pid 5455] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5455] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 144.727227][ T5458] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5455] sendfile(6, 7, NULL, 281474978811909 [pid 5447] <... sendfile resumed>) = 1048576 [pid 5447] exit_group(0) = ? [pid 5447] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5447, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./36/binderfs") = 0 [pid 5001] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5448] <... sendfile resumed>) = 1048576 [pid 5448] exit_group(0) = ? [pid 5448] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5448, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 4997] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./35/binderfs") = 0 [pid 4997] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./36/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./36/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./36/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./36") = 0 [pid 5001] mkdir("./37", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5459 ./strace-static-x86_64: Process 5459 attached [pid 5459] chdir("./37") = 0 [pid 5459] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5459] setpgid(0, 0) = 0 [pid 5459] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5459] write(3, "1000", 4) = 4 [pid 5459] close(3) = 0 [pid 5459] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5459] memfd_create("syzkaller", 0) = 3 [pid 5459] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./35/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./35/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./35/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./35/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./35" [pid 5449] <... sendfile resumed>) = 1048576 [pid 4997] <... rmdir resumed>) = 0 [pid 5449] exit_group(0 [pid 4997] mkdir("./36", 0777 [pid 5449] <... exit_group resumed>) = ? [pid 4997] <... mkdir resumed>) = 0 [pid 5449] +++ exited with 0 +++ [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5449, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5459] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... restart_syscall resumed>) = 0 [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5460 [pid 4999] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./36/binderfs") = 0 ./strace-static-x86_64: Process 5460 attached [pid 4999] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5460] chdir("./36") = 0 [pid 5460] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5460] setpgid(0, 0) = 0 [pid 5460] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5460] write(3, "1000", 4) = 4 [pid 5460] close(3) = 0 [pid 5460] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5460] memfd_create("syzkaller", 0) = 3 [pid 5460] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5459] <... write resumed>) = 2097152 [pid 5460] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5459] munmap(0x7f18ca796000, 2097152) = 0 [pid 5459] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5459] ioctl(4, LOOP_SET_FD, 3 [pid 5451] <... sendfile resumed>) = 1048576 [pid 5451] exit_group(0) = ? [pid 5451] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5451, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./36/binderfs") = 0 [pid 4998] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5460] <... write resumed>) = 2097152 [pid 5460] munmap(0x7f18ca796000, 2097152) = 0 [pid 5460] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5459] <... ioctl resumed>) = 0 [pid 5460] ioctl(4, LOOP_SET_FD, 3 [ 145.500421][ T5459] loop4: detected capacity change from 0 to 4096 [pid 5459] close(3) = 0 [pid 5459] mkdir("./file1", 0777) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5459] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4999] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./36/file1", [pid 5460] <... ioctl resumed>) = 0 [pid 5460] close(3) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./36/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, [pid 5460] mkdir("./file1", 0777 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5460] <... mkdir resumed>) = 0 [pid 4999] getdents64(4, [pid 5460] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./36/file1") = 0 [ 145.552837][ T5460] loop0: detected capacity change from 0 to 4096 [ 145.581380][ T5459] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./36") = 0 [pid 4999] mkdir("./37", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5461 ./strace-static-x86_64: Process 5461 attached [pid 5461] chdir("./37") = 0 [pid 5461] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5461] setpgid(0, 0) = 0 [pid 5461] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5461] write(3, "1000", 4) = 4 [pid 5461] close(3) = 0 [ 145.637025][ T5460] NILFS (loop0): invalid segment: Checksum error in segment payload [ 145.657939][ T5459] NILFS (loop4): trying rollback from an earlier position [ 145.668635][ T5460] NILFS (loop0): trying rollback from an earlier position [pid 5461] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5461] memfd_create("syzkaller", 0) = 3 [pid 5461] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4998] <... umount2 resumed>) = 0 [ 145.734513][ T5459] NILFS (loop4): recovery complete [pid 4998] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5459] <... mount resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5459] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4998] lstat("./36/file1", [pid 5461] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5459] <... openat resumed>) = 3 [pid 4998] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5459] chdir("./file1" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5459] <... chdir resumed>) = 0 [pid 5459] ioctl(4, LOOP_CLR_FD [pid 4998] openat(AT_FDCWD, "./36/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5459] <... ioctl resumed>) = 0 [pid 5459] close(4 [pid 4998] <... openat resumed>) = 4 [pid 5459] <... close resumed>) = 0 [pid 4998] fstat(4, [pid 5459] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 5459] <... open resumed>) = 4 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5459] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] getdents64(4, [pid 5459] <... open resumed>) = 5 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5459] ftruncate(5, 33587195 [pid 4998] close(4 [pid 5459] <... ftruncate resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5459] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4998] rmdir("./36/file1" [pid 5459] <... open resumed>) = 6 [pid 5459] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4998] <... rmdir resumed>) = 0 [pid 5459] <... open resumed>) = 7 [pid 4998] getdents64(3, [pid 5459] sendfile(6, 7, NULL, 281474978811909 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./36") = 0 [pid 4998] mkdir("./37", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5453] <... sendfile resumed>) = 1048576 [ 145.763166][ T5462] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.796388][ T5460] NILFS (loop0): recovery complete [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5460] <... mount resumed>) = 0 [pid 5453] exit_group(0 [pid 4998] close(3 [pid 5460] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5453] <... exit_group resumed>) = ? [pid 4998] <... close resumed>) = 0 [pid 5460] <... openat resumed>) = 3 [pid 5460] chdir("./file1" [pid 5453] +++ exited with 0 +++ [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5460] <... chdir resumed>) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5453, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5460] ioctl(4, LOOP_CLR_FD) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5464 [pid 5460] close(4) = 0 [pid 5460] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5002] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5464 attached [pid 5460] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5464] chdir("./37" [pid 5460] <... open resumed>) = 5 [pid 5002] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5464] <... chdir resumed>) = 0 [pid 5460] ftruncate(5, 33587195 [pid 5002] <... openat resumed>) = 3 [pid 5464] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5460] <... ftruncate resumed>) = 0 [pid 5002] fstat(3, [pid 5464] <... prctl resumed>) = 0 [pid 5460] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5464] setpgid(0, 0 [pid 5460] <... open resumed>) = 6 [pid 5002] getdents64(3, [pid 5464] <... setpgid resumed>) = 0 [ 145.828540][ T5463] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5460] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5464] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5460] <... open resumed>) = 7 [pid 5002] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5460] sendfile(6, 7, NULL, 281474978811909 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5464] <... openat resumed>) = 3 [pid 5002] lstat("./37/binderfs", [pid 5464] write(3, "1000", 4 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5464] <... write resumed>) = 4 [pid 5002] unlink("./37/binderfs" [pid 5464] close(3 [pid 5002] <... unlink resumed>) = 0 [pid 5464] <... close resumed>) = 0 [pid 5002] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5464] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5461] <... write resumed>) = 2097152 [pid 5464] memfd_create("syzkaller", 0) = 3 [pid 5464] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5461] munmap(0x7f18ca796000, 2097152) = 0 [pid 5461] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5464] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5461] <... openat resumed>) = 4 [pid 5461] ioctl(4, LOOP_SET_FD, 3 [pid 5455] <... sendfile resumed>) = 1048576 [pid 5455] exit_group(0) = ? [pid 5455] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5455, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 5461] <... ioctl resumed>) = 0 [pid 5461] close(3 [pid 5000] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5461] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5461] mkdir("./file1", 0777 [pid 5000] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5461] <... mkdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5461] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5000] lstat("./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./37/binderfs") = 0 [ 145.988068][ T5461] loop2: detected capacity change from 0 to 4096 [pid 5000] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5464] <... write resumed>) = 2097152 [pid 5464] munmap(0x7f18ca796000, 2097152) = 0 [pid 5464] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 146.056634][ T5461] NILFS (loop2): invalid segment: Checksum error in segment payload [ 146.064924][ T5461] NILFS (loop2): trying rollback from an earlier position [pid 5464] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5464] close(3) = 0 [pid 5464] mkdir("./file1", 0777) = 0 [pid 5461] <... mount resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5464] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5461] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5002] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 146.103160][ T5464] loop1: detected capacity change from 0 to 4096 [ 146.116886][ T5461] NILFS (loop2): recovery complete [ 146.132327][ T5465] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5461] <... openat resumed>) = 3 [pid 5461] chdir("./file1" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5461] <... chdir resumed>) = 0 [pid 5002] lstat("./37/file1", [pid 5461] ioctl(4, LOOP_CLR_FD [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5461] <... ioctl resumed>) = 0 [pid 5002] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5461] close(4 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5461] <... close resumed>) = 0 [pid 5461] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5002] openat(AT_FDCWD, "./37/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5461] <... open resumed>) = 4 [pid 5002] <... openat resumed>) = 4 [pid 5461] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] fstat(4, [pid 5461] <... open resumed>) = 5 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5461] ftruncate(5, 33587195 [pid 5002] getdents64(4, [pid 5461] <... ftruncate resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5461] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] getdents64(4, [pid 5461] <... open resumed>) = 6 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5461] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5002] close(4 [pid 5461] <... open resumed>) = 7 [pid 5002] <... close resumed>) = 0 [pid 5461] sendfile(6, 7, NULL, 281474978811909 [pid 5002] rmdir("./37/file1") = 0 [pid 5000] <... umount2 resumed>) = 0 [ 146.160829][ T5464] NILFS (loop1): invalid segment: Checksum error in segment payload [ 146.192622][ T5464] NILFS (loop1): trying rollback from an earlier position [pid 5002] getdents64(3, [pid 5000] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] close(3 [pid 5000] lstat("./37/file1", [pid 5002] <... close resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] rmdir("./37" [pid 5000] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... rmdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] mkdir("./38", 0777 [pid 5000] openat(AT_FDCWD, "./37/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... mkdir resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] fstat(4, [pid 5002] <... openat resumed>) = 3 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5000] getdents64(4, [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] close(3 [pid 5000] getdents64(4, [pid 5002] <... close resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4 [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5466 [pid 5000] <... close resumed>) = 0 [pid 5000] rmdir("./37/file1") = 0 [pid 5000] getdents64(3, ./strace-static-x86_64: Process 5466 attached 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5466] chdir("./38" [pid 5000] close(3 [pid 5466] <... chdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5466] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] rmdir("./37" [pid 5466] <... prctl resumed>) = 0 [ 146.287584][ T5464] NILFS (loop1): recovery complete [pid 5466] setpgid(0, 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5466] <... setpgid resumed>) = 0 [pid 5000] mkdir("./38", 0777 [pid 5466] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5464] <... mount resumed>) = 0 [pid 5466] <... openat resumed>) = 3 [pid 5464] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5000] <... mkdir resumed>) = 0 [pid 5466] write(3, "1000", 4 [pid 5464] <... openat resumed>) = 3 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5466] <... write resumed>) = 4 [pid 5464] chdir("./file1" [pid 5466] close(3 [pid 5464] <... chdir resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5466] <... close resumed>) = 0 [pid 5464] ioctl(4, LOOP_CLR_FD [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5466] symlink("/dev/binderfs", "./binderfs" [pid 5464] <... ioctl resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5466] <... symlink resumed>) = 0 [pid 5464] close(4 [pid 5000] close(3 [pid 5466] memfd_create("syzkaller", 0 [pid 5464] <... close resumed>) = 0 [pid 5464] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5466] <... memfd_create resumed>) = 3 [pid 5000] <... close resumed>) = 0 [pid 5466] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5464] <... open resumed>) = 4 [ 146.309905][ T5467] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5468 attached [pid 5466] <... mmap resumed>) = 0x7f18ca796000 [pid 5464] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5468] chdir("./38" [pid 5464] <... open resumed>) = 5 [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5468 [pid 5468] <... chdir resumed>) = 0 [pid 5464] ftruncate(5, 33587195 [pid 5468] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5464] <... ftruncate resumed>) = 0 [pid 5468] <... prctl resumed>) = 0 [pid 5464] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5468] setpgid(0, 0 [pid 5464] <... open resumed>) = 6 [pid 5468] <... setpgid resumed>) = 0 [pid 5464] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5468] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5464] <... open resumed>) = 7 [pid 5468] <... openat resumed>) = 3 [pid 5464] sendfile(6, 7, NULL, 281474978811909 [pid 5468] write(3, "1000", 4 [pid 5466] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5468] <... write resumed>) = 4 [pid 5468] close(3) = 0 [pid 5468] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5468] memfd_create("syzkaller", 0) = 3 [pid 5468] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5468] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5466] <... write resumed>) = 2097152 [pid 5466] munmap(0x7f18ca796000, 2097152) = 0 [pid 5466] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5466] ioctl(4, LOOP_SET_FD, 3 [pid 5468] <... write resumed>) = 2097152 [pid 5468] munmap(0x7f18ca796000, 2097152 [pid 5466] <... ioctl resumed>) = 0 [pid 5466] close(3) = 0 [pid 5466] mkdir("./file1", 0777) = 0 [ 146.558033][ T5466] loop5: detected capacity change from 0 to 4096 [pid 5466] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5468] <... munmap resumed>) = 0 [pid 5468] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5468] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5468] close(3) = 0 [ 146.607192][ T5466] NILFS (loop5): invalid segment: Checksum error in segment payload [ 146.636305][ T5468] loop3: detected capacity change from 0 to 4096 [pid 5468] mkdir("./file1", 0777) = 0 [ 146.660940][ T5466] NILFS (loop5): trying rollback from an earlier position [ 146.698061][ T5466] NILFS (loop5): recovery complete [ 146.698140][ T5468] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5468] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5466] <... mount resumed>) = 0 [pid 5466] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5466] chdir("./file1") = 0 [pid 5466] ioctl(4, LOOP_CLR_FD) = 0 [pid 5466] close(4) = 0 [pid 5466] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5466] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5466] ftruncate(5, 33587195) = 0 [pid 5466] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5466] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 146.708056][ T5469] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.738152][ T5468] NILFS (loop3): trying rollback from an earlier position [ 146.821927][ T5468] NILFS (loop3): recovery complete [pid 5466] sendfile(6, 7, NULL, 281474978811909 [pid 5468] <... mount resumed>) = 0 [pid 5468] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5468] chdir("./file1") = 0 [pid 5468] ioctl(4, LOOP_CLR_FD) = 0 [pid 5468] close(4) = 0 [pid 5468] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5468] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5468] ftruncate(5, 33587195) = 0 [pid 5468] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5468] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5468] sendfile(6, 7, NULL, 281474978811909 [ 146.893157][ T5470] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5459] <... sendfile resumed>) = 1048576 [pid 5459] exit_group(0) = ? [pid 5459] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5459, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5001] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./37/binderfs") = 0 [pid 5001] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5460] <... sendfile resumed>) = 1048576 [pid 5460] exit_group(0) = ? [pid 5460] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5460, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=24 /* 0.24 s */} --- [pid 4997] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4997] umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./36/binderfs") = 0 [pid 4997] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./37/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./37/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./37/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./37") = 0 [pid 5001] mkdir("./38", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5471 attached [pid 5461] <... sendfile resumed>) = 1048576 [pid 5471] chdir("./38" [pid 5461] exit_group(0 [pid 5001] <... clone resumed>, child_tidptr=0x555556f7b690) = 5471 [pid 4997] <... umount2 resumed>) = 0 [pid 5471] <... chdir resumed>) = 0 [pid 5461] <... exit_group resumed>) = ? [pid 4997] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5471] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5461] +++ exited with 0 +++ [pid 5471] <... prctl resumed>) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5461, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5471] setpgid(0, 0 [pid 4997] lstat("./36/file1", [pid 5471] <... setpgid resumed>) = 0 [pid 5471] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5471] <... openat resumed>) = 3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5471] write(3, "1000", 4 [pid 4999] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] umount2("./36/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5471] <... write resumed>) = 4 [pid 4999] <... openat resumed>) = 3 [pid 5471] close(3 [pid 4999] fstat(3, [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5471] <... close resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] openat(AT_FDCWD, "./36/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5471] symlink("/dev/binderfs", "./binderfs" [pid 4999] getdents64(3, [pid 4997] <... openat resumed>) = 4 [pid 5471] <... symlink resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] fstat(4, [pid 5471] memfd_create("syzkaller", 0 [pid 4999] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5471] <... memfd_create resumed>) = 3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] getdents64(4, [pid 5471] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] lstat("./37/binderfs", [pid 5471] <... mmap resumed>) = 0x7f18ca796000 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] unlink("./37/binderfs") = 0 [pid 4999] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./36/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./36") = 0 [pid 4997] mkdir("./37", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5472 [pid 5471] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5472 attached [pid 5472] chdir("./37") = 0 [pid 5472] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5472] setpgid(0, 0) = 0 [pid 5472] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5464] <... sendfile resumed>) = 1048576 [pid 5472] <... openat resumed>) = 3 [pid 5464] exit_group(0 [pid 5472] write(3, "1000", 4 [pid 5464] <... exit_group resumed>) = ? [pid 5472] <... write resumed>) = 4 [pid 5464] +++ exited with 0 +++ [pid 5472] close(3) = 0 [pid 5471] <... write resumed>) = 2097152 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5464, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5472] symlink("/dev/binderfs", "./binderfs" [pid 5471] munmap(0x7f18ca796000, 2097152 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5472] <... symlink resumed>) = 0 [pid 4998] <... restart_syscall resumed>) = 0 [pid 5472] memfd_create("syzkaller", 0 [pid 5471] <... munmap resumed>) = 0 [pid 4998] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5472] <... memfd_create resumed>) = 3 [pid 5472] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5471] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4998] <... openat resumed>) = 3 [pid 5472] <... mmap resumed>) = 0x7f18ca796000 [pid 5471] <... openat resumed>) = 4 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5471] ioctl(4, LOOP_SET_FD, 3 [pid 4998] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./37/binderfs") = 0 [pid 4998] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5471] <... ioctl resumed>) = 0 [pid 5471] close(3) = 0 [pid 5471] mkdir("./file1", 0777) = 0 [pid 5471] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [ 147.514375][ T5471] loop4: detected capacity change from 0 to 4096 [pid 5472] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... umount2 resumed>) = 0 [ 147.557239][ T5471] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 4999] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./37/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./37/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4 [pid 5472] <... write resumed>) = 2097152 [pid 5472] munmap(0x7f18ca796000, 2097152 [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./37/file1" [pid 5472] <... munmap resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5472] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4999] getdents64(3, [ 147.607619][ T5471] NILFS (loop4): trying rollback from an earlier position [pid 5472] <... openat resumed>) = 4 [pid 5472] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5472] <... ioctl resumed>) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./37") = 0 [pid 4999] mkdir("./38", 0777 [pid 5472] close(3 [pid 4999] <... mkdir resumed>) = 0 [pid 5472] <... close resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5472] mkdir("./file1", 0777 [pid 4999] <... openat resumed>) = 3 [pid 5472] <... mkdir resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5472] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5471] <... mount resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5471] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5471] chdir("./file1") = 0 [pid 5471] ioctl(4, LOOP_CLR_FD) = 0 [pid 5471] close(4) = 0 [pid 5471] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5471] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [ 147.663762][ T5471] NILFS (loop4): recovery complete [ 147.675674][ T5472] loop0: detected capacity change from 0 to 4096 [ 147.702617][ T5473] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5471] ftruncate(5, 33587195) = 0 [pid 5471] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5471] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5471] sendfile(6, 7, NULL, 281474978811909 [pid 4999] close(3 [pid 4998] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] lstat("./37/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5474 [pid 4998] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5474 attached ) = -1 EINVAL (Invalid argument) [pid 5474] chdir("./38" [pid 4998] openat(AT_FDCWD, "./37/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5474] <... chdir resumed>) = 0 [pid 5474] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] <... openat resumed>) = 4 [pid 5474] <... prctl resumed>) = 0 [pid 4998] fstat(4, [pid 5474] setpgid(0, 0) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5474] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] getdents64(4, [pid 5474] <... openat resumed>) = 3 [ 147.718419][ T5472] NILFS (loop0): invalid segment: Checksum error in segment payload [ 147.753690][ T5472] NILFS (loop0): trying rollback from an earlier position [pid 5474] write(3, "1000", 4 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5474] <... write resumed>) = 4 [pid 5474] close(3 [pid 4998] getdents64(4, [pid 5474] <... close resumed>) = 0 [pid 5474] symlink("/dev/binderfs", "./binderfs" [pid 5472] <... mount resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5474] <... symlink resumed>) = 0 [pid 5472] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4998] close(4 [pid 5474] memfd_create("syzkaller", 0) = 3 [pid 5472] <... openat resumed>) = 3 [pid 4998] <... close resumed>) = 0 [pid 5474] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5472] chdir("./file1" [pid 4998] rmdir("./37/file1" [pid 5474] <... mmap resumed>) = 0x7f18ca796000 [pid 5472] <... chdir resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5472] ioctl(4, LOOP_CLR_FD [pid 4998] getdents64(3, [ 147.790240][ T5472] NILFS (loop0): recovery complete [ 147.804429][ T5475] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5472] <... ioctl resumed>) = 0 [pid 5474] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5472] close(4 [pid 4998] close(3 [pid 5472] <... close resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 4998] rmdir("./37" [pid 5472] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] mkdir("./38", 0777 [pid 5472] <... open resumed>) = 4 [pid 4998] <... mkdir resumed>) = 0 [pid 5472] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5472] <... open resumed>) = 5 [pid 4998] <... openat resumed>) = 3 [pid 5472] ftruncate(5, 33587195 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5472] <... ftruncate resumed>) = 0 [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5472] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5476 [pid 5474] <... write resumed>) = 2097152 [pid 5472] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5472] sendfile(6, 7, NULL, 281474978811909./strace-static-x86_64: Process 5476 attached [pid 5476] chdir("./38") = 0 [pid 5476] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5476] setpgid(0, 0) = 0 [pid 5476] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5476] write(3, "1000", 4) = 4 [pid 5476] close(3) = 0 [pid 5476] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5476] memfd_create("syzkaller", 0) = 3 [pid 5476] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5474] munmap(0x7f18ca796000, 2097152 [pid 5466] <... sendfile resumed>) = 1048576 [pid 5466] exit_group(0) = ? [pid 5474] <... munmap resumed>) = 0 [pid 5466] +++ exited with 0 +++ [pid 5476] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5466, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5474] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5002] <... restart_syscall resumed>) = 0 [pid 5474] <... openat resumed>) = 4 [pid 5002] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5474] ioctl(4, LOOP_SET_FD, 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5474] <... ioctl resumed>) = 0 [pid 5468] <... sendfile resumed>) = 1048576 [pid 5002] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5474] close(3 [pid 5468] exit_group(0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5474] <... close resumed>) = 0 [pid 5468] <... exit_group resumed>) = ? [pid 5002] lstat("./38/binderfs", [pid 5474] mkdir("./file1", 0777 [pid 5468] +++ exited with 0 +++ [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5474] <... mkdir resumed>) = 0 [pid 5002] unlink("./38/binderfs" [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5468, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5474] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5002] <... unlink resumed>) = 0 [pid 5002] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 147.958710][ T5474] loop2: detected capacity change from 0 to 4096 [pid 5000] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./38/binderfs") = 0 [pid 5000] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5476] <... write resumed>) = 2097152 [pid 5476] munmap(0x7f18ca796000, 2097152) = 0 [pid 5476] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 148.011734][ T5474] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5476] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5476] close(3) = 0 [pid 5476] mkdir("./file1", 0777) = 0 [ 148.054560][ T5476] loop1: detected capacity change from 0 to 4096 [ 148.063461][ T5474] NILFS (loop2): trying rollback from an earlier position [pid 5476] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./38/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 148.104462][ T5476] NILFS (loop1): invalid segment: Checksum error in segment payload [ 148.138017][ T5476] NILFS (loop1): trying rollback from an earlier position [pid 5002] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./38/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./38/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./38") = 0 [pid 5002] mkdir("./39", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 148.151635][ T5474] NILFS (loop2): recovery complete [pid 5002] close(3) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5474] <... mount resumed>) = 0 [pid 5000] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5474] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5474] chdir("./file1" [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5478 [pid 5000] lstat("./38/file1", [pid 5474] <... chdir resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5474] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 5478 attached [pid 5000] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5478] chdir("./39" [pid 5474] <... ioctl resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5478] <... chdir resumed>) = 0 [pid 5474] close(4 [pid 5478] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5474] <... close resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./38/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5478] <... prctl resumed>) = 0 [pid 5474] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5000] <... openat resumed>) = 4 [pid 5478] setpgid(0, 0) = 0 [pid 5000] fstat(4, [pid 5474] <... open resumed>) = 4 [pid 5478] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5478] <... openat resumed>) = 3 [pid 5474] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [ 148.210677][ T5477] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] getdents64(4, [pid 5478] write(3, "1000", 4) = 4 [pid 5474] ftruncate(5, 33587195 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5478] close(3 [pid 5474] <... ftruncate resumed>) = 0 [pid 5000] getdents64(4, [pid 5478] <... close resumed>) = 0 [pid 5474] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5478] symlink("/dev/binderfs", "./binderfs" [pid 5474] <... open resumed>) = 6 [pid 5000] close(4 [pid 5478] <... symlink resumed>) = 0 [pid 5474] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5000] <... close resumed>) = 0 [pid 5478] memfd_create("syzkaller", 0) = 3 [ 148.261762][ T5476] NILFS (loop1): recovery complete [pid 5474] <... open resumed>) = 7 [pid 5000] rmdir("./38/file1" [pid 5478] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5474] sendfile(6, 7, NULL, 281474978811909 [pid 5000] <... rmdir resumed>) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5478] <... mmap resumed>) = 0x7f18ca796000 [pid 5000] close(3) = 0 [pid 5476] <... mount resumed>) = 0 [pid 5476] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5476] chdir("./file1") = 0 [pid 5476] ioctl(4, LOOP_CLR_FD) = 0 [pid 5476] close(4) = 0 [pid 5476] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5476] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5476] ftruncate(5, 33587195) = 0 [pid 5476] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5476] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5000] rmdir("./38" [pid 5478] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5476] <... open resumed>) = 7 [pid 5476] sendfile(6, 7, NULL, 281474978811909 [pid 5000] <... rmdir resumed>) = 0 [ 148.303600][ T5479] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5478] <... write resumed>) = 2097152 [pid 5000] mkdir("./39", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5480 ./strace-static-x86_64: Process 5480 attached [pid 5480] chdir("./39") = 0 [pid 5480] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5478] munmap(0x7f18ca796000, 2097152 [pid 5480] setpgid(0, 0) = 0 [pid 5478] <... munmap resumed>) = 0 [pid 5478] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5480] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5478] <... openat resumed>) = 4 [pid 5478] ioctl(4, LOOP_SET_FD, 3 [pid 5480] <... openat resumed>) = 3 [pid 5480] write(3, "1000", 4) = 4 [pid 5480] close(3) = 0 [pid 5480] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5480] memfd_create("syzkaller", 0) = 3 [pid 5480] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5478] <... ioctl resumed>) = 0 [pid 5478] close(3) = 0 [pid 5478] mkdir("./file1", 0777) = 0 [ 148.419355][ T5478] loop5: detected capacity change from 0 to 4096 [pid 5478] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5480] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5480] munmap(0x7f18ca796000, 2097152) = 0 [pid 5480] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 148.470347][ T5478] NILFS (loop5): invalid segment: Checksum error in segment payload [ 148.490766][ T5478] NILFS (loop5): trying rollback from an earlier position [pid 5480] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5480] close(3) = 0 [pid 5480] mkdir("./file1", 0777) = 0 [ 148.525762][ T5480] loop3: detected capacity change from 0 to 4096 [ 148.576487][ T5480] NILFS (loop3): invalid segment: Checksum error in segment payload [ 148.592402][ T5478] NILFS (loop5): recovery complete [ 148.605384][ T5480] NILFS (loop3): trying rollback from an earlier position [pid 5480] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5478] <... mount resumed>) = 0 [pid 5478] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5478] chdir("./file1") = 0 [pid 5478] ioctl(4, LOOP_CLR_FD) = 0 [pid 5478] close(4) = 0 [pid 5478] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5478] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [ 148.640077][ T5481] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5478] ftruncate(5, 33587195) = 0 [pid 5478] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5478] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 148.697635][ T5480] NILFS (loop3): recovery complete [pid 5478] sendfile(6, 7, NULL, 281474978811909 [pid 5480] <... mount resumed>) = 0 [pid 5480] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5471] <... sendfile resumed>) = 1048576 [pid 5480] <... openat resumed>) = 3 [pid 5480] chdir("./file1" [pid 5471] exit_group(0 [pid 5480] <... chdir resumed>) = 0 [pid 5480] ioctl(4, LOOP_CLR_FD [pid 5471] <... exit_group resumed>) = ? [pid 5480] <... ioctl resumed>) = 0 [pid 5480] close(4) = 0 [pid 5471] +++ exited with 0 +++ [pid 5480] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5471, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [pid 5480] <... open resumed>) = 4 [ 148.741726][ T5482] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5480] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5001] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5480] <... open resumed>) = 5 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5480] ftruncate(5, 33587195 [pid 5001] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5480] <... ftruncate resumed>) = 0 [pid 5480] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5001] <... openat resumed>) = 3 [pid 5480] <... open resumed>) = 6 [pid 5001] fstat(3, [pid 5480] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5480] <... open resumed>) = 7 [pid 5001] getdents64(3, [pid 5480] sendfile(6, 7, NULL, 281474978811909 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./38/binderfs") = 0 [pid 5001] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5472] <... sendfile resumed>) = 1048576 [pid 5472] exit_group(0) = ? [pid 5472] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5472, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 4997] umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./37/binderfs") = 0 [pid 4997] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./38/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./38/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./38/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./38") = 0 [pid 5001] mkdir("./39", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5483 ./strace-static-x86_64: Process 5483 attached [pid 5483] chdir("./39") = 0 [pid 5483] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5483] setpgid(0, 0) = 0 [pid 5483] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5483] write(3, "1000", 4) = 4 [pid 5483] close(3) = 0 [pid 5483] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5483] memfd_create("syzkaller", 0) = 3 [pid 5483] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5483] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./37/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./37/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./37/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./37/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./37") = 0 [pid 4997] mkdir("./38", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5484 ./strace-static-x86_64: Process 5484 attached [pid 5484] chdir("./38") = 0 [pid 5484] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5484] setpgid(0, 0) = 0 [pid 5484] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5484] write(3, "1000", 4) = 4 [pid 5484] close(3) = 0 [pid 5484] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5484] memfd_create("syzkaller", 0) = 3 [pid 5484] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5483] <... write resumed>) = 2097152 [pid 5483] munmap(0x7f18ca796000, 2097152) = 0 [pid 5483] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5483] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5483] close(3) = 0 [pid 5483] mkdir("./file1", 0777) = 0 [pid 5484] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5483] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5476] <... sendfile resumed>) = 1048576 [ 149.401746][ T5483] loop4: detected capacity change from 0 to 4096 [pid 5476] exit_group(0) = ? [pid 5476] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5476, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5484] <... write resumed>) = 2097152 [pid 5474] <... sendfile resumed>) = 1048576 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./38/binderfs", [pid 5474] exit_group(0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5474] <... exit_group resumed>) = ? [pid 4998] unlink("./38/binderfs" [pid 5474] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5474, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 4998] <... unlink resumed>) = 0 [ 149.473121][ T5483] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 4998] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5484] munmap(0x7f18ca796000, 2097152 [pid 4999] <... openat resumed>) = 3 [pid 4999] fstat(3, [pid 5484] <... munmap resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5484] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4999] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5484] <... openat resumed>) = 4 [pid 4999] lstat("./38/binderfs", [pid 5484] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./38/binderfs") = 0 [pid 4999] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5484] <... ioctl resumed>) = 0 [pid 5484] close(3) = 0 [pid 5484] mkdir("./file1", 0777) = 0 [ 149.512197][ T5483] NILFS (loop4): trying rollback from an earlier position [ 149.544749][ T5484] loop0: detected capacity change from 0 to 4096 [ 149.577259][ T5483] NILFS (loop4): recovery complete [pid 5484] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5483] <... mount resumed>) = 0 [pid 5483] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5483] chdir("./file1") = 0 [pid 5483] ioctl(4, LOOP_CLR_FD) = 0 [ 149.613092][ T5484] NILFS (loop0): invalid segment: Checksum error in segment payload [ 149.634034][ T5485] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.645063][ T5484] NILFS (loop0): trying rollback from an earlier position [pid 5483] close(4) = 0 [pid 5483] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5483] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5483] ftruncate(5, 33587195) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./38/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5483] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5483] <... open resumed>) = 6 [pid 5483] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4998] openat(AT_FDCWD, "./38/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4 [pid 5483] <... open resumed>) = 7 [pid 4998] <... close resumed>) = 0 [pid 5483] sendfile(6, 7, NULL, 281474978811909 [pid 4999] <... umount2 resumed>) = 0 [pid 4998] rmdir("./38/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./38" [pid 5484] <... mount resumed>) = 0 [pid 4999] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... rmdir resumed>) = 0 [pid 5484] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] mkdir("./39", 0777 [pid 5484] <... openat resumed>) = 3 [pid 5478] <... sendfile resumed>) = 1048576 [pid 4999] lstat("./38/file1", [pid 4998] <... mkdir resumed>) = 0 [pid 5484] chdir("./file1" [pid 5478] exit_group(0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5484] <... chdir resumed>) = 0 [pid 5478] <... exit_group resumed>) = ? [pid 4999] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5484] ioctl(4, LOOP_CLR_FD [pid 5478] +++ exited with 0 +++ [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5484] <... ioctl resumed>) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5478, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 4999] openat(AT_FDCWD, "./38/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... openat resumed>) = 3 [pid 5484] close(4 [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 4999] <... openat resumed>) = 4 [pid 5484] <... close resumed>) = 0 [pid 4999] fstat(4, [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5484] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./38/file1") = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] <... restart_syscall resumed>) = 0 [pid 4999] close(3) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5484] <... open resumed>) = 4 [ 149.719408][ T5484] NILFS (loop0): recovery complete [ 149.738530][ T5486] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] rmdir("./38" [pid 4998] close(3 [pid 5484] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... rmdir resumed>) = 0 [pid 5484] <... open resumed>) = 5 [pid 4999] mkdir("./39", 0777 [pid 4998] <... close resumed>) = 0 [pid 5484] ftruncate(5, 33587195 [pid 4999] <... mkdir resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5484] <... ftruncate resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5484] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4999] <... openat resumed>) = 3 [pid 5484] <... open resumed>) = 6 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5484] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5002] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5487 [pid 5484] <... open resumed>) = 7 [pid 5002] <... openat resumed>) = 3 [pid 4999] close(3 [pid 5484] sendfile(6, 7, NULL, 281474978811909 [pid 5002] fstat(3, [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5487 attached [pid 5002] getdents64(3, [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5488 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5487] chdir("./39" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5487] <... chdir resumed>) = 0 [pid 5002] lstat("./39/binderfs", [pid 5487] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 5488 attached [pid 5487] <... prctl resumed>) = 0 [pid 5002] unlink("./39/binderfs" [pid 5488] chdir("./39" [pid 5487] setpgid(0, 0 [pid 5488] <... chdir resumed>) = 0 [pid 5487] <... setpgid resumed>) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 5488] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5488] setpgid(0, 0 [pid 5487] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5488] <... setpgid resumed>) = 0 [pid 5488] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5487] <... openat resumed>) = 3 [pid 5488] <... openat resumed>) = 3 [pid 5487] write(3, "1000", 4 [pid 5488] write(3, "1000", 4) = 4 [pid 5488] close(3) = 0 [pid 5488] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5487] <... write resumed>) = 4 [pid 5488] memfd_create("syzkaller", 0 [pid 5487] close(3 [pid 5488] <... memfd_create resumed>) = 3 [pid 5487] <... close resumed>) = 0 [pid 5488] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5487] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5487] memfd_create("syzkaller", 0) = 3 [pid 5487] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5480] <... sendfile resumed>) = 1048576 [pid 5480] exit_group(0 [pid 5488] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5487] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5480] <... exit_group resumed>) = ? [pid 5480] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5480, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- [pid 5000] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./39/binderfs") = 0 [pid 5000] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5487] <... write resumed>) = 2097152 [pid 5487] munmap(0x7f18ca796000, 2097152 [pid 5002] <... umount2 resumed>) = 0 [pid 5487] <... munmap resumed>) = 0 [pid 5487] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5488] <... write resumed>) = 2097152 [pid 5487] <... openat resumed>) = 4 [pid 5488] munmap(0x7f18ca796000, 2097152 [pid 5487] ioctl(4, LOOP_SET_FD, 3 [pid 5002] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./39/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./39/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, [pid 5488] <... munmap resumed>) = 0 [pid 5487] <... ioctl resumed>) = 0 [pid 5488] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5487] close(3 [pid 5488] <... openat resumed>) = 4 [pid 5487] <... close resumed>) = 0 [pid 5488] ioctl(4, LOOP_SET_FD, 3 [pid 5487] mkdir("./file1", 0777 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./39/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5487] <... mkdir resumed>) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./39") = 0 [pid 5002] mkdir("./40", 0777 [pid 5487] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5002] <... mkdir resumed>) = 0 [ 150.030491][ T5487] loop1: detected capacity change from 0 to 4096 [ 150.068446][ T5488] loop2: detected capacity change from 0 to 4096 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 5488] <... ioctl resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5488] close(3) = 0 [pid 5488] mkdir("./file1", 0777) = 0 [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5489 [pid 5488] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, ""./strace-static-x86_64: Process 5489 attached [pid 5489] chdir("./40") = 0 [pid 5489] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5489] setpgid(0, 0) = 0 [ 150.090219][ T5487] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5489] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5489] write(3, "1000", 4) = 4 [pid 5489] close(3) = 0 [pid 5489] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5489] memfd_create("syzkaller", 0) = 3 [pid 5489] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5000] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./39/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./39/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./39/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./39") = 0 [pid 5000] mkdir("./40", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 150.139527][ T5488] NILFS (loop2): invalid segment: Checksum error in segment payload [ 150.160150][ T5488] NILFS (loop2): trying rollback from an earlier position [ 150.164524][ T5487] NILFS (loop1): trying rollback from an earlier position [pid 5000] close(3 [pid 5489] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5490 [pid 5488] <... mount resumed>) = 0 ./strace-static-x86_64: Process 5490 attached [pid 5490] chdir("./40") = 0 [pid 5490] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5489] <... write resumed>) = 2097152 [ 150.228411][ T5488] NILFS (loop2): recovery complete [ 150.248090][ T5487] NILFS (loop1): recovery complete [ 150.256172][ T5491] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5488] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5490] <... prctl resumed>) = 0 [pid 5489] munmap(0x7f18ca796000, 2097152 [pid 5487] <... mount resumed>) = 0 [pid 5490] setpgid(0, 0 [pid 5487] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5490] <... setpgid resumed>) = 0 [pid 5487] <... openat resumed>) = 3 [pid 5490] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5487] chdir("./file1" [pid 5490] <... openat resumed>) = 3 [pid 5489] <... munmap resumed>) = 0 [pid 5488] <... openat resumed>) = 3 [pid 5487] <... chdir resumed>) = 0 [pid 5490] write(3, "1000", 4 [pid 5489] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5488] chdir("./file1" [pid 5487] ioctl(4, LOOP_CLR_FD [pid 5490] <... write resumed>) = 4 [pid 5487] <... ioctl resumed>) = 0 [pid 5490] close(3 [pid 5489] <... openat resumed>) = 4 [pid 5488] <... chdir resumed>) = 0 [pid 5487] close(4 [pid 5489] ioctl(4, LOOP_SET_FD, 3 [pid 5488] ioctl(4, LOOP_CLR_FD [pid 5490] <... close resumed>) = 0 [pid 5488] <... ioctl resumed>) = 0 [pid 5487] <... close resumed>) = 0 [pid 5490] symlink("/dev/binderfs", "./binderfs" [pid 5488] close(4 [pid 5487] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5489] <... ioctl resumed>) = 0 [pid 5488] <... close resumed>) = 0 [pid 5489] close(3 [pid 5488] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5489] <... close resumed>) = 0 [pid 5487] <... open resumed>) = 4 [pid 5489] mkdir("./file1", 0777 [pid 5488] <... open resumed>) = 4 [pid 5487] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5490] <... symlink resumed>) = 0 [pid 5489] <... mkdir resumed>) = 0 [pid 5488] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5487] <... open resumed>) = 5 [pid 5490] memfd_create("syzkaller", 0 [pid 5489] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5488] <... open resumed>) = 5 [pid 5487] ftruncate(5, 33587195 [pid 5490] <... memfd_create resumed>) = 3 [pid 5488] ftruncate(5, 33587195 [pid 5487] <... ftruncate resumed>) = 0 [pid 5490] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5488] <... ftruncate resumed>) = 0 [pid 5487] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5490] <... mmap resumed>) = 0x7f18ca796000 [pid 5488] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5487] <... open resumed>) = 6 [pid 5488] <... open resumed>) = 6 [ 150.285733][ T5492] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.308349][ T5489] loop5: detected capacity change from 0 to 4096 [pid 5487] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5488] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5487] <... open resumed>) = 7 [pid 5487] sendfile(6, 7, NULL, 281474978811909 [pid 5488] <... open resumed>) = 7 [pid 5490] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 150.368778][ T5489] NILFS (loop5): invalid segment: Checksum error in segment payload [ 150.393486][ T5489] NILFS (loop5): trying rollback from an earlier position [pid 5488] sendfile(6, 7, NULL, 281474978811909 [pid 5490] <... write resumed>) = 2097152 [pid 5490] munmap(0x7f18ca796000, 2097152) = 0 [ 150.478558][ T5489] NILFS (loop5): recovery complete [pid 5490] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5489] <... mount resumed>) = 0 [pid 5489] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5490] <... openat resumed>) = 4 [pid 5490] ioctl(4, LOOP_SET_FD, 3 [pid 5489] <... openat resumed>) = 3 [pid 5489] chdir("./file1") = 0 [pid 5489] ioctl(4, LOOP_CLR_FD) = 0 [pid 5489] close(4) = 0 [pid 5489] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5489] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5490] <... ioctl resumed>) = 0 [pid 5490] close(3 [pid 5489] ftruncate(5, 33587195 [pid 5490] <... close resumed>) = 0 [pid 5489] <... ftruncate resumed>) = 0 [pid 5490] mkdir("./file1", 0777 [pid 5489] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5490] <... mkdir resumed>) = 0 [pid 5489] <... open resumed>) = 6 [pid 5490] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5489] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 150.508176][ T5493] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.528563][ T5490] loop3: detected capacity change from 0 to 4096 [ 150.626796][ T5490] NILFS (loop3): invalid segment: Checksum error in segment payload [ 150.654462][ T5490] NILFS (loop3): trying rollback from an earlier position [ 150.685629][ T5490] NILFS (loop3): recovery complete [pid 5489] sendfile(6, 7, NULL, 281474978811909 [pid 5490] <... mount resumed>) = 0 [pid 5490] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5490] chdir("./file1") = 0 [pid 5490] ioctl(4, LOOP_CLR_FD) = 0 [ 150.746078][ T5494] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5490] close(4) = 0 [pid 5484] <... sendfile resumed>) = 1048576 [pid 5484] exit_group(0) = ? [pid 5484] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5484, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 4997] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4997] umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./38/binderfs") = 0 [pid 4997] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5490] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5490] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5490] ftruncate(5, 33587195) = 0 [pid 5490] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5490] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5490] sendfile(6, 7, NULL, 281474978811909 [pid 5483] <... sendfile resumed>) = 1048576 [pid 5483] exit_group(0 [pid 4997] <... umount2 resumed>) = 0 [pid 5483] <... exit_group resumed>) = ? [pid 4997] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./38/file1", [pid 5483] +++ exited with 0 +++ [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5483, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=30 /* 0.30 s */} --- [pid 4997] umount2("./38/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./38/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... openat resumed>) = 4 [pid 5001] <... openat resumed>) = 3 [pid 4997] fstat(4, [pid 5001] fstat(3, [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, [pid 5001] getdents64(3, [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] getdents64(4, [pid 5001] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] close(4 [pid 5001] lstat("./39/binderfs", [pid 4997] <... close resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] rmdir("./38/file1" [pid 5001] unlink("./39/binderfs" [pid 4997] <... rmdir resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 4997] getdents64(3, [pid 5001] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./38") = 0 [pid 4997] mkdir("./39", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5495 ./strace-static-x86_64: Process 5495 attached [pid 5495] chdir("./39") = 0 [pid 5495] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5495] setpgid(0, 0) = 0 [pid 5495] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5495] write(3, "1000", 4) = 4 [pid 5495] close(3) = 0 [pid 5495] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5495] memfd_create("syzkaller", 0) = 3 [pid 5495] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5495] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./39/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./39/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./39/file1" [pid 5495] <... write resumed>) = 2097152 [pid 5495] munmap(0x7f18ca796000, 2097152 [pid 5001] <... rmdir resumed>) = 0 [pid 5001] getdents64(3, [pid 5495] <... munmap resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./39") = 0 [pid 5001] mkdir("./40", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 5495] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5495] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... close resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5495] <... ioctl resumed>) = 0 [pid 5495] close(3 [pid 5001] <... clone resumed>, child_tidptr=0x555556f7b690) = 5496 ./strace-static-x86_64: Process 5496 attached [pid 5496] chdir("./40" [pid 5495] <... close resumed>) = 0 [pid 5496] <... chdir resumed>) = 0 [pid 5496] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5495] mkdir("./file1", 0777 [pid 5496] setpgid(0, 0 [pid 5495] <... mkdir resumed>) = 0 [pid 5496] <... setpgid resumed>) = 0 [ 151.231484][ T5495] loop0: detected capacity change from 0 to 4096 [pid 5495] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5496] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5496] write(3, "1000", 4) = 4 [pid 5496] close(3) = 0 [pid 5496] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5496] memfd_create("syzkaller", 0) = 3 [pid 5496] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 151.327919][ T5495] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5496] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5487] <... sendfile resumed>) = 1048576 [ 151.368324][ T5495] NILFS (loop0): trying rollback from an earlier position [pid 5487] exit_group(0) = ? [pid 5487] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5487, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 4998] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./39/binderfs") = 0 [ 151.429563][ T5495] NILFS (loop0): recovery complete [pid 4998] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5495] <... mount resumed>) = 0 [pid 5495] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5495] chdir("./file1") = 0 [pid 5495] ioctl(4, LOOP_CLR_FD) = 0 [pid 5495] close(4) = 0 [pid 5488] <... sendfile resumed>) = 1048576 [pid 5495] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5488] exit_group(0) = ? [pid 5495] <... open resumed>) = 4 [pid 5495] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5495] ftruncate(5, 33587195) = 0 [pid 5496] <... write resumed>) = 2097152 [pid 5495] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5488] +++ exited with 0 +++ [pid 5496] munmap(0x7f18ca796000, 2097152 [pid 5495] <... open resumed>) = 6 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5488, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=28 /* 0.28 s */} --- [ 151.464624][ T5497] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5496] <... munmap resumed>) = 0 [pid 5495] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 5496] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5495] <... open resumed>) = 7 [pid 4999] <... restart_syscall resumed>) = 0 [pid 5496] <... openat resumed>) = 4 [pid 5495] sendfile(6, 7, NULL, 281474978811909 [pid 5496] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 4999] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5496] close(3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5496] <... close resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5496] mkdir("./file1", 0777 [pid 4999] <... openat resumed>) = 3 [pid 5496] <... mkdir resumed>) = 0 [pid 4999] fstat(3, [pid 5496] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./39/binderfs", [pid 4998] <... umount2 resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] unlink("./39/binderfs") = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 151.553225][ T5496] loop4: detected capacity change from 0 to 4096 [ 151.585364][ T5496] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 4998] lstat("./39/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./39/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./39/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./39") = 0 [pid 4998] mkdir("./40", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [ 151.616227][ T5496] NILFS (loop4): trying rollback from an earlier position [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5498 ./strace-static-x86_64: Process 5498 attached [pid 5498] chdir("./40") = 0 [pid 5498] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5498] setpgid(0, 0) = 0 [pid 5498] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5498] write(3, "1000", 4) = 4 [pid 5498] close(3) = 0 [pid 5498] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5498] memfd_create("syzkaller", 0) = 3 [pid 5498] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5496] <... mount resumed>) = 0 [pid 5496] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5496] chdir("./file1") = 0 [ 151.741348][ T5496] NILFS (loop4): recovery complete [pid 5498] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5489] <... sendfile resumed>) = 1048576 [pid 4999] <... umount2 resumed>) = 0 [pid 5496] ioctl(4, LOOP_CLR_FD [pid 5489] exit_group(0 [pid 4999] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5496] <... ioctl resumed>) = 0 [pid 5489] <... exit_group resumed>) = ? [pid 5496] close(4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5496] <... close resumed>) = 0 [pid 5496] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5489] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5489, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5496] <... open resumed>) = 4 [pid 5002] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] lstat("./39/file1", [pid 5496] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5496] <... open resumed>) = 5 [pid 5002] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5496] ftruncate(5, 33587195 [pid 5002] <... openat resumed>) = 3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5496] <... ftruncate resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./39/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5496] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] fstat(3, [pid 5496] <... open resumed>) = 6 [pid 4999] <... openat resumed>) = 4 [pid 5496] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5490] <... sendfile resumed>) = 1048576 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 151.780755][ T5499] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] fstat(4, [pid 5496] <... open resumed>) = 7 [pid 5490] exit_group(0 [pid 5002] getdents64(3, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5496] sendfile(6, 7, NULL, 281474978811909 [pid 5490] <... exit_group resumed>) = ? [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] getdents64(4, [pid 5490] +++ exited with 0 +++ [pid 5002] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] lstat("./40/binderfs", [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5490, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 4999] getdents64(4, [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 5002] unlink("./40/binderfs" [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] <... restart_syscall resumed>) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 4999] close(4 [pid 5002] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./39/file1" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... rmdir resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 4999] getdents64(3, [pid 5000] fstat(3, [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] close(3 [pid 5000] getdents64(3, [pid 4999] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] rmdir("./39" [pid 5000] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] <... rmdir resumed>) = 0 [pid 5000] lstat("./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./40/binderfs" [pid 4999] mkdir("./40", 0777 [pid 5000] <... unlink resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5000] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5498] <... write resumed>) = 2097152 [pid 5498] munmap(0x7f18ca796000, 2097152 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 5498] <... munmap resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5498] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5498] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5500 [pid 5498] <... ioctl resumed>) = 0 [pid 5498] close(3) = 0 [pid 5498] mkdir("./file1", 0777./strace-static-x86_64: Process 5500 attached [pid 5500] chdir("./40" [pid 5498] <... mkdir resumed>) = 0 [pid 5500] <... chdir resumed>) = 0 [pid 5498] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5500] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5500] setpgid(0, 0) = 0 [pid 5002] <... umount2 resumed>) = 0 [ 151.918660][ T5498] loop1: detected capacity change from 0 to 4096 [pid 5500] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./40/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5500] <... openat resumed>) = 3 [pid 5500] write(3, "1000", 4) = 4 [pid 5500] close(3) = 0 [pid 5500] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5500] memfd_create("syzkaller", 0) = 3 [pid 5500] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5002] openat(AT_FDCWD, "./40/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, [pid 5500] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 151.968006][ T5498] NILFS (loop1): invalid segment: Checksum error in segment payload [ 151.982609][ T5498] NILFS (loop1): trying rollback from an earlier position [pid 5002] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./40/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./40") = 0 [pid 5002] mkdir("./41", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5501 ./strace-static-x86_64: Process 5501 attached [pid 5501] chdir("./41") = 0 [pid 5501] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5501] setpgid(0, 0) = 0 [pid 5501] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5501] write(3, "1000", 4) = 4 [ 152.040825][ T5498] NILFS (loop1): recovery complete [pid 5501] close(3) = 0 [pid 5501] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5501] memfd_create("syzkaller", 0) = 3 [pid 5501] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5000] <... umount2 resumed>) = 0 [pid 5500] <... write resumed>) = 2097152 [pid 5498] <... mount resumed>) = 0 [pid 5000] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5500] munmap(0x7f18ca796000, 2097152 [pid 5498] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5501] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5500] <... munmap resumed>) = 0 [pid 5498] <... openat resumed>) = 3 [pid 5000] lstat("./40/file1", [pid 5500] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5498] chdir("./file1" [pid 5500] <... openat resumed>) = 4 [ 152.104396][ T5502] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5498] <... chdir resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5500] ioctl(4, LOOP_SET_FD, 3 [pid 5498] ioctl(4, LOOP_CLR_FD [pid 5000] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5501] <... write resumed>) = 2097152 [pid 5498] <... ioctl resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5501] munmap(0x7f18ca796000, 2097152 [pid 5498] close(4 [pid 5000] openat(AT_FDCWD, "./40/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5501] <... munmap resumed>) = 0 [pid 5500] <... ioctl resumed>) = 0 [pid 5498] <... close resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 5501] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5500] close(3 [pid 5498] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5000] fstat(4, [pid 5501] <... openat resumed>) = 4 [pid 5500] <... close resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5501] ioctl(4, LOOP_SET_FD, 3 [pid 5500] mkdir("./file1", 0777 [pid 5000] getdents64(4, [pid 5501] <... ioctl resumed>) = 0 [pid 5500] <... mkdir resumed>) = 0 [pid 5498] <... open resumed>) = 4 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5501] close(3 [pid 5500] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5498] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5000] getdents64(4, [pid 5501] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5501] mkdir("./file1", 0777 [pid 5000] close(4 [pid 5501] <... mkdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5501] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5000] rmdir("./40/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./40") = 0 [ 152.166986][ T5500] loop2: detected capacity change from 0 to 4096 [ 152.195223][ T5501] loop5: detected capacity change from 0 to 4096 [pid 5000] mkdir("./41", 0777 [pid 5498] <... open resumed>) = 5 [pid 5000] <... mkdir resumed>) = 0 [pid 5498] ftruncate(5, 33587195 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 5498] <... ftruncate resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5498] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5498] <... open resumed>) = 6 [pid 5498] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5503 [pid 5498] <... open resumed>) = 7 [pid 5498] sendfile(6, 7, NULL, 281474978811909./strace-static-x86_64: Process 5503 attached [pid 5503] chdir("./41") = 0 [pid 5503] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5503] setpgid(0, 0) = 0 [pid 5503] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5503] write(3, "1000", 4) = 4 [pid 5503] close(3) = 0 [pid 5503] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5503] memfd_create("syzkaller", 0) = 3 [pid 5503] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 152.211737][ T5500] NILFS (loop2): invalid segment: Checksum error in segment payload [ 152.237257][ T5501] NILFS (loop5): invalid segment: Checksum error in segment payload [ 152.244333][ T5500] NILFS (loop2): trying rollback from an earlier position [ 152.274033][ T5501] NILFS (loop5): trying rollback from an earlier position [ 152.308133][ T5500] NILFS (loop2): recovery complete [pid 5503] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5500] <... mount resumed>) = 0 [pid 5503] <... write resumed>) = 2097152 [pid 5500] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5503] munmap(0x7f18ca796000, 2097152 [pid 5500] <... openat resumed>) = 3 [pid 5503] <... munmap resumed>) = 0 [pid 5500] chdir("./file1" [pid 5503] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5500] <... chdir resumed>) = 0 [pid 5503] <... openat resumed>) = 4 [pid 5500] ioctl(4, LOOP_CLR_FD [pid 5503] ioctl(4, LOOP_SET_FD, 3 [pid 5500] <... ioctl resumed>) = 0 [pid 5501] <... mount resumed>) = 0 [pid 5500] close(4 [pid 5503] <... ioctl resumed>) = 0 [pid 5500] <... close resumed>) = 0 [ 152.352599][ T5504] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 152.383409][ T5501] NILFS (loop5): recovery complete [ 152.391401][ T5503] loop3: detected capacity change from 0 to 4096 [pid 5503] close(3 [pid 5500] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5503] <... close resumed>) = 0 [pid 5503] mkdir("./file1", 0777) = 0 [pid 5503] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5501] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5500] <... open resumed>) = 4 [pid 5501] <... openat resumed>) = 3 [pid 5500] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5501] chdir("./file1" [pid 5500] <... open resumed>) = 5 [pid 5501] <... chdir resumed>) = 0 [pid 5500] ftruncate(5, 33587195 [pid 5501] ioctl(4, LOOP_CLR_FD [pid 5500] <... ftruncate resumed>) = 0 [pid 5501] <... ioctl resumed>) = 0 [pid 5500] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5501] close(4 [pid 5500] <... open resumed>) = 6 [pid 5501] <... close resumed>) = 0 [pid 5500] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5501] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5500] <... open resumed>) = 7 [pid 5500] sendfile(6, 7, NULL, 281474978811909 [pid 5501] <... open resumed>) = 4 [pid 5501] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [ 152.395264][ T5505] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5501] ftruncate(5, 33587195) = 0 [pid 5501] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5501] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 152.471349][ T5503] NILFS (loop3): invalid segment: Checksum error in segment payload [ 152.494539][ T5503] NILFS (loop3): trying rollback from an earlier position [ 152.548469][ T5503] NILFS (loop3): recovery complete [pid 5501] sendfile(6, 7, NULL, 281474978811909 [pid 5503] <... mount resumed>) = 0 [pid 5503] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5503] chdir("./file1") = 0 [pid 5503] ioctl(4, LOOP_CLR_FD) = 0 [pid 5503] close(4) = 0 [pid 5503] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5503] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [ 152.588758][ T5506] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5503] ftruncate(5, 33587195) = 0 [pid 5503] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5503] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5503] sendfile(6, 7, NULL, 281474978811909 [pid 5495] <... sendfile resumed>) = 1048576 [pid 5495] exit_group(0) = ? [pid 5495] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5495, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 4997] umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./39/binderfs") = 0 [pid 4997] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5496] <... sendfile resumed>) = 1048576 [pid 5496] exit_group(0) = ? [pid 5496] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5496, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] <... umount2 resumed>) = 0 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] lstat("./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] unlink("./40/binderfs" [pid 4997] lstat("./39/file1", [pid 5001] <... unlink resumed>) = 0 [pid 5001] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./39/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./39/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./39/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./39") = 0 [pid 4997] mkdir("./40", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5507 ./strace-static-x86_64: Process 5507 attached [pid 5507] chdir("./40") = 0 [pid 5507] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5507] setpgid(0, 0) = 0 [pid 5507] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5507] write(3, "1000", 4) = 4 [pid 5507] close(3) = 0 [pid 5507] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5507] memfd_create("syzkaller", 0) = 3 [pid 5507] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5001] <... umount2 resumed>) = 0 [pid 5507] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./40/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./40/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./40/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./40") = 0 [pid 5001] mkdir("./41", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5508 attached [pid 5507] <... write resumed>) = 2097152 [pid 5001] <... clone resumed>, child_tidptr=0x555556f7b690) = 5508 [pid 5508] chdir("./41") = 0 [pid 5507] munmap(0x7f18ca796000, 2097152 [pid 5508] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5507] <... munmap resumed>) = 0 [pid 5508] setpgid(0, 0) = 0 [pid 5507] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5508] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5508] write(3, "1000", 4) = 4 [pid 5507] <... openat resumed>) = 4 [pid 5508] close(3) = 0 [pid 5507] ioctl(4, LOOP_SET_FD, 3 [pid 5508] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5508] memfd_create("syzkaller", 0) = 3 [pid 5508] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5507] <... ioctl resumed>) = 0 [pid 5508] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5507] close(3) = 0 [pid 5507] mkdir("./file1", 0777) = 0 [ 153.247257][ T5507] loop0: detected capacity change from 0 to 4096 [pid 5507] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5508] <... write resumed>) = 2097152 [pid 5508] munmap(0x7f18ca796000, 2097152) = 0 [pid 5508] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5508] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5508] close(3) = 0 [pid 5508] mkdir("./file1", 0777) = 0 [ 153.318845][ T5507] NILFS (loop0): invalid segment: Checksum error in segment payload [ 153.340481][ T5507] NILFS (loop0): trying rollback from an earlier position [ 153.354747][ T5508] loop4: detected capacity change from 0 to 4096 [pid 5508] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5498] <... sendfile resumed>) = 1048576 [pid 5498] exit_group(0) = ? [pid 5498] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5498, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=30 /* 0.30 s */} --- [ 153.402630][ T5508] NILFS (loop4): invalid segment: Checksum error in segment payload [ 153.413270][ T5508] NILFS (loop4): trying rollback from an earlier position [ 153.433255][ T5507] NILFS (loop0): recovery complete [pid 4998] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5507] <... mount resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5507] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4998] <... openat resumed>) = 3 [pid 5507] <... openat resumed>) = 3 [pid 4998] fstat(3, [pid 5507] chdir("./file1" [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5507] <... chdir resumed>) = 0 [pid 4998] getdents64(3, [pid 5507] ioctl(4, LOOP_CLR_FD [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5507] <... ioctl resumed>) = 0 [pid 5507] close(4 [pid 4998] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5508] <... mount resumed>) = 0 [pid 5507] <... close resumed>) = 0 [pid 5508] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5507] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5508] <... openat resumed>) = 3 [pid 5508] chdir("./file1" [pid 4998] lstat("./40/binderfs", [pid 5508] <... chdir resumed>) = 0 [pid 5508] ioctl(4, LOOP_CLR_FD [pid 5507] <... open resumed>) = 4 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5508] <... ioctl resumed>) = 0 [pid 5507] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] unlink("./40/binderfs" [pid 5508] close(4 [pid 5507] <... open resumed>) = 5 [pid 4998] <... unlink resumed>) = 0 [pid 5508] <... close resumed>) = 0 [pid 5507] ftruncate(5, 33587195 [pid 5500] <... sendfile resumed>) = 1048576 [pid 4998] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 153.450427][ T5509] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.473101][ T5508] NILFS (loop4): recovery complete [ 153.491516][ T5510] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5508] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5507] <... ftruncate resumed>) = 0 [pid 5507] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5500] exit_group(0 [pid 5508] <... open resumed>) = 4 [pid 5507] <... open resumed>) = 6 [pid 5507] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5508] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5507] <... open resumed>) = 7 [pid 5507] sendfile(6, 7, NULL, 281474978811909 [pid 5508] <... open resumed>) = 5 [pid 5508] ftruncate(5, 33587195) = 0 [pid 5500] <... exit_group resumed>) = ? [pid 5508] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5508] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5508] sendfile(6, 7, NULL, 281474978811909 [pid 5500] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5500, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 4999] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./40/binderfs") = 0 [pid 4999] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5501] <... sendfile resumed>) = 1048576 [pid 5501] exit_group(0) = ? [pid 5501] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5501, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5002] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./41/binderfs") = 0 [pid 5002] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5503] <... sendfile resumed>) = 1048576 [pid 5503] exit_group(0) = ? [pid 5503] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5503, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5000] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./41/binderfs") = 0 [pid 5000] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./40/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./40/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] fstat(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] lstat("./40/file1", [pid 4998] getdents64(4, [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] close(4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... close resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./40/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] rmdir("./40/file1" [pid 5002] <... umount2 resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 4998] <... rmdir resumed>) = 0 [pid 4999] fstat(4, [pid 4998] getdents64(3, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] getdents64(4, [pid 4998] close(3 [pid 5002] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./41/file1", [pid 4999] getdents64(4, [pid 4998] rmdir("./40" [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5002] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] close(4 [pid 4998] mkdir("./41", 0777 [pid 4999] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] rmdir("./40/file1" [pid 4998] <... mkdir resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./41/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] getdents64(3, [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] <... openat resumed>) = 4 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5002] fstat(4, [pid 4999] close(3 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... close resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] getdents64(4, [pid 4999] rmdir("./40" [pid 4998] close(3 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5511 attached [pid 5002] getdents64(4, [pid 5000] <... umount2 resumed>) = 0 [pid 4999] mkdir("./41", 0777 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5511 [pid 5511] chdir("./41" [pid 5002] close(4 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5511] <... chdir resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./41/file1" [pid 5511] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] <... openat resumed>) = 3 [pid 5002] <... rmdir resumed>) = 0 [pid 5511] <... prctl resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5511] setpgid(0, 0 [pid 5002] getdents64(3, [pid 5000] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5511] <... setpgid resumed>) = 0 [pid 5511] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] close(3 [pid 5511] <... openat resumed>) = 3 [pid 5002] close(3 [pid 4999] <... close resumed>) = 0 [pid 5511] write(3, "1000", 4) = 4 [pid 5002] <... close resumed>) = 0 [pid 5000] lstat("./41/file1", [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5511] close(3 [pid 5002] rmdir("./41") = 0 [pid 5511] <... close resumed>) = 0 [pid 5002] mkdir("./42", 0777 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5511] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... mkdir resumed>) = 0 [pid 5511] <... symlink resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5511] memfd_create("syzkaller", 0 [pid 5002] <... openat resumed>) = 3 [pid 5511] <... memfd_create resumed>) = 3 [pid 5511] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5512 attached ) = 0x7f18ca796000 [pid 5512] chdir("./41") = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5512 [pid 5000] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5512] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5512] setpgid(0, 0) = 0 [pid 5512] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 5000] openat(AT_FDCWD, "./41/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... close resumed>) = 0 [pid 5512] <... openat resumed>) = 3 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... openat resumed>) = 4 [pid 5000] fstat(4, [pid 5512] write(3, "1000", 4) = 4 [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5513 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5512] close(3) = 0 [pid 5512] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5000] getdents64(4, [pid 5512] memfd_create("syzkaller", 0) = 3 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5512] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5000] getdents64(4, ./strace-static-x86_64: Process 5513 attached [pid 5511] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5513] chdir("./42" [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5513] <... chdir resumed>) = 0 [pid 5513] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5000] close(4 [pid 5513] setpgid(0, 0) = 0 [pid 5513] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] <... close resumed>) = 0 [pid 5513] <... openat resumed>) = 3 [pid 5513] write(3, "1000", 4) = 4 [pid 5513] close(3 [pid 5000] rmdir("./41/file1" [pid 5513] <... close resumed>) = 0 [pid 5513] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5513] memfd_create("syzkaller", 0 [pid 5000] getdents64(3, [pid 5513] <... memfd_create resumed>) = 3 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5513] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5000] close(3) = 0 [pid 5000] rmdir("./41") = 0 [pid 5000] mkdir("./42", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5512] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5514 ./strace-static-x86_64: Process 5514 attached [pid 5514] chdir("./42") = 0 [pid 5514] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5514] setpgid(0, 0 [pid 5511] <... write resumed>) = 2097152 [pid 5514] <... setpgid resumed>) = 0 [pid 5513] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5511] munmap(0x7f18ca796000, 2097152 [pid 5514] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5511] <... munmap resumed>) = 0 [pid 5514] <... openat resumed>) = 3 [pid 5511] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5514] write(3, "1000", 4 [pid 5511] <... openat resumed>) = 4 [pid 5514] <... write resumed>) = 4 [pid 5511] ioctl(4, LOOP_SET_FD, 3 [pid 5514] close(3) = 0 [pid 5514] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5514] memfd_create("syzkaller", 0) = 3 [pid 5514] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5511] <... ioctl resumed>) = 0 [pid 5511] close(3) = 0 [pid 5511] mkdir("./file1", 0777 [pid 5514] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5512] <... write resumed>) = 2097152 [pid 5511] <... mkdir resumed>) = 0 [pid 5511] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5512] munmap(0x7f18ca796000, 2097152) = 0 [pid 5513] <... write resumed>) = 2097152 [ 154.036382][ T5511] loop1: detected capacity change from 0 to 4096 [pid 5512] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5513] munmap(0x7f18ca796000, 2097152 [pid 5512] <... openat resumed>) = 4 [pid 5512] ioctl(4, LOOP_SET_FD, 3 [pid 5513] <... munmap resumed>) = 0 [pid 5513] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5513] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5513] close(3) = 0 [pid 5513] mkdir("./file1", 0777) = 0 [pid 5513] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5512] <... ioctl resumed>) = 0 [pid 5512] close(3) = 0 [pid 5512] mkdir("./file1", 0777) = 0 [ 154.098312][ T5512] loop2: detected capacity change from 0 to 4096 [ 154.109328][ T5513] loop5: detected capacity change from 0 to 4096 [ 154.110599][ T5511] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5512] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5514] <... write resumed>) = 2097152 [pid 5514] munmap(0x7f18ca796000, 2097152) = 0 [pid 5514] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5514] ioctl(4, LOOP_SET_FD, 3) = 0 [ 154.159360][ T5513] NILFS (loop5): invalid segment: Checksum error in segment payload [ 154.159434][ T5512] NILFS (loop2): invalid segment: Checksum error in segment payload [ 154.174944][ T5513] NILFS (loop5): trying rollback from an earlier position [ 154.184252][ T5511] NILFS (loop1): trying rollback from an earlier position [ 154.196494][ T5514] loop3: detected capacity change from 0 to 4096 [pid 5514] close(3) = 0 [pid 5514] mkdir("./file1", 0777) = 0 [ 154.228528][ T5512] NILFS (loop2): trying rollback from an earlier position [ 154.241277][ T5513] NILFS (loop5): recovery complete [ 154.247703][ T5511] NILFS (loop1): recovery complete [ 154.261179][ T5514] NILFS (loop3): invalid segment: Checksum error in segment payload [ 154.270884][ T5514] NILFS (loop3): trying rollback from an earlier position [pid 5514] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5511] <... mount resumed>) = 0 [pid 5511] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5511] chdir("./file1") = 0 [pid 5511] ioctl(4, LOOP_CLR_FD) = 0 [pid 5513] <... mount resumed>) = 0 [pid 5511] close(4) = 0 [pid 5511] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5513] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5511] <... open resumed>) = 4 [pid 5513] <... openat resumed>) = 3 [pid 5511] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5513] chdir("./file1") = 0 [pid 5513] ioctl(4, LOOP_CLR_FD) = 0 [pid 5513] close(4 [pid 5511] <... open resumed>) = 5 [pid 5513] <... close resumed>) = 0 [pid 5511] ftruncate(5, 33587195 [pid 5513] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5511] <... ftruncate resumed>) = 0 [pid 5513] <... open resumed>) = 4 [pid 5513] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5511] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5513] <... open resumed>) = 5 [pid 5511] <... open resumed>) = 6 [pid 5513] ftruncate(5, 33587195 [pid 5511] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5513] <... ftruncate resumed>) = 0 [pid 5511] <... open resumed>) = 7 [pid 5513] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5511] sendfile(6, 7, NULL, 281474978811909 [pid 5513] <... open resumed>) = 6 [pid 5513] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 154.271796][ T5512] NILFS (loop2): recovery complete [ 154.280708][ T5516] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.295407][ T5515] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5513] sendfile(6, 7, NULL, 281474978811909 [pid 5512] <... mount resumed>) = 0 [pid 5512] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5512] chdir("./file1") = 0 [pid 5512] ioctl(4, LOOP_CLR_FD) = 0 [pid 5512] close(4) = 0 [pid 5512] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5512] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5512] ftruncate(5, 33587195) = 0 [pid 5512] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5512] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 154.363620][ T5517] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.373567][ T5514] NILFS (loop3): recovery complete [pid 5512] sendfile(6, 7, NULL, 281474978811909 [pid 5514] <... mount resumed>) = 0 [pid 5514] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5514] chdir("./file1") = 0 [pid 5514] ioctl(4, LOOP_CLR_FD) = 0 [pid 5514] close(4) = 0 [pid 5514] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5514] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5514] ftruncate(5, 33587195) = 0 [pid 5514] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5514] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5514] sendfile(6, 7, NULL, 281474978811909 [pid 5507] <... sendfile resumed>) = 1048576 [pid 5507] exit_group(0) = ? [pid 5507] +++ exited with 0 +++ [ 154.443038][ T5518] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5507, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 4997] umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./40/binderfs") = 0 [pid 4997] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5508] <... sendfile resumed>) = 1048576 [pid 5508] exit_group(0) = ? [pid 5508] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5508, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5001] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] <... umount2 resumed>) = 0 [pid 5001] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(3, [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] lstat("./40/file1", [pid 5001] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] lstat("./41/binderfs", [pid 4997] umount2("./40/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] unlink("./41/binderfs" [pid 4997] openat(AT_FDCWD, "./40/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... unlink resumed>) = 0 [pid 4997] <... openat resumed>) = 4 [pid 5001] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./40/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./40") = 0 [pid 4997] mkdir("./41", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5519 ./strace-static-x86_64: Process 5519 attached [pid 5519] chdir("./41") = 0 [pid 5519] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5519] setpgid(0, 0) = 0 [pid 5519] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5519] write(3, "1000", 4) = 4 [pid 5519] close(3) = 0 [pid 5519] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5519] memfd_create("syzkaller", 0) = 3 [pid 5519] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5519] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./41/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./41/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5519] <... write resumed>) = 2097152 [pid 5001] <... openat resumed>) = 4 [pid 5001] fstat(4, [pid 5519] munmap(0x7f18ca796000, 2097152 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5519] <... munmap resumed>) = 0 [pid 5001] getdents64(4, [pid 5519] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5001] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5519] <... openat resumed>) = 4 [pid 5001] getdents64(4, [pid 5519] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./41/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./41" [pid 5519] <... ioctl resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5001] mkdir("./42", 0777) = 0 [pid 5519] close(3) = 0 [pid 5519] mkdir("./file1", 0777) = 0 [pid 5519] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5520 [ 155.074085][ T5519] loop0: detected capacity change from 0 to 4096 ./strace-static-x86_64: Process 5520 attached [pid 5520] chdir("./42") = 0 [pid 5520] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5520] setpgid(0, 0) = 0 [pid 5520] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5520] write(3, "1000", 4) = 4 [pid 5520] close(3) = 0 [pid 5520] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5520] memfd_create("syzkaller", 0) = 3 [pid 5520] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 155.144067][ T5519] NILFS (loop0): invalid segment: Checksum error in segment payload [ 155.173022][ T5519] NILFS (loop0): trying rollback from an earlier position [ 155.247817][ T5519] NILFS (loop0): recovery complete [pid 5520] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5520] munmap(0x7f18ca796000, 2097152) = 0 [pid 5520] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5520] ioctl(4, LOOP_SET_FD, 3 [pid 5519] <... mount resumed>) = 0 [pid 5519] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5519] chdir("./file1") = 0 [pid 5519] ioctl(4, LOOP_CLR_FD) = 0 [pid 5519] close(4) = 0 [pid 5519] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5520] <... ioctl resumed>) = 0 [pid 5519] <... open resumed>) = 4 [pid 5520] close(3) = 0 [pid 5520] mkdir("./file1", 0777) = 0 [ 155.307828][ T5520] loop4: detected capacity change from 0 to 4096 [ 155.321625][ T5521] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5520] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5519] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5519] ftruncate(5, 33587195) = 0 [pid 5519] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5519] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5519] sendfile(6, 7, NULL, 281474978811909 [pid 5511] <... sendfile resumed>) = 1048576 [pid 5511] exit_group(0) = ? [pid 5511] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5511, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 4998] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 155.357467][ T5520] NILFS (loop4): invalid segment: Checksum error in segment payload [ 155.368862][ T5520] NILFS (loop4): trying rollback from an earlier position [pid 4998] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./41/binderfs") = 0 [pid 4998] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5514] <... sendfile resumed>) = 1048576 [pid 5514] exit_group(0) = ? [pid 5514] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5514, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./42/binderfs") = 0 [ 155.477161][ T5520] NILFS (loop4): recovery complete [pid 5000] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5520] <... mount resumed>) = 0 [pid 5520] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5513] <... sendfile resumed>) = 1048576 [pid 5520] chdir("./file1" [pid 5513] exit_group(0 [pid 5520] <... chdir resumed>) = 0 [pid 5520] ioctl(4, LOOP_CLR_FD [pid 5513] <... exit_group resumed>) = ? [pid 5520] <... ioctl resumed>) = 0 [pid 5520] close(4) = 0 [pid 5520] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5513] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5513, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5520] <... open resumed>) = 4 [pid 5520] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5002] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW [ 155.501648][ T5522] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5520] ftruncate(5, 33587195 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5520] <... ftruncate resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5520] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] fstat(3, [pid 5520] <... open resumed>) = 6 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5520] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5002] getdents64(3, [pid 5520] <... open resumed>) = 7 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5520] sendfile(6, 7, NULL, 281474978811909 [pid 5002] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./42/binderfs") = 0 [pid 5002] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5512] <... sendfile resumed>) = 1048576 [pid 5512] exit_group(0 [pid 4998] <... umount2 resumed>) = 0 [pid 5512] <... exit_group resumed>) = ? [pid 5512] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5512, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, [pid 4998] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./41/file1", [pid 4999] lstat("./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 4999] unlink("./41/binderfs" [pid 4998] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./42/file1", [pid 4998] openat(AT_FDCWD, "./41/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... openat resumed>) = 4 [pid 5000] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] fstat(4, [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] openat(AT_FDCWD, "./42/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] getdents64(4, [pid 5000] <... openat resumed>) = 4 [pid 5000] fstat(4, [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 5000] getdents64(4, [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] close(4 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] <... close resumed>) = 0 [pid 5000] close(4 [pid 4998] rmdir("./41/file1" [pid 5002] <... umount2 resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5002] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] rmdir("./42/file1" [pid 4998] <... rmdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, [pid 5000] getdents64(3, [pid 5002] lstat("./42/file1", [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3 [pid 5002] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] rmdir("./41" [pid 5002] openat(AT_FDCWD, "./42/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] close(3 [pid 5002] <... openat resumed>) = 4 [pid 5000] <... close resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5002] fstat(4, [pid 4998] mkdir("./42", 0777 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] rmdir("./42" [pid 5002] getdents64(4, [pid 5000] <... rmdir resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] mkdir("./43", 0777 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] getdents64(4, [pid 5000] <... mkdir resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4998] <... openat resumed>) = 3 [pid 5002] close(4 [pid 5000] <... openat resumed>) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5002] <... close resumed>) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5002] rmdir("./42/file1" [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... rmdir resumed>) = 0 [pid 5000] close(3 [pid 4998] close(3 [pid 5002] getdents64(3, [pid 5000] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... close resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5523 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] close(3) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5524 [pid 5002] rmdir("./42") = 0 [pid 5002] mkdir("./43", 0777) = 0 ./strace-static-x86_64: Process 5524 attached [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 ./strace-static-x86_64: Process 5523 attached [pid 5524] chdir("./42" [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5523] chdir("./43" [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5523] <... chdir resumed>) = 0 [pid 5002] close(3 [pid 5523] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... close resumed>) = 0 [pid 5523] <... prctl resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5523] setpgid(0, 0) = 0 [pid 5523] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5523] write(3, "1000", 4) = 4 [pid 5524] <... chdir resumed>) = 0 [pid 5523] close(3 [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5525 [pid 5524] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5523] <... close resumed>) = 0 ./strace-static-x86_64: Process 5525 attached [pid 5524] <... prctl resumed>) = 0 [pid 5523] symlink("/dev/binderfs", "./binderfs" [pid 5525] chdir("./43" [pid 5524] setpgid(0, 0 [pid 5523] <... symlink resumed>) = 0 [pid 5525] <... chdir resumed>) = 0 [pid 5524] <... setpgid resumed>) = 0 [pid 5523] memfd_create("syzkaller", 0 [pid 5525] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5524] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5523] <... memfd_create resumed>) = 3 [pid 5525] <... prctl resumed>) = 0 [pid 5524] <... openat resumed>) = 3 [pid 5523] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5525] setpgid(0, 0 [pid 5524] write(3, "1000", 4 [pid 5523] <... mmap resumed>) = 0x7f18ca796000 [pid 5525] <... setpgid resumed>) = 0 [pid 5524] <... write resumed>) = 4 [pid 5525] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5524] close(3 [pid 5525] <... openat resumed>) = 3 [pid 5524] <... close resumed>) = 0 [pid 5525] write(3, "1000", 4 [pid 5524] symlink("/dev/binderfs", "./binderfs" [pid 5525] <... write resumed>) = 4 [pid 5525] close(3 [pid 5524] <... symlink resumed>) = 0 [pid 5525] <... close resumed>) = 0 [pid 5525] symlink("/dev/binderfs", "./binderfs" [pid 5524] memfd_create("syzkaller", 0 [pid 5525] <... symlink resumed>) = 0 [pid 5524] <... memfd_create resumed>) = 3 [pid 5525] memfd_create("syzkaller", 0 [pid 5524] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5525] <... memfd_create resumed>) = 3 [pid 5524] <... mmap resumed>) = 0x7f18ca796000 [pid 5525] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5525] <... mmap resumed>) = 0x7f18ca796000 [pid 5523] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./41/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./41/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5525] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] close(4 [pid 5524] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5523] <... write resumed>) = 2097152 [pid 4999] <... close resumed>) = 0 [pid 5523] munmap(0x7f18ca796000, 2097152 [pid 4999] rmdir("./41/file1" [pid 5523] <... munmap resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5523] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] getdents64(3, [pid 5523] <... openat resumed>) = 4 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5523] ioctl(4, LOOP_SET_FD, 3 [pid 4999] close(3) = 0 [pid 4999] rmdir("./41") = 0 [pid 4999] mkdir("./42", 0777 [pid 5523] <... ioctl resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5523] close(3 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5523] <... close resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5523] mkdir("./file1", 0777 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5523] <... mkdir resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5523] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5526 ./strace-static-x86_64: Process 5526 attached [pid 5526] chdir("./42") = 0 [pid 5526] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5526] setpgid(0, 0) = 0 [pid 5526] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5526] write(3, "1000", 4) = 4 [pid 5526] close(3) = 0 [pid 5526] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5526] memfd_create("syzkaller", 0) = 3 [pid 5524] <... write resumed>) = 2097152 [pid 5526] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5524] munmap(0x7f18ca796000, 2097152 [pid 5526] <... mmap resumed>) = 0x7f18ca796000 [pid 5524] <... munmap resumed>) = 0 [pid 5524] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 155.918818][ T5523] loop3: detected capacity change from 0 to 4096 [ 155.948252][ T5523] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5524] ioctl(4, LOOP_SET_FD, 3 [pid 5525] <... write resumed>) = 2097152 [pid 5525] munmap(0x7f18ca796000, 2097152) = 0 [pid 5525] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5525] ioctl(4, LOOP_SET_FD, 3 [pid 5524] <... ioctl resumed>) = 0 [pid 5524] close(3) = 0 [pid 5524] mkdir("./file1", 0777) = 0 [pid 5526] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5524] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5525] <... ioctl resumed>) = 0 [pid 5525] close(3) = 0 [pid 5525] mkdir("./file1", 0777) = 0 [ 155.995904][ T5524] loop1: detected capacity change from 0 to 4096 [ 156.004234][ T5523] NILFS (loop3): trying rollback from an earlier position [ 156.017215][ T5525] loop5: detected capacity change from 0 to 4096 [ 156.037408][ T5524] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5525] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5526] <... write resumed>) = 2097152 [pid 5523] <... mount resumed>) = 0 [pid 5523] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5523] chdir("./file1") = 0 [pid 5523] ioctl(4, LOOP_CLR_FD) = 0 [ 156.076597][ T5523] NILFS (loop3): recovery complete [ 156.089814][ T5525] NILFS (loop5): invalid segment: Checksum error in segment payload [ 156.090358][ T5524] NILFS (loop1): trying rollback from an earlier position [ 156.116043][ T5527] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5523] close(4) = 0 [pid 5523] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5526] munmap(0x7f18ca796000, 2097152) = 0 [pid 5526] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5526] ioctl(4, LOOP_SET_FD, 3 [pid 5523] <... open resumed>) = 4 [pid 5523] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5523] ftruncate(5, 33587195) = 0 [pid 5523] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5523] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5523] sendfile(6, 7, NULL, 281474978811909 [pid 5526] <... ioctl resumed>) = 0 [pid 5526] close(3) = 0 [pid 5526] mkdir("./file1", 0777) = 0 [ 156.138500][ T5526] loop2: detected capacity change from 0 to 4096 [ 156.148050][ T5525] NILFS (loop5): trying rollback from an earlier position [ 156.186801][ T5526] NILFS (loop2): invalid segment: Checksum error in segment payload [ 156.224275][ T5525] NILFS (loop5): recovery complete [ 156.230183][ T5524] NILFS (loop1): recovery complete [pid 5526] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5525] <... mount resumed>) = 0 [pid 5524] <... mount resumed>) = 0 [pid 5525] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5524] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5525] <... openat resumed>) = 3 [pid 5524] <... openat resumed>) = 3 [pid 5525] chdir("./file1" [pid 5524] chdir("./file1" [pid 5525] <... chdir resumed>) = 0 [pid 5524] <... chdir resumed>) = 0 [pid 5524] ioctl(4, LOOP_CLR_FD [pid 5525] ioctl(4, LOOP_CLR_FD) = 0 [pid 5524] <... ioctl resumed>) = 0 [pid 5525] close(4 [pid 5524] close(4 [pid 5525] <... close resumed>) = 0 [pid 5524] <... close resumed>) = 0 [ 156.247226][ T5526] NILFS (loop2): trying rollback from an earlier position [ 156.256244][ T5529] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.273801][ T5528] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5525] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5524] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5525] <... open resumed>) = 4 [pid 5524] <... open resumed>) = 4 [pid 5525] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [ 156.304138][ T5526] NILFS (loop2): recovery complete [pid 5524] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5525] <... open resumed>) = 5 [pid 5524] <... open resumed>) = 5 [pid 5525] ftruncate(5, 33587195 [pid 5524] ftruncate(5, 33587195 [pid 5526] <... mount resumed>) = 0 [pid 5525] <... ftruncate resumed>) = 0 [pid 5524] <... ftruncate resumed>) = 0 [pid 5525] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5524] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5526] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5525] <... open resumed>) = 6 [pid 5524] <... open resumed>) = 6 [pid 5526] <... openat resumed>) = 3 [pid 5525] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5524] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5526] chdir("./file1" [pid 5525] <... open resumed>) = 7 [pid 5524] <... open resumed>) = 7 [pid 5526] <... chdir resumed>) = 0 [pid 5525] sendfile(6, 7, NULL, 281474978811909 [pid 5524] sendfile(6, 7, NULL, 281474978811909 [pid 5526] ioctl(4, LOOP_CLR_FD) = 0 [pid 5526] close(4) = 0 [pid 5526] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [ 156.356751][ T5530] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5526] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5526] ftruncate(5, 33587195) = 0 [pid 5526] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5526] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5526] sendfile(6, 7, NULL, 281474978811909 [pid 5519] <... sendfile resumed>) = 1048576 [pid 5519] exit_group(0) = ? [pid 5519] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5519, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=30 /* 0.30 s */} --- [pid 4997] umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./41/binderfs") = 0 [pid 4997] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5520] <... sendfile resumed>) = 1048576 [pid 5520] exit_group(0) = ? [pid 5520] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5520, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./42/binderfs") = 0 [pid 5001] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./41/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./41/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./41/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./41/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./41") = 0 [pid 4997] mkdir("./42", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5531 ./strace-static-x86_64: Process 5531 attached [pid 5531] chdir("./42") = 0 [pid 5531] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5531] setpgid(0, 0) = 0 [pid 5531] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5001] <... umount2 resumed>) = 0 [pid 5531] write(3, "1000", 4) = 4 [pid 5531] close(3) = 0 [pid 5531] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5531] memfd_create("syzkaller", 0) = 3 [pid 5531] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5001] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./42/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./42/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./42/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./42") = 0 [pid 5001] mkdir("./43", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 5531] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... close resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5532 ./strace-static-x86_64: Process 5532 attached [pid 5532] chdir("./43") = 0 [pid 5532] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5532] setpgid(0, 0) = 0 [pid 5532] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5532] write(3, "1000", 4) = 4 [pid 5532] close(3) = 0 [pid 5532] symlink("/dev/binderfs", "./binderfs" [pid 5531] <... write resumed>) = 2097152 [pid 5531] munmap(0x7f18ca796000, 2097152 [pid 5532] <... symlink resumed>) = 0 [pid 5532] memfd_create("syzkaller", 0) = 3 [pid 5532] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5531] <... munmap resumed>) = 0 [pid 5531] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5532] <... mmap resumed>) = 0x7f18ca796000 [pid 5531] <... openat resumed>) = 4 [pid 5531] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5531] close(3) = 0 [pid 5531] mkdir("./file1", 0777) = 0 [ 157.012118][ T5531] loop0: detected capacity change from 0 to 4096 [pid 5531] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [ 157.059717][ T5531] NILFS (loop0): invalid segment: Checksum error in segment payload [ 157.085642][ T5531] NILFS (loop0): trying rollback from an earlier position [pid 5532] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5531] <... mount resumed>) = 0 [pid 5531] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5532] munmap(0x7f18ca796000, 2097152 [pid 5531] <... openat resumed>) = 3 [pid 5531] chdir("./file1") = 0 [pid 5531] ioctl(4, LOOP_CLR_FD) = 0 [pid 5531] close(4) = 0 [pid 5531] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5531] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5531] ftruncate(5, 33587195) = 0 [pid 5531] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5531] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5531] sendfile(6, 7, NULL, 281474978811909 [pid 5532] <... munmap resumed>) = 0 [ 157.186165][ T5531] NILFS (loop0): recovery complete [ 157.204793][ T5533] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5532] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5532] ioctl(4, LOOP_SET_FD, 3 [pid 5523] <... sendfile resumed>) = 1048576 [pid 5532] <... ioctl resumed>) = 0 [pid 5523] exit_group(0 [pid 5532] close(3 [pid 5523] <... exit_group resumed>) = ? [pid 5532] <... close resumed>) = 0 [pid 5523] +++ exited with 0 +++ [pid 5532] mkdir("./file1", 0777) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5523, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5532] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./43/binderfs") = 0 [ 157.281807][ T5532] loop4: detected capacity change from 0 to 4096 [ 157.357293][ T5532] NILFS (loop4): invalid segment: Checksum error in segment payload [ 157.391802][ T5532] NILFS (loop4): trying rollback from an earlier position [ 157.436137][ T5532] NILFS (loop4): recovery complete [pid 5000] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5532] <... mount resumed>) = 0 [pid 5532] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5532] chdir("./file1") = 0 [pid 5532] ioctl(4, LOOP_CLR_FD) = 0 [pid 5532] close(4) = 0 [pid 5525] <... sendfile resumed>) = 1048576 [pid 5525] exit_group(0) = ? [ 157.463567][ T5534] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5532] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5525] +++ exited with 0 +++ [pid 5000] <... umount2 resumed>) = 0 [pid 5532] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5525, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [pid 5000] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5532] <... open resumed>) = 5 [pid 5524] <... sendfile resumed>) = 1048576 [pid 5532] ftruncate(5, 33587195 [pid 5524] exit_group(0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5532] <... ftruncate resumed>) = 0 [pid 5524] <... exit_group resumed>) = ? [pid 5002] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] lstat("./43/file1", [pid 5002] <... openat resumed>) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 5524] +++ exited with 0 +++ [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5532] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5532] <... open resumed>) = 6 [pid 5002] lstat("./43/binderfs", [pid 5000] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5524, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [pid 5532] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5532] <... open resumed>) = 7 [pid 5002] unlink("./43/binderfs" [pid 5000] openat(AT_FDCWD, "./43/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... restart_syscall resumed>) = 0 [pid 5532] sendfile(6, 7, NULL, 281474978811909 [pid 5002] <... unlink resumed>) = 0 [pid 5002] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... openat resumed>) = 4 [pid 5000] fstat(4, [pid 4998] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5526] <... sendfile resumed>) = 1048576 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] getdents64(4, [pid 4998] <... openat resumed>) = 3 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4 [pid 4998] fstat(3, [pid 5000] <... close resumed>) = 0 [pid 5000] rmdir("./43/file1" [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5526] exit_group(0 [pid 5000] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, [pid 5000] getdents64(3, [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5526] <... exit_group resumed>) = ? [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] close(3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5526] +++ exited with 0 +++ [pid 5000] <... close resumed>) = 0 [pid 4998] lstat("./42/binderfs", [pid 5000] rmdir("./43" [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5526, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4998] unlink("./42/binderfs" [pid 5000] mkdir("./44", 0777 [pid 4998] <... unlink resumed>) = 0 [pid 4999] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... mkdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 4999] <... openat resumed>) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] fstat(3, [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] close(3 [pid 4999] getdents64(3, [pid 5000] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./42/binderfs" [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5535 [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5535 attached [pid 5535] chdir("./44") = 0 [pid 5535] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5535] setpgid(0, 0) = 0 [pid 5535] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5535] write(3, "1000", 4) = 4 [pid 5535] close(3) = 0 [pid 5535] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5535] memfd_create("syzkaller", 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5535] <... memfd_create resumed>) = 3 [pid 5535] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4998] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./42/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./42/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./42/file1") = 0 [pid 5535] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./42") = 0 [pid 4998] mkdir("./43", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3 [pid 5002] <... umount2 resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = 0 [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5536 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5536 attached [pid 5002] lstat("./43/file1", [pid 5536] chdir("./43" [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5536] <... chdir resumed>) = 0 [pid 5002] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5536] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./43/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5536] setpgid(0, 0 [pid 5002] <... openat resumed>) = 4 [pid 5002] fstat(4, [pid 5536] <... setpgid resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, [pid 5536] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5536] <... openat resumed>) = 3 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5536] write(3, "1000", 4 [pid 5002] close(4 [pid 5536] <... write resumed>) = 4 [pid 5002] <... close resumed>) = 0 [pid 5536] close(3 [pid 5002] rmdir("./43/file1" [pid 5536] <... close resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5536] symlink("/dev/binderfs", "./binderfs" [pid 5002] getdents64(3, [pid 5536] <... symlink resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5536] memfd_create("syzkaller", 0 [pid 5002] close(3 [pid 4999] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5536] <... memfd_create resumed>) = 3 [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./43" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... rmdir resumed>) = 0 [pid 5002] mkdir("./44", 0777 [pid 4999] lstat("./42/file1", [pid 5002] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 4999] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... close resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./42/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5536] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... openat resumed>) = 4 [pid 5536] <... mmap resumed>) = 0x7f18ca796000 [pid 4999] fstat(4, [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5537 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5535] <... write resumed>) = 2097152 [pid 4999] close(4) = 0 [pid 4999] rmdir("./42/file1"./strace-static-x86_64: Process 5537 attached ) = 0 [pid 5537] chdir("./44" [pid 4999] getdents64(3, [pid 5537] <... chdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5537] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] close(3 [pid 5537] <... prctl resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5537] setpgid(0, 0 [pid 4999] rmdir("./42" [pid 5537] <... setpgid resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5537] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] mkdir("./43", 0777 [pid 5537] <... openat resumed>) = 3 [pid 4999] <... mkdir resumed>) = 0 [pid 5537] write(3, "1000", 4 [pid 5535] munmap(0x7f18ca796000, 2097152 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5537] <... write resumed>) = 4 [pid 5535] <... munmap resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5537] close(3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5537] <... close resumed>) = 0 [pid 5536] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5535] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5537] symlink("/dev/binderfs", "./binderfs" [pid 5535] <... openat resumed>) = 4 [pid 4999] close(3 [pid 5537] <... symlink resumed>) = 0 [pid 5535] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... close resumed>) = 0 [pid 5537] memfd_create("syzkaller", 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5537] <... memfd_create resumed>) = 3 [pid 5537] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5538 [pid 5537] <... mmap resumed>) = 0x7f18ca796000 ./strace-static-x86_64: Process 5538 attached [pid 5538] chdir("./43") = 0 [pid 5538] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5538] setpgid(0, 0) = 0 [pid 5538] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5538] write(3, "1000", 4) = 4 [pid 5538] close(3) = 0 [pid 5538] symlink("/dev/binderfs", "./binderfs" [pid 5535] <... ioctl resumed>) = 0 [pid 5538] <... symlink resumed>) = 0 [pid 5535] close(3 [pid 5538] memfd_create("syzkaller", 0 [pid 5535] <... close resumed>) = 0 [pid 5537] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5538] <... memfd_create resumed>) = 3 [pid 5535] mkdir("./file1", 0777 [pid 5538] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5535] <... mkdir resumed>) = 0 [pid 5538] <... mmap resumed>) = 0x7f18ca796000 [ 157.897211][ T5535] loop3: detected capacity change from 0 to 4096 [pid 5535] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5538] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5536] <... write resumed>) = 2097152 [pid 5536] munmap(0x7f18ca796000, 2097152 [pid 5537] <... write resumed>) = 2097152 [pid 5536] <... munmap resumed>) = 0 [pid 5536] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5537] munmap(0x7f18ca796000, 2097152 [pid 5536] <... openat resumed>) = 4 [pid 5537] <... munmap resumed>) = 0 [ 157.977211][ T5535] NILFS (loop3): invalid segment: Checksum error in segment payload [ 158.004687][ T5535] NILFS (loop3): trying rollback from an earlier position [pid 5536] ioctl(4, LOOP_SET_FD, 3 [pid 5537] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5536] <... ioctl resumed>) = 0 [pid 5537] <... openat resumed>) = 4 [pid 5536] close(3 [pid 5537] ioctl(4, LOOP_SET_FD, 3 [pid 5536] <... close resumed>) = 0 [pid 5538] <... write resumed>) = 2097152 [pid 5537] <... ioctl resumed>) = 0 [pid 5536] mkdir("./file1", 0777 [pid 5537] close(3 [pid 5536] <... mkdir resumed>) = 0 [pid 5537] <... close resumed>) = 0 [pid 5536] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5537] mkdir("./file1", 0777) = 0 [pid 5537] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5538] munmap(0x7f18ca796000, 2097152) = 0 [pid 5538] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 158.035516][ T5536] loop1: detected capacity change from 0 to 4096 [ 158.055305][ T5535] NILFS (loop3): recovery complete [ 158.064989][ T5537] loop5: detected capacity change from 0 to 4096 [ 158.069182][ T5539] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5538] ioctl(4, LOOP_SET_FD, 3 [pid 5535] <... mount resumed>) = 0 [pid 5535] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5531] <... sendfile resumed>) = 1048576 [pid 5535] chdir("./file1") = 0 [pid 5535] ioctl(4, LOOP_CLR_FD) = 0 [pid 5531] exit_group(0 [pid 5535] close(4 [pid 5531] <... exit_group resumed>) = ? [pid 5535] <... close resumed>) = 0 [pid 5535] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5531] +++ exited with 0 +++ [pid 5535] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5531, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5535] <... open resumed>) = 5 [pid 4997] restart_syscall(<... resuming interrupted clone ...> [pid 5535] ftruncate(5, 33587195 [pid 4997] <... restart_syscall resumed>) = 0 [pid 5535] <... ftruncate resumed>) = 0 [ 158.098964][ T5537] NILFS (loop5): invalid segment: Checksum error in segment payload [ 158.103565][ T5536] NILFS (loop1): invalid segment: Checksum error in segment payload [ 158.109396][ T5538] loop2: detected capacity change from 0 to 4096 [ 158.118507][ T5536] NILFS (loop1): trying rollback from an earlier position [ 158.123898][ T5537] NILFS (loop5): trying rollback from an earlier position [pid 5535] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5538] <... ioctl resumed>) = 0 [pid 5535] <... open resumed>) = 6 [pid 4997] umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5538] close(3 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5538] <... close resumed>) = 0 [pid 4997] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5538] mkdir("./file1", 0777 [pid 4997] <... openat resumed>) = 3 [pid 5538] <... mkdir resumed>) = 0 [pid 4997] fstat(3, [pid 5538] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5535] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4997] getdents64(3, [pid 5535] <... open resumed>) = 7 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5536] <... mount resumed>) = 0 [pid 5535] sendfile(6, 7, NULL, 281474978811909 [pid 4997] umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5536] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5536] <... openat resumed>) = 3 [pid 4997] lstat("./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5536] chdir("./file1" [pid 4997] unlink("./42/binderfs") = 0 [pid 4997] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5536] <... chdir resumed>) = 0 [ 158.165324][ T5536] NILFS (loop1): recovery complete [ 158.177061][ T5538] NILFS (loop2): invalid segment: Checksum error in segment payload [ 158.189790][ T5540] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5536] ioctl(4, LOOP_CLR_FD) = 0 [pid 5536] close(4) = 0 [pid 5536] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5536] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [ 158.221211][ T5538] NILFS (loop2): trying rollback from an earlier position [ 158.233418][ T5537] NILFS (loop5): recovery complete [pid 5536] ftruncate(5, 33587195 [pid 5537] <... mount resumed>) = 0 [pid 5536] <... ftruncate resumed>) = 0 [pid 5536] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5537] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5536] <... open resumed>) = 6 [pid 5537] <... openat resumed>) = 3 [pid 5536] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5537] chdir("./file1" [pid 5536] <... open resumed>) = 7 [pid 5537] <... chdir resumed>) = 0 [pid 5536] sendfile(6, 7, NULL, 281474978811909 [pid 5537] ioctl(4, LOOP_CLR_FD) = 0 [ 158.269837][ T5541] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.294083][ T5538] NILFS (loop2): recovery complete [pid 5537] close(4) = 0 [pid 5538] <... mount resumed>) = 0 [pid 5538] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5538] chdir("./file1") = 0 [pid 5538] ioctl(4, LOOP_CLR_FD) = 0 [pid 5538] close(4) = 0 [pid 5538] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5537] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5538] <... open resumed>) = 4 [pid 5537] <... open resumed>) = 4 [pid 5538] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5537] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5538] <... open resumed>) = 5 [pid 5537] <... open resumed>) = 5 [pid 5538] ftruncate(5, 33587195 [pid 5537] ftruncate(5, 33587195 [pid 5538] <... ftruncate resumed>) = 0 [pid 5537] <... ftruncate resumed>) = 0 [pid 5538] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5537] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5538] <... open resumed>) = 6 [pid 5537] <... open resumed>) = 6 [pid 4997] <... umount2 resumed>) = 0 [pid 5538] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5538] sendfile(6, 7, NULL, 281474978811909 [pid 5537] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 158.330470][ T5542] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5537] sendfile(6, 7, NULL, 281474978811909 [pid 4997] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./42/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./42/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./42/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./42/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./42") = 0 [pid 4997] mkdir("./43", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5543 ./strace-static-x86_64: Process 5543 attached [pid 5543] chdir("./43") = 0 [pid 5543] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5543] setpgid(0, 0) = 0 [pid 5543] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5543] write(3, "1000", 4) = 4 [pid 5543] close(3) = 0 [pid 5543] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5543] memfd_create("syzkaller", 0) = 3 [pid 5543] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5543] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5532] <... sendfile resumed>) = 1048576 [pid 5532] exit_group(0 [pid 5543] <... write resumed>) = 2097152 [pid 5532] <... exit_group resumed>) = ? [pid 5543] munmap(0x7f18ca796000, 2097152 [pid 5532] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5532, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5543] <... munmap resumed>) = 0 [pid 5001] <... restart_syscall resumed>) = 0 [pid 5001] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5543] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5543] <... openat resumed>) = 4 [pid 5001] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5543] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./43/binderfs") = 0 [pid 5001] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5543] <... ioctl resumed>) = 0 [pid 5543] close(3) = 0 [pid 5543] mkdir("./file1", 0777) = 0 [ 158.799752][ T5543] loop0: detected capacity change from 0 to 4096 [ 158.847834][ T5543] NILFS (loop0): invalid segment: Checksum error in segment payload [ 158.896730][ T5543] NILFS (loop0): trying rollback from an earlier position [pid 5543] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./43/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./43/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [ 158.980828][ T5543] NILFS (loop0): recovery complete [pid 5001] close(4) = 0 [pid 5543] <... mount resumed>) = 0 [pid 5543] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5001] rmdir("./43/file1" [pid 5543] <... openat resumed>) = 3 [pid 5543] chdir("./file1" [pid 5001] <... rmdir resumed>) = 0 [pid 5543] <... chdir resumed>) = 0 [pid 5543] ioctl(4, LOOP_CLR_FD [pid 5001] getdents64(3, [pid 5543] <... ioctl resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5543] close(4) = 0 [pid 5543] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5001] close(3 [pid 5543] <... open resumed>) = 4 [pid 5001] <... close resumed>) = 0 [pid 5543] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5001] rmdir("./43" [pid 5543] <... open resumed>) = 5 [pid 5001] <... rmdir resumed>) = 0 [pid 5543] ftruncate(5, 33587195 [pid 5001] mkdir("./44", 0777 [pid 5543] <... ftruncate resumed>) = 0 [pid 5543] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5001] <... mkdir resumed>) = 0 [pid 5543] <... open resumed>) = 6 [pid 5543] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [ 159.036310][ T5544] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5543] <... open resumed>) = 7 [pid 5543] sendfile(6, 7, NULL, 281474978811909 [pid 5001] <... openat resumed>) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5545 ./strace-static-x86_64: Process 5545 attached [pid 5545] chdir("./44") = 0 [pid 5545] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5545] setpgid(0, 0) = 0 [pid 5545] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5545] write(3, "1000", 4) = 4 [pid 5545] close(3) = 0 [pid 5545] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5545] memfd_create("syzkaller", 0) = 3 [pid 5545] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5545] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5535] <... sendfile resumed>) = 1048576 [pid 5535] exit_group(0) = ? [pid 5535] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5535, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=22 /* 0.22 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./44/binderfs") = 0 [pid 5000] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5545] <... write resumed>) = 2097152 [pid 5545] munmap(0x7f18ca796000, 2097152) = 0 [pid 5545] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5545] ioctl(4, LOOP_SET_FD, 3) = 0 [ 159.369327][ T5545] loop4: detected capacity change from 0 to 4096 [pid 5545] close(3 [pid 5536] <... sendfile resumed>) = 1048576 [pid 5545] <... close resumed>) = 0 [pid 5536] exit_group(0 [pid 5545] mkdir("./file1", 0777 [pid 5536] <... exit_group resumed>) = ? [pid 5545] <... mkdir resumed>) = 0 [pid 5537] <... sendfile resumed>) = 1048576 [pid 5545] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5537] exit_group(0) = ? [pid 5536] +++ exited with 0 +++ [pid 5537] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5536, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5000] <... umount2 resumed>) = 0 [pid 4998] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5537, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 4998] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... restart_syscall resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(3, [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... openat resumed>) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] fstat(3, [pid 4998] lstat("./43/binderfs", [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] getdents64(3, [pid 5000] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] unlink("./43/binderfs" [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... unlink resumed>) = 0 [pid 5002] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] lstat("./44/file1", [pid 4998] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5538] <... sendfile resumed>) = 1048576 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] unlink("./44/binderfs" [pid 5538] exit_group(0 [pid 5002] <... unlink resumed>) = 0 [pid 5000] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5538] <... exit_group resumed>) = ? [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./44/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5538] +++ exited with 0 +++ [pid 5000] <... openat resumed>) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5538, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [pid 5000] getdents64(4, [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] <... restart_syscall resumed>) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4 [pid 4999] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] rmdir("./44/file1" [pid 4999] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5000] getdents64(3, [pid 4999] fstat(3, [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] close(3) = 0 [pid 4999] getdents64(3, [pid 5000] rmdir("./44" [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] mkdir("./45", 0777 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... mkdir resumed>) = 0 [pid 4999] lstat("./43/binderfs", [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... openat resumed>) = 3 [pid 4999] unlink("./43/binderfs" [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] <... unlink resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 159.457024][ T5545] NILFS (loop4): invalid segment: Checksum error in segment payload [ 159.466426][ T5545] NILFS (loop4): trying rollback from an earlier position [ 159.494321][ T5545] NILFS (loop4): recovery complete [pid 4999] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5547 [pid 5545] <... mount resumed>) = 0 [pid 5545] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5545] chdir("./file1") = 0 [pid 5545] ioctl(4, LOOP_CLR_FD) = 0 ./strace-static-x86_64: Process 5547 attached [pid 5545] close(4) = 0 [pid 5547] chdir("./45" [pid 5545] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5547] <... chdir resumed>) = 0 [pid 5547] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5545] <... open resumed>) = 4 [pid 5547] <... prctl resumed>) = 0 [pid 5545] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5547] setpgid(0, 0 [pid 5545] <... open resumed>) = 5 [pid 5547] <... setpgid resumed>) = 0 [pid 5545] ftruncate(5, 33587195) = 0 [pid 5545] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5547] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5545] <... open resumed>) = 6 [pid 5547] <... openat resumed>) = 3 [pid 5545] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5547] write(3, "1000", 4 [pid 5545] <... open resumed>) = 7 [pid 5547] <... write resumed>) = 4 [pid 5545] sendfile(6, 7, NULL, 281474978811909 [pid 5547] close(3) = 0 [ 159.553656][ T5546] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5547] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5547] memfd_create("syzkaller", 0) = 3 [pid 5547] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5002] <... umount2 resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5002] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./44/file1", [pid 4998] lstat("./43/file1", [pid 5547] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./44/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] openat(AT_FDCWD, "./43/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... openat resumed>) = 4 [pid 4998] <... openat resumed>) = 4 [pid 5002] fstat(4, [pid 4998] fstat(4, [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, [pid 5002] getdents64(4, [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] getdents64(4, [pid 5002] close(4 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5547] <... write resumed>) = 2097152 [pid 5002] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 4998] close(4 [pid 5547] munmap(0x7f18ca796000, 2097152 [pid 5002] rmdir("./44/file1" [pid 4999] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... close resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5002] getdents64(3, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] rmdir("./43/file1" [pid 5547] <... munmap resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] lstat("./43/file1", [pid 5547] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5002] close(3 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5547] <... openat resumed>) = 4 [pid 5002] <... close resumed>) = 0 [pid 4999] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(3, [pid 5547] ioctl(4, LOOP_SET_FD, 3 [pid 5002] rmdir("./44" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5547] <... ioctl resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./43/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] close(3 [pid 5547] close(3 [pid 5002] mkdir("./45", 0777 [pid 4999] <... openat resumed>) = 4 [pid 4998] <... close resumed>) = 0 [pid 5547] <... close resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 4999] fstat(4, [pid 4998] rmdir("./43" [pid 5547] mkdir("./file1", 0777 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5547] <... mkdir resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 4999] getdents64(4, [pid 4998] mkdir("./44", 0777 [pid 5547] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5002] ioctl(3, LOOP_CLR_FD [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] <... mkdir resumed>) = 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] getdents64(4, [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5002] close(3 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5002] <... close resumed>) = 0 [pid 4999] close(4 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... close resumed>) = 0 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] rmdir("./43/file1" [pid 4998] close(3 [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5548 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 4999] getdents64(3, [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3 [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5549 [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./43") = 0 [pid 4999] mkdir("./44", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5550 ./strace-static-x86_64: Process 5549 attached [pid 5549] chdir("./44") = 0 [pid 5549] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 5550 attached [pid 5549] setpgid(0, 0 [pid 5550] chdir("./44" [pid 5549] <... setpgid resumed>) = 0 [pid 5550] <... chdir resumed>) = 0 [pid 5549] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5550] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5549] <... openat resumed>) = 3 [pid 5550] <... prctl resumed>) = 0 [pid 5549] write(3, "1000", 4 [ 159.765137][ T5547] loop3: detected capacity change from 0 to 4096 [pid 5550] setpgid(0, 0 [pid 5549] <... write resumed>) = 4 [pid 5550] <... setpgid resumed>) = 0 [pid 5549] close(3 [pid 5550] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5549] <... close resumed>) = 0 [pid 5550] <... openat resumed>) = 3 [pid 5549] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5548 attached [pid 5550] write(3, "1000", 4 [pid 5549] <... symlink resumed>) = 0 [pid 5550] <... write resumed>) = 4 [pid 5549] memfd_create("syzkaller", 0 [pid 5550] close(3 [pid 5549] <... memfd_create resumed>) = 3 [pid 5548] chdir("./45" [pid 5550] <... close resumed>) = 0 [pid 5549] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5550] symlink("/dev/binderfs", "./binderfs" [pid 5549] <... mmap resumed>) = 0x7f18ca796000 [pid 5548] <... chdir resumed>) = 0 [pid 5550] <... symlink resumed>) = 0 [pid 5548] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5550] memfd_create("syzkaller", 0 [pid 5548] <... prctl resumed>) = 0 [pid 5550] <... memfd_create resumed>) = 3 [pid 5550] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5548] setpgid(0, 0 [pid 5550] <... mmap resumed>) = 0x7f18ca796000 [pid 5548] <... setpgid resumed>) = 0 [pid 5549] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5548] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5548] write(3, "1000", 4) = 4 [pid 5548] close(3 [pid 5550] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5548] <... close resumed>) = 0 [pid 5548] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5548] memfd_create("syzkaller", 0) = 3 [pid 5548] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 159.845836][ T5547] NILFS (loop3): invalid segment: Checksum error in segment payload [ 159.884921][ T5547] NILFS (loop3): trying rollback from an earlier position [pid 5548] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5550] <... write resumed>) = 2097152 [ 159.942971][ T5547] NILFS (loop3): recovery complete [pid 5549] <... write resumed>) = 2097152 [pid 5549] munmap(0x7f18ca796000, 2097152 [pid 5550] munmap(0x7f18ca796000, 2097152 [pid 5549] <... munmap resumed>) = 0 [pid 5549] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5547] <... mount resumed>) = 0 [pid 5550] <... munmap resumed>) = 0 [pid 5549] ioctl(4, LOOP_SET_FD, 3 [pid 5547] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5550] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5547] <... openat resumed>) = 3 [pid 5550] <... openat resumed>) = 4 [pid 5547] chdir("./file1" [pid 5550] ioctl(4, LOOP_SET_FD, 3 [pid 5547] <... chdir resumed>) = 0 [pid 5547] ioctl(4, LOOP_CLR_FD) = 0 [pid 5547] close(4) = 0 [pid 5547] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5550] <... ioctl resumed>) = 0 [pid 5549] <... ioctl resumed>) = 0 [pid 5550] close(3 [pid 5549] close(3 [pid 5550] <... close resumed>) = 0 [pid 5549] <... close resumed>) = 0 [pid 5550] mkdir("./file1", 0777 [pid 5549] mkdir("./file1", 0777) = 0 [pid 5549] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5550] <... mkdir resumed>) = 0 [pid 5550] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5547] <... open resumed>) = 4 [pid 5548] <... write resumed>) = 2097152 [pid 5547] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5548] munmap(0x7f18ca796000, 2097152 [ 159.992492][ T5551] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.008416][ T5549] loop1: detected capacity change from 0 to 4096 [ 160.020578][ T5550] loop2: detected capacity change from 0 to 4096 [pid 5547] ftruncate(5, 33587195 [pid 5548] <... munmap resumed>) = 0 [pid 5547] <... ftruncate resumed>) = 0 [pid 5547] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5547] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5548] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5547] <... open resumed>) = 7 [pid 5548] <... openat resumed>) = 4 [pid 5547] sendfile(6, 7, NULL, 281474978811909 [pid 5548] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5543] <... sendfile resumed>) = 1048576 [pid 5543] exit_group(0) = ? [pid 5548] close(3) = 0 [pid 5543] +++ exited with 0 +++ [ 160.081279][ T5549] NILFS (loop1): invalid segment: Checksum error in segment payload [ 160.097275][ T5550] NILFS (loop2): invalid segment: Checksum error in segment payload [ 160.114134][ T5548] loop5: detected capacity change from 0 to 4096 [ 160.121490][ T5549] NILFS (loop1): trying rollback from an earlier position [pid 5549] <... mount resumed>) = 0 [pid 5548] mkdir("./file1", 0777) = 0 [pid 5548] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5549] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5543, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5549] <... openat resumed>) = 3 [pid 5549] chdir("./file1") = 0 [pid 4997] umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5549] ioctl(4, LOOP_CLR_FD [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5549] <... ioctl resumed>) = 0 [pid 5549] close(4 [pid 4997] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5549] <... close resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [pid 5549] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5549] <... open resumed>) = 4 [pid 4997] getdents64(3, [pid 5549] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5549] ftruncate(5, 33587195 [pid 4997] umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5549] <... ftruncate resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5549] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4997] lstat("./43/binderfs", [pid 5549] <... open resumed>) = 6 [pid 5549] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5549] <... open resumed>) = 7 [pid 4997] unlink("./43/binderfs" [ 160.146262][ T5549] NILFS (loop1): recovery complete [ 160.154424][ T5552] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.161618][ T5550] NILFS (loop2): trying rollback from an earlier position [pid 5549] sendfile(6, 7, NULL, 281474978811909 [pid 4997] <... unlink resumed>) = 0 [pid 4997] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5550] <... mount resumed>) = 0 [pid 5550] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5550] chdir("./file1") = 0 [pid 5550] ioctl(4, LOOP_CLR_FD) = 0 [pid 5550] close(4) = 0 [ 160.216265][ T5548] NILFS (loop5): invalid segment: Checksum error in segment payload [ 160.224565][ T5550] NILFS (loop2): recovery complete [ 160.232148][ T5548] NILFS (loop5): trying rollback from an earlier position [pid 5550] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5550] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5550] ftruncate(5, 33587195) = 0 [pid 5550] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5550] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 160.256912][ T5553] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.324507][ T5548] NILFS (loop5): recovery complete [pid 5550] sendfile(6, 7, NULL, 281474978811909 [pid 5548] <... mount resumed>) = 0 [pid 5548] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4997] <... umount2 resumed>) = 0 [pid 5548] <... openat resumed>) = 3 [pid 4997] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5548] chdir("./file1" [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5548] <... chdir resumed>) = 0 [pid 4997] lstat("./43/file1", [pid 5548] ioctl(4, LOOP_CLR_FD [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5548] <... ioctl resumed>) = 0 [ 160.346486][ T5554] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4997] umount2("./43/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5548] close(4 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5548] <... close resumed>) = 0 [pid 4997] openat(AT_FDCWD, "./43/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5548] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4997] <... openat resumed>) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./43/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./43") = 0 [pid 4997] mkdir("./44", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5548] <... open resumed>) = 4 [pid 4997] <... openat resumed>) = 3 [pid 5548] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5548] <... open resumed>) = 5 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5548] ftruncate(5, 33587195 [pid 4997] close(3 [pid 5548] <... ftruncate resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 5548] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5548] <... open resumed>) = 6 [pid 5548] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5555 [pid 5548] <... open resumed>) = 7 [pid 5548] sendfile(6, 7, NULL, 281474978811909./strace-static-x86_64: Process 5555 attached [pid 5555] chdir("./44") = 0 [pid 5555] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5555] setpgid(0, 0) = 0 [pid 5555] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5555] write(3, "1000", 4) = 4 [pid 5555] close(3) = 0 [pid 5555] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5555] memfd_create("syzkaller", 0) = 3 [pid 5555] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5555] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5555] munmap(0x7f18ca796000, 2097152) = 0 [pid 5555] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5555] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5555] close(3) = 0 [pid 5555] mkdir("./file1", 0777) = 0 [pid 5545] <... sendfile resumed>) = 1048576 [pid 5555] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5545] exit_group(0) = ? [pid 5545] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5545, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=28 /* 0.28 s */} --- [pid 5001] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 160.718344][ T5555] loop0: detected capacity change from 0 to 4096 [pid 5001] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./44/binderfs") = 0 [ 160.793654][ T5555] NILFS (loop0): invalid segment: Checksum error in segment payload [ 160.801990][ T5555] NILFS (loop0): trying rollback from an earlier position [ 160.917196][ T5555] NILFS (loop0): recovery complete [pid 5001] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5555] <... mount resumed>) = 0 [pid 5555] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5555] chdir("./file1") = 0 [pid 5555] ioctl(4, LOOP_CLR_FD) = 0 [pid 5555] close(4) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5555] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5555] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5555] ftruncate(5, 33587195) = 0 [pid 5555] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5555] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 160.948051][ T5556] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5555] sendfile(6, 7, NULL, 281474978811909 [pid 5001] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./44/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./44/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./44/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./44") = 0 [pid 5001] mkdir("./45", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5547] <... sendfile resumed>) = 1048576 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 5547] exit_group(0 [pid 5001] <... close resumed>) = 0 [pid 5547] <... exit_group resumed>) = ? [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5547] +++ exited with 0 +++ [pid 5001] <... clone resumed>, child_tidptr=0x555556f7b690) = 5557 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5547, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 ./strace-static-x86_64: Process 5557 attached [pid 5000] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5557] chdir("./45" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5557] <... chdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5557] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] <... openat resumed>) = 3 [pid 5000] fstat(3, [pid 5557] <... prctl resumed>) = 0 [pid 5557] setpgid(0, 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 5557] <... setpgid resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5557] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5557] <... openat resumed>) = 3 [pid 5557] write(3, "1000", 4 [pid 5000] lstat("./45/binderfs", [pid 5557] <... write resumed>) = 4 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5557] close(3 [pid 5000] unlink("./45/binderfs" [pid 5557] <... close resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [pid 5000] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5557] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5557] memfd_create("syzkaller", 0) = 3 [pid 5557] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5557] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5557] munmap(0x7f18ca796000, 2097152) = 0 [pid 5557] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5557] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./45/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./45/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./45/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./45") = 0 [pid 5000] mkdir("./46", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 5557] <... ioctl resumed>) = 0 [pid 5557] close(3) = 0 [pid 5557] mkdir("./file1", 0777) = 0 [pid 5557] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5000] <... close resumed>) = 0 [ 161.327344][ T5557] loop4: detected capacity change from 0 to 4096 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5558 attached [pid 5550] <... sendfile resumed>) = 1048576 [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5558 [pid 5558] chdir("./46" [pid 5550] exit_group(0 [pid 5549] <... sendfile resumed>) = 1048576 [pid 5558] <... chdir resumed>) = 0 [pid 5550] <... exit_group resumed>) = ? [ 161.378791][ T5557] NILFS (loop4): invalid segment: Checksum error in segment payload [ 161.407636][ T5557] NILFS (loop4): trying rollback from an earlier position [pid 5549] exit_group(0 [pid 5558] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5550] +++ exited with 0 +++ [pid 5549] <... exit_group resumed>) = ? [pid 5558] <... prctl resumed>) = 0 [pid 5558] setpgid(0, 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5550, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- [pid 5558] <... setpgid resumed>) = 0 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 5558] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5549] +++ exited with 0 +++ [pid 4999] <... restart_syscall resumed>) = 0 [pid 5558] <... openat resumed>) = 3 [pid 5558] write(3, "1000", 4 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5549, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=28 /* 0.28 s */} --- [pid 5558] <... write resumed>) = 4 [pid 4999] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5558] close(3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... restart_syscall resumed>) = 0 [pid 5558] <... close resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5558] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... openat resumed>) = 3 [pid 5558] <... symlink resumed>) = 0 [pid 4999] fstat(3, [pid 4998] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5558] memfd_create("syzkaller", 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5558] <... memfd_create resumed>) = 3 [pid 4999] getdents64(3, [pid 4998] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5558] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5557] <... mount resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] <... openat resumed>) = 3 [pid 5558] <... mmap resumed>) = 0x7f18ca796000 [pid 5557] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4999] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] fstat(3, [pid 5558] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] lstat("./44/binderfs", [pid 4998] getdents64(3, [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] unlink("./44/binderfs" [pid 4998] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... unlink resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] lstat("./44/binderfs", [pid 5557] <... openat resumed>) = 3 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./44/binderfs" [pid 5557] chdir("./file1" [pid 4998] <... unlink resumed>) = 0 [pid 4998] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5557] <... chdir resumed>) = 0 [pid 5557] ioctl(4, LOOP_CLR_FD) = 0 [ 161.429722][ T5557] NILFS (loop4): recovery complete [ 161.443873][ T5559] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5557] close(4) = 0 [pid 5557] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5557] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5557] ftruncate(5, 33587195) = 0 [pid 5557] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5557] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5548] <... sendfile resumed>) = 1048576 [pid 5557] sendfile(6, 7, NULL, 281474978811909 [pid 5548] exit_group(0) = ? [pid 5548] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5548, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- [pid 5002] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./45/binderfs") = 0 [pid 5002] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5558] <... write resumed>) = 2097152 [pid 5558] munmap(0x7f18ca796000, 2097152) = 0 [pid 5558] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5558] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5558] close(3) = 0 [pid 5558] mkdir("./file1", 0777) = 0 [ 161.597805][ T5558] loop3: detected capacity change from 0 to 4096 [pid 5558] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5002] <... umount2 resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5002] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./45/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./45/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./45/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./45") = 0 [pid 4998] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] mkdir("./46", 0777 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4998] lstat("./44/file1", [pid 5002] <... openat resumed>) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] close(3) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 4998] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./44/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] lstat("./44/file1", [pid 4998] <... openat resumed>) = 4 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] fstat(4, [pid 4999] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 161.688766][ T5558] NILFS (loop3): invalid segment: Checksum error in segment payload [ 161.725589][ T5558] NILFS (loop3): trying rollback from an earlier position [pid 4998] getdents64(4, [pid 4999] openat(AT_FDCWD, "./44/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5560 [pid 4999] <... openat resumed>) = 4 [pid 4998] getdents64(4, ./strace-static-x86_64: Process 5560 attached [ 161.774843][ T5558] NILFS (loop3): recovery complete [pid 4999] fstat(4, [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5560] chdir("./46" [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] close(4 [pid 5560] <... chdir resumed>) = 0 [pid 5560] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5560] setpgid(0, 0 [pid 4999] getdents64(4, [pid 5560] <... setpgid resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5560] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] rmdir("./44/file1" [pid 5560] <... openat resumed>) = 3 [pid 4999] getdents64(4, [pid 5560] write(3, "1000", 4) = 4 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5560] close(3 [pid 4999] close(4 [pid 5560] <... close resumed>) = 0 [pid 5560] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... close resumed>) = 0 [pid 4998] getdents64(3, [pid 5560] <... symlink resumed>) = 0 [pid 4999] rmdir("./44/file1" [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5560] memfd_create("syzkaller", 0) = 3 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] close(3 [pid 5560] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] getdents64(3, [pid 4998] <... close resumed>) = 0 [pid 5560] <... mmap resumed>) = 0x7f18ca796000 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] rmdir("./44") = 0 [pid 4999] close(3 [pid 4998] mkdir("./45", 0777 [pid 4999] <... close resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 4999] rmdir("./44") = 0 [pid 4999] mkdir("./45", 0777 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4999] <... mkdir resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5560] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5558] <... mount resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5558] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4998] close(3 [pid 5558] <... openat resumed>) = 3 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] <... close resumed>) = 0 [pid 5558] chdir("./file1" [pid 4999] close(3 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... close resumed>) = 0 [pid 5558] <... chdir resumed>) = 0 [pid 5558] ioctl(4, LOOP_CLR_FD [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5562 [pid 5558] <... ioctl resumed>) = 0 [pid 5558] close(4) = 0 [pid 5558] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5563 [pid 5558] <... open resumed>) = 4 [pid 5558] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5558] ftruncate(5, 33587195) = 0 [pid 5558] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [ 161.820813][ T5561] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5558] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 ./strace-static-x86_64: Process 5563 attached ./strace-static-x86_64: Process 5562 attached [pid 5558] sendfile(6, 7, NULL, 281474978811909 [pid 5563] chdir("./45" [pid 5562] chdir("./45" [pid 5563] <... chdir resumed>) = 0 [pid 5562] <... chdir resumed>) = 0 [pid 5563] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5562] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5563] <... prctl resumed>) = 0 [pid 5562] <... prctl resumed>) = 0 [pid 5563] setpgid(0, 0 [pid 5562] setpgid(0, 0 [pid 5563] <... setpgid resumed>) = 0 [pid 5562] <... setpgid resumed>) = 0 [pid 5563] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5562] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5563] <... openat resumed>) = 3 [pid 5563] write(3, "1000", 4 [pid 5562] <... openat resumed>) = 3 [pid 5563] <... write resumed>) = 4 [pid 5562] write(3, "1000", 4 [pid 5563] close(3 [pid 5562] <... write resumed>) = 4 [pid 5563] <... close resumed>) = 0 [pid 5562] close(3 [pid 5563] symlink("/dev/binderfs", "./binderfs" [pid 5560] <... write resumed>) = 2097152 [pid 5562] <... close resumed>) = 0 [pid 5555] <... sendfile resumed>) = 1048576 [pid 5563] <... symlink resumed>) = 0 [pid 5563] memfd_create("syzkaller", 0 [pid 5562] symlink("/dev/binderfs", "./binderfs" [pid 5555] exit_group(0 [pid 5563] <... memfd_create resumed>) = 3 [pid 5562] <... symlink resumed>) = 0 [pid 5555] <... exit_group resumed>) = ? [pid 5563] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5562] memfd_create("syzkaller", 0 [pid 5563] <... mmap resumed>) = 0x7f18ca796000 [pid 5562] <... memfd_create resumed>) = 3 [pid 5562] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5555] +++ exited with 0 +++ [pid 5560] munmap(0x7f18ca796000, 2097152) = 0 [pid 5560] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5560] ioctl(4, LOOP_SET_FD, 3 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5555, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 4997] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4997] umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, [pid 5562] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./44/binderfs" [pid 5560] <... ioctl resumed>) = 0 [pid 4997] <... unlink resumed>) = 0 [pid 4997] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5560] close(3) = 0 [pid 5560] mkdir("./file1", 0777) = 0 [pid 5560] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [ 161.970610][ T5560] loop5: detected capacity change from 0 to 4096 [ 162.025492][ T5560] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5563] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5562] <... write resumed>) = 2097152 [pid 5562] munmap(0x7f18ca796000, 2097152 [pid 5563] munmap(0x7f18ca796000, 2097152) = 0 [pid 5563] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5563] ioctl(4, LOOP_SET_FD, 3 [pid 5562] <... munmap resumed>) = 0 [pid 5562] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 162.076088][ T5560] NILFS (loop5): trying rollback from an earlier position [ 162.105648][ T5563] loop2: detected capacity change from 0 to 4096 [pid 5562] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 4997] <... umount2 resumed>) = 0 [pid 5562] close(3) = 0 [pid 5562] mkdir("./file1", 0777 [pid 4997] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5562] <... mkdir resumed>) = 0 [pid 5562] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5563] <... ioctl resumed>) = 0 [pid 5563] close(3) = 0 [pid 4997] lstat("./44/file1", [pid 5563] mkdir("./file1", 0777) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 162.135372][ T5562] loop1: detected capacity change from 0 to 4096 [pid 5563] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4997] umount2("./44/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./44/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 5560] <... mount resumed>) = 0 [pid 4997] rmdir("./44/file1" [pid 5560] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 4997] <... rmdir resumed>) = 0 [pid 5560] chdir("./file1") = 0 [pid 4997] getdents64(3, [pid 5560] ioctl(4, LOOP_CLR_FD) = 0 [pid 5560] close(4) = 0 [ 162.176347][ T5560] NILFS (loop5): recovery complete [ 162.179688][ T5562] NILFS (loop1): invalid segment: Checksum error in segment payload [ 162.211986][ T5563] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5560] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5560] <... open resumed>) = 4 [pid 4997] close(3 [pid 5560] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 4997] <... close resumed>) = 0 [pid 5560] ftruncate(5, 33587195 [pid 4997] rmdir("./44" [pid 5560] <... ftruncate resumed>) = 0 [pid 5560] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5560] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5560] sendfile(6, 7, NULL, 281474978811909 [pid 4997] <... rmdir resumed>) = 0 [pid 4997] mkdir("./45", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5565 [ 162.223061][ T5562] NILFS (loop1): trying rollback from an earlier position [ 162.227619][ T5564] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.249681][ T5563] NILFS (loop2): trying rollback from an earlier position ./strace-static-x86_64: Process 5565 attached [pid 5565] chdir("./45") = 0 [pid 5565] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5565] setpgid(0, 0) = 0 [pid 5565] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5565] write(3, "1000", 4) = 4 [pid 5565] close(3) = 0 [pid 5565] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5565] memfd_create("syzkaller", 0) = 3 [pid 5565] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5562] <... mount resumed>) = 0 [pid 5565] <... mmap resumed>) = 0x7f18ca796000 [ 162.331722][ T5562] NILFS (loop1): recovery complete [ 162.339657][ T5563] NILFS (loop2): recovery complete [ 162.365102][ T5566] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5562] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5562] chdir("./file1") = 0 [pid 5562] ioctl(4, LOOP_CLR_FD [pid 5563] <... mount resumed>) = 0 [pid 5562] <... ioctl resumed>) = 0 [pid 5563] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5562] close(4 [pid 5563] <... openat resumed>) = 3 [pid 5562] <... close resumed>) = 0 [pid 5563] chdir("./file1") = 0 [pid 5563] ioctl(4, LOOP_CLR_FD) = 0 [pid 5563] close(4 [pid 5562] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5563] <... close resumed>) = 0 [pid 5563] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5562] <... open resumed>) = 4 [pid 5563] <... open resumed>) = 4 [pid 5562] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5563] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5562] <... open resumed>) = 5 [pid 5563] <... open resumed>) = 5 [pid 5562] ftruncate(5, 33587195 [pid 5563] ftruncate(5, 33587195 [pid 5562] <... ftruncate resumed>) = 0 [pid 5563] <... ftruncate resumed>) = 0 [pid 5562] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5563] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5562] <... open resumed>) = 6 [pid 5563] <... open resumed>) = 6 [pid 5562] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5565] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5563] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5562] <... open resumed>) = 7 [pid 5563] <... open resumed>) = 7 [pid 5562] sendfile(6, 7, NULL, 281474978811909 [ 162.414060][ T5567] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5563] sendfile(6, 7, NULL, 281474978811909 [pid 5565] <... write resumed>) = 2097152 [pid 5557] <... sendfile resumed>) = 1048576 [pid 5565] munmap(0x7f18ca796000, 2097152 [pid 5557] exit_group(0 [pid 5565] <... munmap resumed>) = 0 [pid 5557] <... exit_group resumed>) = ? [pid 5565] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5557] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5557, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 5001] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5565] <... openat resumed>) = 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./45/binderfs" [pid 5565] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... unlink resumed>) = 0 [pid 5001] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5565] <... ioctl resumed>) = 0 [pid 5565] close(3) = 0 [pid 5565] mkdir("./file1", 0777) = 0 [ 162.683999][ T5565] loop0: detected capacity change from 0 to 4096 [ 162.733472][ T5565] NILFS (loop0): invalid segment: Checksum error in segment payload [ 162.772990][ T5565] NILFS (loop0): trying rollback from an earlier position [pid 5565] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./45/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./45/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4 [pid 5558] <... sendfile resumed>) = 1048576 [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./45/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./45" [pid 5558] exit_group(0 [pid 5001] <... rmdir resumed>) = 0 [pid 5558] <... exit_group resumed>) = ? [pid 5001] mkdir("./46", 0777 [pid 5558] +++ exited with 0 +++ [pid 5001] <... mkdir resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5558, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [pid 5001] ioctl(3, LOOP_CLR_FD [ 162.872813][ T5565] NILFS (loop0): recovery complete [pid 5000] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] close(3 [pid 5000] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... close resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5569 [pid 5565] <... mount resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5565] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5000] fstat(3, [pid 5565] <... openat resumed>) = 3 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5565] chdir("./file1") = 0 [pid 5000] getdents64(3, [pid 5565] ioctl(4, LOOP_CLR_FD [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5565] <... ioctl resumed>) = 0 [pid 5000] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5565] close(4 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5565] <... close resumed>) = 0 [pid 5000] lstat("./46/binderfs", [pid 5565] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000./strace-static-x86_64: Process 5569 attached ) = 4 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5565] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5000] unlink("./46/binderfs" [pid 5569] chdir("./46" [pid 5565] <... open resumed>) = 5 [pid 5569] <... chdir resumed>) = 0 [pid 5565] ftruncate(5, 33587195 [pid 5000] <... unlink resumed>) = 0 [pid 5565] <... ftruncate resumed>) = 0 [pid 5565] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5565] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5000] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5565] <... open resumed>) = 7 [pid 5565] sendfile(6, 7, NULL, 281474978811909 [pid 5569] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5569] setpgid(0, 0) = 0 [pid 5569] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5569] write(3, "1000", 4) = 4 [pid 5569] close(3) = 0 [pid 5569] symlink("/dev/binderfs", "./binderfs") = 0 [ 162.928543][ T5568] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5569] memfd_create("syzkaller", 0) = 3 [pid 5569] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5569] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./46/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5569] <... write resumed>) = 2097152 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5569] munmap(0x7f18ca796000, 2097152 [pid 5000] openat(AT_FDCWD, "./46/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5569] <... munmap resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 5000] fstat(4, [pid 5569] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, [pid 5569] <... openat resumed>) = 4 [pid 5569] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./46/file1" [pid 5569] <... ioctl resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5569] close(3 [pid 5000] getdents64(3, [pid 5569] <... close resumed>) = 0 [pid 5569] mkdir("./file1", 0777 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5569] <... mkdir resumed>) = 0 [pid 5000] close(3 [ 163.187452][ T5569] loop4: detected capacity change from 0 to 4096 [pid 5569] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5000] <... close resumed>) = 0 [pid 5000] rmdir("./46") = 0 [pid 5000] mkdir("./47", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5570 ./strace-static-x86_64: Process 5570 attached [ 163.262004][ T5569] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5570] chdir("./47") = 0 [pid 5570] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5570] setpgid(0, 0) = 0 [pid 5570] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5570] write(3, "1000", 4) = 4 [pid 5570] close(3) = 0 [pid 5570] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5570] memfd_create("syzkaller", 0) = 3 [pid 5570] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5562] <... sendfile resumed>) = 1048576 [pid 5560] <... sendfile resumed>) = 1048576 [pid 5562] exit_group(0 [pid 5560] exit_group(0 [pid 5562] <... exit_group resumed>) = ? [pid 5560] <... exit_group resumed>) = ? [pid 5562] +++ exited with 0 +++ [pid 5560] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5562, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} --- [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5560, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [ 163.312789][ T5569] NILFS (loop4): trying rollback from an earlier position [ 163.347320][ T5569] NILFS (loop4): recovery complete [pid 5002] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 5569] <... mount resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5569] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5002] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5569] <... openat resumed>) = 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5569] chdir("./file1" [pid 5002] lstat("./46/binderfs", [pid 4998] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5570] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5569] <... chdir resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./46/binderfs" [pid 4998] <... openat resumed>) = 3 [pid 5002] <... unlink resumed>) = 0 [pid 4998] fstat(3, [pid 5569] ioctl(4, LOOP_CLR_FD [pid 5002] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5570] <... write resumed>) = 2097152 [pid 5569] <... ioctl resumed>) = 0 [ 163.362665][ T5571] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5570] munmap(0x7f18ca796000, 2097152 [pid 5569] close(4 [pid 5570] <... munmap resumed>) = 0 [pid 5569] <... close resumed>) = 0 [pid 4998] getdents64(3, [pid 5570] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5569] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5570] <... openat resumed>) = 4 [pid 4998] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5570] ioctl(4, LOOP_SET_FD, 3 [pid 5569] <... open resumed>) = 4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5570] <... ioctl resumed>) = 0 [pid 5569] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] lstat("./45/binderfs", [pid 5570] close(3 [pid 5569] <... open resumed>) = 5 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5570] <... close resumed>) = 0 [pid 5569] ftruncate(5, 33587195 [pid 4998] unlink("./45/binderfs" [pid 5570] mkdir("./file1", 0777 [pid 5569] <... ftruncate resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 5570] <... mkdir resumed>) = 0 [pid 5569] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4998] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5570] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5569] <... open resumed>) = 6 [pid 5569] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 163.456407][ T5570] loop3: detected capacity change from 0 to 4096 [pid 5569] sendfile(6, 7, NULL, 281474978811909 [pid 5563] <... sendfile resumed>) = 1048576 [pid 5563] exit_group(0) = ? [pid 5563] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5563, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 4999] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./45/binderfs") = 0 [ 163.524338][ T5570] NILFS (loop3): invalid segment: Checksum error in segment payload [ 163.532497][ T5570] NILFS (loop3): trying rollback from an earlier position [pid 4999] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./46/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./46/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./46/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./46") = 0 [pid 5002] mkdir("./47", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... umount2 resumed>) = 0 [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5572 [pid 4998] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./45/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5572 attached [pid 5572] chdir("./47") = 0 [pid 5572] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5572] setpgid(0, 0) = 0 [pid 5572] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5572] <... openat resumed>) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./45/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5572] write(3, "1000", 4) = 4 [pid 4998] <... openat resumed>) = 4 [pid 5572] close(3) = 0 [pid 5572] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4998] fstat(4, [pid 5572] memfd_create("syzkaller", 0) = 3 [pid 5572] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 163.656891][ T5570] NILFS (loop3): recovery complete [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, [pid 5570] <... mount resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5570] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5570] chdir("./file1") = 0 [pid 4998] close(4 [pid 5570] ioctl(4, LOOP_CLR_FD) = 0 [pid 4998] <... close resumed>) = 0 [pid 5570] close(4) = 0 [pid 5570] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] rmdir("./45/file1") = 0 [pid 4998] getdents64(3, [pid 5570] <... open resumed>) = 4 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5570] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5570] ftruncate(5, 33587195) = 0 [pid 4998] close(3 [pid 5570] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 4998] <... close resumed>) = 0 [pid 5570] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 4998] rmdir("./45" [pid 5570] sendfile(6, 7, NULL, 281474978811909 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] mkdir("./46", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4999] <... umount2 resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3 [pid 5572] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] <... close resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5574 [ 163.706287][ T5573] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds ./strace-static-x86_64: Process 5574 attached [pid 4999] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5574] chdir("./46" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5574] <... chdir resumed>) = 0 [pid 4999] lstat("./45/file1", [pid 5574] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5574] <... prctl resumed>) = 0 [pid 4999] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5574] setpgid(0, 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5574] <... setpgid resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./45/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5574] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... openat resumed>) = 4 [pid 5574] <... openat resumed>) = 3 [pid 4999] fstat(4, [pid 5574] write(3, "1000", 4 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5574] <... write resumed>) = 4 [pid 4999] getdents64(4, [pid 5574] close(3) = 0 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5574] symlink("/dev/binderfs", "./binderfs" [pid 5572] <... write resumed>) = 2097152 [pid 4999] getdents64(4, [pid 5574] <... symlink resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5574] memfd_create("syzkaller", 0 [pid 5572] munmap(0x7f18ca796000, 2097152 [pid 4999] close(4) = 0 [pid 4999] rmdir("./45/file1" [pid 5574] <... memfd_create resumed>) = 3 [pid 5574] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5572] <... munmap resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5574] <... mmap resumed>) = 0x7f18ca796000 [pid 5572] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4999] getdents64(3, [pid 5572] <... openat resumed>) = 4 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5572] ioctl(4, LOOP_SET_FD, 3 [pid 4999] close(3) = 0 [pid 4999] rmdir("./45") = 0 [pid 4999] mkdir("./46", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5572] <... ioctl resumed>) = 0 [pid 4999] close(3) = 0 [pid 5572] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5575 [pid 5572] mkdir("./file1", 0777 [pid 5574] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5572] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5575 attached [pid 5572] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [ 163.884848][ T5572] loop5: detected capacity change from 0 to 4096 [pid 5575] chdir("./46") = 0 [pid 5575] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5575] setpgid(0, 0) = 0 [pid 5575] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5575] write(3, "1000", 4) = 4 [pid 5575] close(3) = 0 [pid 5575] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5575] memfd_create("syzkaller", 0) = 3 [pid 5575] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 163.944721][ T5572] NILFS (loop5): invalid segment: Checksum error in segment payload [ 163.984549][ T5572] NILFS (loop5): trying rollback from an earlier position [pid 5575] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5574] <... write resumed>) = 2097152 [pid 5574] munmap(0x7f18ca796000, 2097152) = 0 [pid 5565] <... sendfile resumed>) = 1048576 [pid 5574] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5565] exit_group(0) = ? [pid 5574] <... openat resumed>) = 4 [pid 5574] ioctl(4, LOOP_SET_FD, 3 [pid 5565] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5565, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 4997] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4997] umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5574] <... ioctl resumed>) = 0 [pid 4997] unlink("./45/binderfs") = 0 [pid 5574] close(3 [pid 4997] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5572] <... mount resumed>) = 0 [pid 5574] <... close resumed>) = 0 [pid 5572] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5572] chdir("./file1") = 0 [pid 5572] ioctl(4, LOOP_CLR_FD) = 0 [pid 5574] mkdir("./file1", 0777 [pid 5572] close(4 [pid 5575] <... write resumed>) = 2097152 [pid 5574] <... mkdir resumed>) = 0 [pid 5572] <... close resumed>) = 0 [pid 5572] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5575] munmap(0x7f18ca796000, 2097152 [pid 5574] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5572] <... open resumed>) = 4 [pid 5572] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5572] ftruncate(5, 33587195) = 0 [pid 5572] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5572] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5575] <... munmap resumed>) = 0 [pid 5572] sendfile(6, 7, NULL, 281474978811909 [pid 5575] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 164.048152][ T5574] loop1: detected capacity change from 0 to 4096 [ 164.055795][ T5572] NILFS (loop5): recovery complete [ 164.084655][ T5576] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5575] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5575] close(3) = 0 [ 164.132250][ T5575] loop2: detected capacity change from 0 to 4096 [ 164.147875][ T5574] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5575] mkdir("./file1", 0777) = 0 [ 164.178480][ T5574] NILFS (loop1): trying rollback from an earlier position [ 164.208324][ T5575] NILFS (loop2): invalid segment: Checksum error in segment payload [ 164.229849][ T5575] NILFS (loop2): trying rollback from an earlier position [ 164.258332][ T5574] NILFS (loop1): recovery complete [pid 5575] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5574] <... mount resumed>) = 0 [pid 5574] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5574] chdir("./file1") = 0 [pid 5574] ioctl(4, LOOP_CLR_FD [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./45/file1", [pid 5574] <... ioctl resumed>) = 0 [pid 5575] <... mount resumed>) = 0 [pid 5574] close(4 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./45/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5575] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5574] <... close resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./45/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./45/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./45") = 0 [pid 4997] mkdir("./46", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3 [pid 5575] <... openat resumed>) = 3 [ 164.296331][ T5575] NILFS (loop2): recovery complete [ 164.303001][ T5577] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.330943][ T5578] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5574] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5575] chdir("./file1" [pid 5574] <... open resumed>) = 4 [pid 5569] <... sendfile resumed>) = 1048576 [pid 4997] <... close resumed>) = 0 [pid 5575] <... chdir resumed>) = 0 [pid 5574] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5569] exit_group(0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5575] ioctl(4, LOOP_CLR_FD [pid 5574] <... open resumed>) = 5 [pid 5569] <... exit_group resumed>) = ? [pid 5575] <... ioctl resumed>) = 0 [pid 5574] ftruncate(5, 33587195 [pid 5569] +++ exited with 0 +++ ./strace-static-x86_64: Process 5579 attached [pid 5575] close(4 [pid 5574] <... ftruncate resumed>) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5569, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5579 [pid 5579] chdir("./46" [pid 5575] <... close resumed>) = 0 [pid 5574] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5579] <... chdir resumed>) = 0 [pid 5575] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5574] <... open resumed>) = 6 [pid 5579] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5575] <... open resumed>) = 4 [pid 5574] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5001] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5579] <... prctl resumed>) = 0 [pid 5575] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5574] <... open resumed>) = 7 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5579] setpgid(0, 0 [pid 5575] <... open resumed>) = 5 [pid 5574] sendfile(6, 7, NULL, 281474978811909 [pid 5001] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5579] <... setpgid resumed>) = 0 [pid 5575] ftruncate(5, 33587195 [pid 5001] <... openat resumed>) = 3 [pid 5579] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] fstat(3, [pid 5579] <... openat resumed>) = 3 [pid 5575] <... ftruncate resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5579] write(3, "1000", 4 [pid 5575] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5001] getdents64(3, [pid 5579] <... write resumed>) = 4 [pid 5575] <... open resumed>) = 6 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5579] close(3 [pid 5575] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5001] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5579] <... close resumed>) = 0 [pid 5575] <... open resumed>) = 7 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5579] symlink("/dev/binderfs", "./binderfs" [pid 5575] sendfile(6, 7, NULL, 281474978811909 [pid 5001] lstat("./46/binderfs", [pid 5579] <... symlink resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5579] memfd_create("syzkaller", 0 [pid 5001] unlink("./46/binderfs" [pid 5579] <... memfd_create resumed>) = 3 [pid 5001] <... unlink resumed>) = 0 [pid 5579] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5579] <... mmap resumed>) = 0x7f18ca796000 [pid 5579] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5001] <... umount2 resumed>) = 0 [pid 5579] munmap(0x7f18ca796000, 2097152) = 0 [pid 5579] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5570] <... sendfile resumed>) = 1048576 [pid 5579] <... openat resumed>) = 4 [pid 5579] ioctl(4, LOOP_SET_FD, 3 [pid 5570] exit_group(0 [pid 5001] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5570] <... exit_group resumed>) = ? [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./46/file1", [pid 5570] +++ exited with 0 +++ [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5570, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5001] openat(AT_FDCWD, "./46/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 5001] <... openat resumed>) = 4 [pid 5000] <... restart_syscall resumed>) = 0 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, [pid 5000] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] getdents64(4, [pid 5000] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5001] close(4 [pid 5000] fstat(3, [pid 5001] <... close resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] rmdir("./46/file1" [pid 5000] getdents64(3, [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5579] <... ioctl resumed>) = 0 [pid 5001] getdents64(3, [pid 5000] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5579] close(3 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5579] <... close resumed>) = 0 [pid 5001] close(3 [pid 5000] lstat("./47/binderfs", [pid 5579] mkdir("./file1", 0777 [pid 5001] <... close resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5579] <... mkdir resumed>) = 0 [pid 5001] rmdir("./46" [pid 5000] unlink("./47/binderfs" [pid 5579] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... unlink resumed>) = 0 [ 164.707924][ T5579] loop0: detected capacity change from 0 to 4096 [pid 5001] mkdir("./47", 0777 [pid 5000] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... mkdir resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5580 [ 164.770810][ T5579] NILFS (loop0): invalid segment: Checksum error in segment payload [ 164.809446][ T5579] NILFS (loop0): trying rollback from an earlier position ./strace-static-x86_64: Process 5580 attached [pid 5580] chdir("./47") = 0 [pid 5580] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5580] setpgid(0, 0) = 0 [pid 5580] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5580] write(3, "1000", 4) = 4 [pid 5580] close(3) = 0 [pid 5580] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5580] memfd_create("syzkaller", 0) = 3 [pid 5580] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 164.878160][ T5579] NILFS (loop0): recovery complete [pid 5579] <... mount resumed>) = 0 [pid 5579] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5579] chdir("./file1") = 0 [pid 5579] ioctl(4, LOOP_CLR_FD) = 0 [pid 5579] close(4) = 0 [pid 5579] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5579] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5579] ftruncate(5, 33587195) = 0 [pid 5579] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5579] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5579] sendfile(6, 7, NULL, 281474978811909 [ 164.908633][ T5581] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5580] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./47/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./47/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./47/file1" [pid 5580] <... write resumed>) = 2097152 [pid 5000] <... rmdir resumed>) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5580] munmap(0x7f18ca796000, 2097152 [pid 5000] close(3) = 0 [pid 5580] <... munmap resumed>) = 0 [pid 5000] rmdir("./47" [pid 5580] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] <... rmdir resumed>) = 0 [pid 5580] <... openat resumed>) = 4 [pid 5000] mkdir("./48", 0777 [pid 5580] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... mkdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5582 ./strace-static-x86_64: Process 5582 attached [ 165.074698][ T5580] loop4: detected capacity change from 0 to 4096 [pid 5582] chdir("./48") = 0 [pid 5582] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5580] <... ioctl resumed>) = 0 [pid 5582] setpgid(0, 0 [pid 5580] close(3 [pid 5582] <... setpgid resumed>) = 0 [pid 5580] <... close resumed>) = 0 [pid 5582] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5580] mkdir("./file1", 0777 [pid 5582] <... openat resumed>) = 3 [pid 5580] <... mkdir resumed>) = 0 [pid 5582] write(3, "1000", 4 [pid 5580] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5582] <... write resumed>) = 4 [pid 5582] close(3) = 0 [pid 5582] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5582] memfd_create("syzkaller", 0) = 3 [pid 5582] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 165.171742][ T5580] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5572] <... sendfile resumed>) = 1048576 [pid 5572] exit_group(0) = ? [pid 5572] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5572, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5002] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5582] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... openat resumed>) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./47/binderfs") = 0 [ 165.234559][ T5580] NILFS (loop4): trying rollback from an earlier position [pid 5002] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5582] <... write resumed>) = 2097152 [pid 5582] munmap(0x7f18ca796000, 2097152) = 0 [pid 5582] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5582] ioctl(4, LOOP_SET_FD, 3 [pid 5575] <... sendfile resumed>) = 1048576 [pid 5575] exit_group(0) = ? [ 165.324010][ T5580] NILFS (loop4): recovery complete [ 165.342159][ T5582] loop3: detected capacity change from 0 to 4096 [pid 5580] <... mount resumed>) = 0 [pid 5575] +++ exited with 0 +++ [pid 5580] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5575, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5580] <... openat resumed>) = 3 [pid 5580] chdir("./file1") = 0 [pid 5580] ioctl(4, LOOP_CLR_FD) = 0 [pid 5580] close(4) = 0 [pid 5580] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5582] <... ioctl resumed>) = 0 [pid 5582] close(3) = 0 [pid 5582] mkdir("./file1", 0777 [pid 5580] <... open resumed>) = 4 [pid 5580] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 4999] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5580] ftruncate(5, 33587195 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5580] <... ftruncate resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5582] <... mkdir resumed>) = 0 [pid 5580] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4999] <... openat resumed>) = 3 [pid 5580] <... open resumed>) = 6 [pid 4999] fstat(3, [pid 5582] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5580] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5580] <... open resumed>) = 7 [pid 4999] getdents64(3, [pid 5580] sendfile(6, 7, NULL, 281474978811909 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./46/binderfs") = 0 [ 165.377900][ T5583] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./47/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./47/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [ 165.446754][ T5582] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5002] rmdir("./47/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./47") = 0 [pid 5002] mkdir("./48", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5584 ./strace-static-x86_64: Process 5584 attached [pid 5584] chdir("./48") = 0 [pid 5584] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5584] setpgid(0, 0) = 0 [ 165.512999][ T5582] NILFS (loop3): trying rollback from an earlier position [pid 5584] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... umount2 resumed>) = 0 [pid 5574] <... sendfile resumed>) = 1048576 [pid 5584] <... openat resumed>) = 3 [pid 5574] exit_group(0 [pid 4999] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5584] write(3, "1000", 4 [pid 5574] <... exit_group resumed>) = ? [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5584] <... write resumed>) = 4 [pid 5582] <... mount resumed>) = 0 [pid 5584] close(3 [pid 5582] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5574] +++ exited with 0 +++ [pid 4999] lstat("./46/file1", [pid 5584] <... close resumed>) = 0 [pid 5582] <... openat resumed>) = 3 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5584] symlink("/dev/binderfs", "./binderfs" [pid 5582] chdir("./file1" [pid 4999] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5574, si_uid=0, si_status=0, si_utime=0, si_stime=35 /* 0.35 s */} --- [pid 5584] <... symlink resumed>) = 0 [pid 5582] <... chdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5584] memfd_create("syzkaller", 0 [pid 5582] ioctl(4, LOOP_CLR_FD [pid 4999] openat(AT_FDCWD, "./46/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5584] <... memfd_create resumed>) = 3 [pid 5582] <... ioctl resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 4998] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5584] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5582] close(4 [pid 4999] fstat(4, [pid 4998] <... openat resumed>) = 3 [pid 5584] <... mmap resumed>) = 0x7f18ca796000 [pid 5582] <... close resumed>) = 0 [pid 4998] fstat(3, [pid 5582] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5582] <... open resumed>) = 4 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, [pid 5582] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4999] getdents64(4, [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5582] <... open resumed>) = 5 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5582] ftruncate(5, 33587195 [pid 4999] getdents64(4, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5582] <... ftruncate resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] lstat("./46/binderfs", [pid 5582] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4999] close(4 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5582] <... open resumed>) = 6 [pid 4999] <... close resumed>) = 0 [pid 4998] unlink("./46/binderfs" [pid 5582] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4999] rmdir("./46/file1" [pid 4998] <... unlink resumed>) = 0 [ 165.592649][ T5582] NILFS (loop3): recovery complete [ 165.602351][ T5585] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5582] <... open resumed>) = 7 [pid 4998] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... rmdir resumed>) = 0 [pid 5582] sendfile(6, 7, NULL, 281474978811909 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./46") = 0 [pid 4999] mkdir("./47", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5586 [pid 5584] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5586 attached [pid 5586] chdir("./47") = 0 [pid 5586] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5586] setpgid(0, 0) = 0 [pid 5586] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5586] write(3, "1000", 4) = 4 [pid 5586] close(3) = 0 [pid 5586] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5586] memfd_create("syzkaller", 0) = 3 [pid 5586] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4998] <... umount2 resumed>) = 0 [pid 5586] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5584] <... write resumed>) = 2097152 [pid 5584] munmap(0x7f18ca796000, 2097152) = 0 [pid 5584] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5584] ioctl(4, LOOP_SET_FD, 3 [pid 4998] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./46/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./46/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5584] <... ioctl resumed>) = 0 [pid 5584] close(3 [pid 4998] fstat(4, [pid 5584] <... close resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5584] mkdir("./file1", 0777 [pid 4998] getdents64(4, [pid 5584] <... mkdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5584] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./46/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./46") = 0 [pid 4998] mkdir("./47", 0777) = 0 [ 165.858253][ T5584] loop5: detected capacity change from 0 to 4096 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5586] <... write resumed>) = 2097152 [pid 4998] <... openat resumed>) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5587 ./strace-static-x86_64: Process 5587 attached [pid 5587] chdir("./47") = 0 [pid 5587] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5587] setpgid(0, 0) = 0 [pid 5587] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5587] write(3, "1000", 4 [pid 5586] munmap(0x7f18ca796000, 2097152 [pid 5587] <... write resumed>) = 4 [pid 5587] close(3 [pid 5586] <... munmap resumed>) = 0 [pid 5587] <... close resumed>) = 0 [pid 5587] symlink("/dev/binderfs", "./binderfs" [pid 5586] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5587] <... symlink resumed>) = 0 [pid 5586] <... openat resumed>) = 4 [pid 5587] memfd_create("syzkaller", 0 [ 165.914297][ T5584] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5586] ioctl(4, LOOP_SET_FD, 3 [pid 5587] <... memfd_create resumed>) = 3 [pid 5587] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5586] <... ioctl resumed>) = 0 [pid 5586] close(3) = 0 [pid 5586] mkdir("./file1", 0777) = 0 [pid 5579] <... sendfile resumed>) = 1048576 [pid 5579] exit_group(0 [pid 5586] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5579] <... exit_group resumed>) = ? [ 165.955264][ T5586] loop2: detected capacity change from 0 to 4096 [ 165.972116][ T5584] NILFS (loop5): trying rollback from an earlier position [pid 5587] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5579] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5579, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 4997] umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5584] <... mount resumed>) = 0 [pid 4997] unlink("./46/binderfs" [pid 5584] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4997] <... unlink resumed>) = 0 [pid 5584] <... openat resumed>) = 3 [pid 4997] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5584] chdir("./file1") = 0 [pid 5584] ioctl(4, LOOP_CLR_FD) = 0 [pid 5584] close(4) = 0 [ 166.018209][ T5586] NILFS (loop2): invalid segment: Checksum error in segment payload [ 166.023993][ T5584] NILFS (loop5): recovery complete [ 166.049307][ T5588] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5584] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5584] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5584] ftruncate(5, 33587195) = 0 [pid 5584] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5584] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5584] sendfile(6, 7, NULL, 281474978811909 [pid 5587] <... write resumed>) = 2097152 [ 166.084397][ T5586] NILFS (loop2): trying rollback from an earlier position [pid 5587] munmap(0x7f18ca796000, 2097152) = 0 [pid 5587] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5587] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5587] close(3) = 0 [pid 5587] mkdir("./file1", 0777) = 0 [ 166.166049][ T5587] loop1: detected capacity change from 0 to 4096 [ 166.197302][ T5586] NILFS (loop2): recovery complete [pid 5587] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4997] <... umount2 resumed>) = 0 [pid 5586] <... mount resumed>) = 0 [pid 5586] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5586] chdir("./file1") = 0 [pid 4997] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5586] ioctl(4, LOOP_CLR_FD [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5586] <... ioctl resumed>) = 0 [pid 4997] lstat("./46/file1", [pid 5586] close(4 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5586] <... close resumed>) = 0 [pid 4997] umount2("./46/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5586] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [ 166.237286][ T5587] NILFS (loop1): invalid segment: Checksum error in segment payload [ 166.245884][ T5589] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5586] <... open resumed>) = 4 [pid 4997] openat(AT_FDCWD, "./46/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5586] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4997] <... openat resumed>) = 4 [pid 5586] <... open resumed>) = 5 [pid 4997] fstat(4, [pid 5586] ftruncate(5, 33587195) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5586] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4997] getdents64(4, [pid 5586] <... open resumed>) = 6 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5586] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4997] getdents64(4, [pid 5586] <... open resumed>) = 7 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5586] sendfile(6, 7, NULL, 281474978811909 [pid 4997] close(4) = 0 [pid 4997] rmdir("./46/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./46") = 0 [pid 4997] mkdir("./47", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [ 166.314354][ T5587] NILFS (loop1): trying rollback from an earlier position [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5590 ./strace-static-x86_64: Process 5590 attached [pid 5590] chdir("./47" [pid 5580] <... sendfile resumed>) = 1048576 [pid 5590] <... chdir resumed>) = 0 [pid 5590] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5590] setpgid(0, 0 [pid 5580] exit_group(0 [pid 5590] <... setpgid resumed>) = 0 [pid 5580] <... exit_group resumed>) = ? [pid 5590] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5590] write(3, "1000", 4 [pid 5580] +++ exited with 0 +++ [pid 5590] <... write resumed>) = 4 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5580, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5590] close(3 [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5590] <... close resumed>) = 0 [ 166.406935][ T5587] NILFS (loop1): recovery complete [pid 5001] <... restart_syscall resumed>) = 0 [pid 5590] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5590] memfd_create("syzkaller", 0 [pid 5001] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5590] <... memfd_create resumed>) = 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5590] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5590] <... mmap resumed>) = 0x7f18ca796000 [pid 5001] <... openat resumed>) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5587] <... mount resumed>) = 0 [pid 5001] getdents64(3, [pid 5587] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5587] <... openat resumed>) = 3 [pid 5001] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5587] chdir("./file1" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5587] <... chdir resumed>) = 0 [pid 5001] lstat("./47/binderfs", [pid 5587] ioctl(4, LOOP_CLR_FD [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5587] <... ioctl resumed>) = 0 [pid 5001] unlink("./47/binderfs" [pid 5587] close(4 [pid 5001] <... unlink resumed>) = 0 [pid 5587] <... close resumed>) = 0 [pid 5001] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5587] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5590] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5587] <... open resumed>) = 4 [pid 5587] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5587] ftruncate(5, 33587195) = 0 [pid 5587] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [ 166.463025][ T5591] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5587] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5587] sendfile(6, 7, NULL, 281474978811909 [pid 5590] <... write resumed>) = 2097152 [pid 5590] munmap(0x7f18ca796000, 2097152) = 0 [pid 5590] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5590] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5590] close(3) = 0 [pid 5590] mkdir("./file1", 0777) = 0 [ 166.564985][ T5590] loop0: detected capacity change from 0 to 4096 [ 166.651249][ T5590] NILFS (loop0): invalid segment: Checksum error in segment payload [ 166.673056][ T5590] NILFS (loop0): trying rollback from an earlier position [pid 5590] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./47/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./47/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./47/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./47") = 0 [pid 5001] mkdir("./48", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 166.748550][ T5590] NILFS (loop0): recovery complete [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5593 ./strace-static-x86_64: Process 5593 attached [pid 5590] <... mount resumed>) = 0 [pid 5590] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5593] chdir("./48" [pid 5590] <... openat resumed>) = 3 [pid 5593] <... chdir resumed>) = 0 [pid 5590] chdir("./file1" [pid 5593] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5590] <... chdir resumed>) = 0 [pid 5593] <... prctl resumed>) = 0 [pid 5590] ioctl(4, LOOP_CLR_FD [pid 5593] setpgid(0, 0 [pid 5590] <... ioctl resumed>) = 0 [pid 5593] <... setpgid resumed>) = 0 [pid 5590] close(4 [pid 5593] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5590] <... close resumed>) = 0 [pid 5593] <... openat resumed>) = 3 [pid 5590] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5593] write(3, "1000", 4) = 4 [pid 5590] <... open resumed>) = 4 [pid 5593] close(3 [pid 5590] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5593] <... close resumed>) = 0 [pid 5590] <... open resumed>) = 5 [pid 5593] symlink("/dev/binderfs", "./binderfs" [pid 5590] ftruncate(5, 33587195 [pid 5582] <... sendfile resumed>) = 1048576 [pid 5593] <... symlink resumed>) = 0 [pid 5590] <... ftruncate resumed>) = 0 [pid 5593] memfd_create("syzkaller", 0 [pid 5590] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [ 166.808162][ T5592] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5593] <... memfd_create resumed>) = 3 [pid 5590] <... open resumed>) = 6 [pid 5593] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5590] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5593] <... mmap resumed>) = 0x7f18ca796000 [pid 5590] <... open resumed>) = 7 [pid 5582] exit_group(0) = ? [pid 5590] sendfile(6, 7, NULL, 281474978811909 [pid 5582] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5582, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5000] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./48/binderfs") = 0 [pid 5000] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5593] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5593] munmap(0x7f18ca796000, 2097152) = 0 [pid 5593] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5593] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./48/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5593] close(3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5593] <... close resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./48/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5593] mkdir("./file1", 0777 [pid 5000] <... openat resumed>) = 4 [pid 5593] <... mkdir resumed>) = 0 [pid 5000] fstat(4, [pid 5593] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./48/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./48") = 0 [pid 5000] mkdir("./49", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 167.005797][ T5593] loop4: detected capacity change from 0 to 4096 [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5594 ./strace-static-x86_64: Process 5594 attached [pid 5594] chdir("./49") = 0 [pid 5594] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5594] setpgid(0, 0) = 0 [pid 5594] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5594] write(3, "1000", 4) = 4 [pid 5594] close(3) = 0 [pid 5594] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5594] memfd_create("syzkaller", 0) = 3 [pid 5594] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 167.058189][ T5593] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5594] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5584] <... sendfile resumed>) = 1048576 [ 167.122716][ T5593] NILFS (loop4): trying rollback from an earlier position [pid 5584] exit_group(0) = ? [pid 5584] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5584, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [pid 5002] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./48/binderfs") = 0 [ 167.190802][ T5593] NILFS (loop4): recovery complete [pid 5002] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5593] <... mount resumed>) = 0 [pid 5593] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5593] chdir("./file1") = 0 [pid 5593] ioctl(4, LOOP_CLR_FD) = 0 [pid 5593] close(4) = 0 [pid 5593] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5593] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5586] <... sendfile resumed>) = 1048576 [pid 5593] ftruncate(5, 33587195) = 0 [pid 5593] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5594] <... write resumed>) = 2097152 [pid 5593] <... open resumed>) = 6 [pid 5586] exit_group(0 [pid 5594] munmap(0x7f18ca796000, 2097152 [pid 5586] <... exit_group resumed>) = ? [pid 5594] <... munmap resumed>) = 0 [pid 5593] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5586] +++ exited with 0 +++ [pid 5594] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5593] <... open resumed>) = 7 [pid 5594] <... openat resumed>) = 4 [pid 5593] sendfile(6, 7, NULL, 281474978811909 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5586, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [ 167.239826][ T5595] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5594] ioctl(4, LOOP_SET_FD, 3 [pid 4999] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5594] <... ioctl resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5594] close(3 [pid 4999] <... openat resumed>) = 3 [pid 5594] <... close resumed>) = 0 [pid 4999] fstat(3, [pid 5594] mkdir("./file1", 0777 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5594] <... mkdir resumed>) = 0 [pid 4999] getdents64(3, [pid 5594] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 167.296337][ T5594] loop3: detected capacity change from 0 to 4096 [pid 4999] unlink("./47/binderfs") = 0 [pid 4999] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = 0 [ 167.340474][ T5594] NILFS (loop3): invalid segment: Checksum error in segment payload [ 167.371386][ T5594] NILFS (loop3): trying rollback from an earlier position [pid 5002] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./48/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./48/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [ 167.430231][ T5594] NILFS (loop3): recovery complete [pid 5002] close(4 [pid 5594] <... mount resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5594] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5002] rmdir("./48/file1" [pid 5594] chdir("./file1" [pid 5002] <... rmdir resumed>) = 0 [pid 5594] <... chdir resumed>) = 0 [pid 5594] ioctl(4, LOOP_CLR_FD [pid 5002] getdents64(3, [pid 5594] <... ioctl resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./48" [pid 5594] close(4 [pid 5002] <... rmdir resumed>) = 0 [pid 5594] <... close resumed>) = 0 [pid 5002] mkdir("./49", 0777 [pid 5594] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5002] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5594] <... open resumed>) = 4 [pid 5002] <... openat resumed>) = 3 [pid 5594] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5594] <... open resumed>) = 5 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5594] ftruncate(5, 33587195 [pid 5002] close(3 [pid 5594] <... ftruncate resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5594] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5594] <... open resumed>) = 6 [pid 5594] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5597 [pid 5594] <... open resumed>) = 7 [pid 5594] sendfile(6, 7, NULL, 281474978811909./strace-static-x86_64: Process 5597 attached [pid 5597] chdir("./49") = 0 [ 167.457878][ T5596] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5597] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5597] setpgid(0, 0) = 0 [pid 5597] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5597] write(3, "1000", 4) = 4 [pid 5597] close(3) = 0 [pid 5597] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5597] memfd_create("syzkaller", 0) = 3 [pid 5597] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5597] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./47/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./47/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./47/file1") = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3 [pid 5587] <... sendfile resumed>) = 1048576 [pid 4999] <... close resumed>) = 0 [pid 5587] exit_group(0 [pid 4999] rmdir("./47" [pid 5587] <... exit_group resumed>) = ? [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./48", 0777 [pid 5587] +++ exited with 0 +++ [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5587, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5598 [pid 4998] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 5598 attached [pid 4998] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5598] chdir("./48" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5598] <... chdir resumed>) = 0 [pid 4998] lstat("./47/binderfs", [pid 5598] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5598] <... prctl resumed>) = 0 [pid 4998] unlink("./47/binderfs" [pid 5598] setpgid(0, 0) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 5598] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5598] <... openat resumed>) = 3 [pid 5598] write(3, "1000", 4) = 4 [pid 5598] close(3) = 0 [pid 5598] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5597] <... write resumed>) = 2097152 [pid 5598] memfd_create("syzkaller", 0) = 3 [pid 5598] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5597] munmap(0x7f18ca796000, 2097152) = 0 [pid 5597] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5597] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5597] close(3) = 0 [pid 5597] mkdir("./file1", 0777) = 0 [pid 5597] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [ 167.750751][ T5597] loop5: detected capacity change from 0 to 4096 [pid 5598] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] <... umount2 resumed>) = 0 [pid 5598] <... write resumed>) = 2097152 [ 167.825964][ T5597] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5598] munmap(0x7f18ca796000, 2097152 [pid 4998] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5598] <... munmap resumed>) = 0 [pid 5598] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5598] <... openat resumed>) = 4 [pid 4998] lstat("./47/file1", [pid 5598] ioctl(4, LOOP_SET_FD, 3 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./47/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5598] <... ioctl resumed>) = 0 [pid 4998] fstat(4, [pid 5598] close(3 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5598] <... close resumed>) = 0 [pid 4998] getdents64(4, [pid 5598] mkdir("./file1", 0777 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5598] <... mkdir resumed>) = 0 [pid 4998] getdents64(4, [pid 5598] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [ 167.880034][ T5597] NILFS (loop5): trying rollback from an earlier position [ 167.906421][ T5598] loop2: detected capacity change from 0 to 4096 [pid 4998] close(4) = 0 [pid 5597] <... mount resumed>) = 0 [pid 5597] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5597] chdir("./file1" [pid 4998] rmdir("./47/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./47" [pid 5597] <... chdir resumed>) = 0 [pid 5597] ioctl(4, LOOP_CLR_FD [pid 4998] <... rmdir resumed>) = 0 [pid 5597] <... ioctl resumed>) = 0 [pid 4998] mkdir("./48", 0777 [pid 5597] close(4) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5597] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5597] <... open resumed>) = 4 [ 167.940772][ T5597] NILFS (loop5): recovery complete [ 167.947253][ T5598] NILFS (loop2): invalid segment: Checksum error in segment payload [ 167.971486][ T5598] NILFS (loop2): trying rollback from an earlier position [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5597] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 5590] <... sendfile resumed>) = 1048576 [pid 5597] ftruncate(5, 33587195 [pid 5590] exit_group(0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5597] <... ftruncate resumed>) = 0 [pid 5590] <... exit_group resumed>) = ? [pid 5597] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5590] +++ exited with 0 +++ [pid 5597] <... open resumed>) = 6 [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5600 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5590, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- ./strace-static-x86_64: Process 5600 attached [pid 5597] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5600] chdir("./48") = 0 [pid 5597] <... open resumed>) = 7 [pid 5600] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5597] sendfile(6, 7, NULL, 281474978811909 [pid 5600] <... prctl resumed>) = 0 [pid 5600] setpgid(0, 0) = 0 [ 168.000709][ T5599] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 168.012292][ T5598] NILFS (loop2): recovery complete [pid 5600] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4997] umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5600] write(3, "1000", 4 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5600] <... write resumed>) = 4 [pid 4997] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5600] close(3 [pid 4997] <... openat resumed>) = 3 [pid 5600] <... close resumed>) = 0 [pid 4997] fstat(3, [pid 5600] symlink("/dev/binderfs", "./binderfs" [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5600] <... symlink resumed>) = 0 [pid 4997] getdents64(3, [pid 5600] memfd_create("syzkaller", 0 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5600] <... memfd_create resumed>) = 3 [pid 5598] <... mount resumed>) = 0 [pid 4997] umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5600] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5598] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5600] <... mmap resumed>) = 0x7f18ca796000 [pid 5598] <... openat resumed>) = 3 [pid 4997] lstat("./47/binderfs", [pid 5598] chdir("./file1" [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5598] <... chdir resumed>) = 0 [pid 4997] unlink("./47/binderfs" [pid 5598] ioctl(4, LOOP_CLR_FD [pid 4997] <... unlink resumed>) = 0 [pid 5598] <... ioctl resumed>) = 0 [pid 4997] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5598] close(4) = 0 [pid 5598] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5598] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5598] ftruncate(5, 33587195) = 0 [pid 5598] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5600] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5598] <... open resumed>) = 6 [pid 5598] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 168.073046][ T5601] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5598] sendfile(6, 7, NULL, 281474978811909 [pid 5600] <... write resumed>) = 2097152 [pid 5600] munmap(0x7f18ca796000, 2097152) = 0 [pid 5600] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5600] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5600] close(3) = 0 [pid 5600] mkdir("./file1", 0777) = 0 [ 168.171988][ T5600] loop1: detected capacity change from 0 to 4096 [ 168.254011][ T5600] NILFS (loop1): invalid segment: Checksum error in segment payload [ 168.262079][ T5600] NILFS (loop1): trying rollback from an earlier position [pid 5600] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./47/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./47/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./47/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./47/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./47") = 0 [pid 4997] mkdir("./48", 0777 [pid 5600] <... mount resumed>) = 0 [pid 5593] <... sendfile resumed>) = 1048576 [pid 4997] <... mkdir resumed>) = 0 [pid 5600] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5593] exit_group(0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5600] <... openat resumed>) = 3 [pid 5593] <... exit_group resumed>) = ? [pid 4997] <... openat resumed>) = 3 [pid 5600] chdir("./file1") = 0 [pid 5600] ioctl(4, LOOP_CLR_FD) = 0 [pid 5600] close(4) = 0 [pid 5600] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5593] +++ exited with 0 +++ [pid 5600] <... open resumed>) = 4 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5593, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5600] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5600] ftruncate(5, 33587195) = 0 [pid 4997] close(3 [pid 5600] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4997] <... close resumed>) = 0 [pid 5600] <... open resumed>) = 6 [pid 5001] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5600] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5600] <... open resumed>) = 7 [pid 5001] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5600] sendfile(6, 7, NULL, 281474978811909 [pid 5001] <... openat resumed>) = 3 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5603 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [ 168.395754][ T5600] NILFS (loop1): recovery complete [ 168.414413][ T5602] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5603 attached ) = -1 EINVAL (Invalid argument) [pid 5603] chdir("./48" [pid 5001] lstat("./48/binderfs", [pid 5603] <... chdir resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5603] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] unlink("./48/binderfs" [pid 5603] <... prctl resumed>) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 5603] setpgid(0, 0 [pid 5001] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5603] <... setpgid resumed>) = 0 [pid 5603] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5603] write(3, "1000", 4) = 4 [pid 5603] close(3) = 0 [pid 5603] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5603] memfd_create("syzkaller", 0) = 3 [pid 5603] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5594] <... sendfile resumed>) = 1048576 [pid 5594] exit_group(0) = ? [pid 5594] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5594, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5000] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5603] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... openat resumed>) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./49/binderfs") = 0 [pid 5000] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5603] <... write resumed>) = 2097152 [pid 5001] <... umount2 resumed>) = 0 [pid 5603] munmap(0x7f18ca796000, 2097152) = 0 [pid 5603] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5603] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5603] close(3) = 0 [pid 5603] mkdir("./file1", 0777) = 0 [pid 5001] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5603] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5001] lstat("./48/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./48/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./48/file1") = 0 [ 168.675704][ T5603] loop0: detected capacity change from 0 to 4096 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./48") = 0 [pid 5001] mkdir("./49", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5000] <... umount2 resumed>) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5604 [ 168.732030][ T5603] NILFS (loop0): invalid segment: Checksum error in segment payload [ 168.753334][ T5603] NILFS (loop0): trying rollback from an earlier position [pid 5000] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./49/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5604 attached [pid 5000] openat(AT_FDCWD, "./49/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5604] chdir("./49") = 0 [pid 5000] <... openat resumed>) = 4 [pid 5604] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5000] fstat(4, [pid 5604] setpgid(0, 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5604] <... setpgid resumed>) = 0 [pid 5603] <... mount resumed>) = 0 [pid 5000] getdents64(4, [pid 5603] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5603] chdir("./file1") = 0 [pid 5603] ioctl(4, LOOP_CLR_FD) = 0 [pid 5603] close(4) = 0 [pid 5603] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5603] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5603] ftruncate(5, 33587195) = 0 [pid 5603] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5603] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5604] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5603] <... open resumed>) = 7 [pid 5000] getdents64(4, [pid 5603] sendfile(6, 7, NULL, 281474978811909 [pid 5604] <... openat resumed>) = 3 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5604] write(3, "1000", 4 [pid 5000] close(4 [pid 5604] <... write resumed>) = 4 [pid 5000] <... close resumed>) = 0 [pid 5604] close(3 [pid 5000] rmdir("./49/file1" [pid 5604] <... close resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5604] symlink("/dev/binderfs", "./binderfs" [pid 5000] getdents64(3, [pid 5604] <... symlink resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5604] memfd_create("syzkaller", 0 [pid 5000] close(3 [pid 5604] <... memfd_create resumed>) = 3 [pid 5000] <... close resumed>) = 0 [pid 5604] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] rmdir("./49" [ 168.785311][ T5603] NILFS (loop0): recovery complete [ 168.803528][ T5605] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5604] <... mmap resumed>) = 0x7f18ca796000 [pid 5000] <... rmdir resumed>) = 0 [pid 5000] mkdir("./50", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5606 ./strace-static-x86_64: Process 5606 attached [pid 5606] chdir("./50") = 0 [pid 5606] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5606] setpgid(0, 0) = 0 [pid 5606] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5604] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5606] write(3, "1000", 4) = 4 [pid 5606] close(3) = 0 [pid 5606] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5606] memfd_create("syzkaller", 0) = 3 [pid 5604] <... write resumed>) = 2097152 [pid 5604] munmap(0x7f18ca796000, 2097152 [pid 5606] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5604] <... munmap resumed>) = 0 [pid 5604] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5604] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5606] <... mmap resumed>) = 0x7f18ca796000 [pid 5604] close(3) = 0 [pid 5604] mkdir("./file1", 0777) = 0 [ 168.975184][ T5604] loop4: detected capacity change from 0 to 4096 [pid 5604] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [ 169.040227][ T5604] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5606] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5606] munmap(0x7f18ca796000, 2097152 [pid 5597] <... sendfile resumed>) = 1048576 [pid 5606] <... munmap resumed>) = 0 [pid 5597] exit_group(0 [pid 5606] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5597] <... exit_group resumed>) = ? [pid 5606] <... openat resumed>) = 4 [pid 5597] +++ exited with 0 +++ [ 169.103118][ T5604] NILFS (loop4): trying rollback from an earlier position [pid 5606] ioctl(4, LOOP_SET_FD, 3 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5597, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- [pid 5598] <... sendfile resumed>) = 1048576 [pid 5606] <... ioctl resumed>) = 0 [pid 5606] close(3 [pid 5604] <... mount resumed>) = 0 [pid 5606] <... close resumed>) = 0 [pid 5598] exit_group(0 [pid 5606] mkdir("./file1", 0777) = 0 [pid 5604] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5598] <... exit_group resumed>) = ? [pid 5606] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5604] <... openat resumed>) = 3 [pid 5604] chdir("./file1" [pid 5598] +++ exited with 0 +++ [pid 5604] <... chdir resumed>) = 0 [pid 5002] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5604] ioctl(4, LOOP_CLR_FD [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5598, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5604] <... ioctl resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 5604] close(4 [pid 5002] <... openat resumed>) = 3 [pid 4999] <... restart_syscall resumed>) = 0 [pid 5604] <... close resumed>) = 0 [pid 5002] fstat(3, [pid 5604] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 4999] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5604] <... open resumed>) = 4 [pid 4999] fstat(3, [pid 5604] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, [pid 5604] <... open resumed>) = 5 [pid 5604] ftruncate(5, 33587195) = 0 [pid 5604] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5604] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5604] sendfile(6, 7, NULL, 281474978811909 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./49/binderfs", [pid 4999] lstat("./48/binderfs", [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./49/binderfs" [pid 4999] unlink("./48/binderfs" [pid 5002] <... unlink resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [ 169.168723][ T5606] loop3: detected capacity change from 0 to 4096 [ 169.169757][ T5604] NILFS (loop4): recovery complete [ 169.186404][ T5607] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 169.280981][ T5606] NILFS (loop3): invalid segment: Checksum error in segment payload [ 169.317269][ T5606] NILFS (loop3): trying rollback from an earlier position [pid 4999] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./49/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 169.398260][ T5606] NILFS (loop3): recovery complete [pid 5002] openat(AT_FDCWD, "./49/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, [pid 5606] <... mount resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5606] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5002] getdents64(4, [pid 4999] <... umount2 resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5606] <... openat resumed>) = 3 [pid 5002] getdents64(4, [pid 5606] chdir("./file1" [pid 5600] <... sendfile resumed>) = 1048576 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5606] <... chdir resumed>) = 0 [pid 5600] exit_group(0 [pid 5002] close(4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... close resumed>) = 0 [pid 5606] ioctl(4, LOOP_CLR_FD [pid 4999] lstat("./48/file1", [pid 5002] rmdir("./49/file1" [pid 5600] <... exit_group resumed>) = ? [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5606] <... ioctl resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5606] close(4 [pid 5600] +++ exited with 0 +++ [ 169.441747][ T5608] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5600, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5606] <... close resumed>) = 0 [pid 5002] getdents64(3, [pid 4999] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5606] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] close(3 [pid 4999] openat(AT_FDCWD, "./48/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... openat resumed>) = 4 [pid 5002] <... close resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] rmdir("./49" [pid 4999] fstat(4, [pid 4998] <... openat resumed>) = 3 [pid 4998] fstat(3, [pid 5606] <... open resumed>) = 4 [pid 5002] <... rmdir resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, [pid 5606] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] mkdir("./50", 0777 [pid 4999] getdents64(4, [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... mkdir resumed>) = 0 [pid 4999] getdents64(4, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5606] <... open resumed>) = 5 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] lstat("./48/binderfs", [pid 5606] ftruncate(5, 33587195 [pid 5002] <... openat resumed>) = 3 [pid 4999] close(4 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5606] <... ftruncate resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 4999] <... close resumed>) = 0 [pid 4998] unlink("./48/binderfs" [pid 5606] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] rmdir("./48/file1" [pid 5606] <... open resumed>) = 6 [pid 5002] close(3 [pid 4999] <... rmdir resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 5606] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5002] <... close resumed>) = 0 [pid 4999] getdents64(3, [pid 4998] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5606] <... open resumed>) = 7 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5606] sendfile(6, 7, NULL, 281474978811909 [pid 4999] close(3 [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5609 [pid 4999] <... close resumed>) = 0 ./strace-static-x86_64: Process 5609 attached [pid 4999] rmdir("./48" [pid 5609] chdir("./50" [pid 4999] <... rmdir resumed>) = 0 [pid 5609] <... chdir resumed>) = 0 [pid 4999] mkdir("./49", 0777 [pid 5609] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] <... mkdir resumed>) = 0 [pid 5609] <... prctl resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5609] setpgid(0, 0 [pid 4999] <... openat resumed>) = 3 [pid 5609] <... setpgid resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5609] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5609] <... openat resumed>) = 3 [pid 4999] close(3 [pid 5609] write(3, "1000", 4 [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5609] <... write resumed>) = 4 [pid 5609] close(3 [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5610 [pid 5609] <... close resumed>) = 0 [pid 5609] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5609] memfd_create("syzkaller", 0) = 3 [pid 5609] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 ./strace-static-x86_64: Process 5610 attached [pid 5610] chdir("./49") = 0 [pid 5610] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5610] setpgid(0, 0) = 0 [pid 5610] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5610] write(3, "1000", 4) = 4 [pid 5610] close(3) = 0 [pid 5610] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5610] memfd_create("syzkaller", 0) = 3 [pid 5610] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5609] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] <... umount2 resumed>) = 0 [pid 5610] <... mmap resumed>) = 0x7f18ca796000 [pid 4998] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./48/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./48/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./48/file1") = 0 [pid 4998] getdents64(3, [pid 5610] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./48" [pid 5609] <... write resumed>) = 2097152 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] mkdir("./49", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5611 ./strace-static-x86_64: Process 5611 attached [pid 5610] <... write resumed>) = 2097152 [pid 5609] munmap(0x7f18ca796000, 2097152 [pid 5611] chdir("./49" [pid 5610] munmap(0x7f18ca796000, 2097152 [pid 5609] <... munmap resumed>) = 0 [pid 5611] <... chdir resumed>) = 0 [pid 5610] <... munmap resumed>) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5611] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5610] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5609] <... openat resumed>) = 4 [pid 5611] <... prctl resumed>) = 0 [pid 5610] <... openat resumed>) = 4 [pid 5609] ioctl(4, LOOP_SET_FD, 3 [pid 5611] setpgid(0, 0 [pid 5610] ioctl(4, LOOP_SET_FD, 3 [pid 5603] <... sendfile resumed>) = 1048576 [pid 5611] <... setpgid resumed>) = 0 [pid 5603] exit_group(0) = ? [pid 5611] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5603] +++ exited with 0 +++ [pid 5609] <... ioctl resumed>) = 0 [pid 5609] close(3) = 0 [pid 5609] mkdir("./file1", 0777 [pid 5611] <... openat resumed>) = 3 [pid 5609] <... mkdir resumed>) = 0 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5603, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5611] write(3, "1000", 4 [pid 5609] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5611] <... write resumed>) = 4 [pid 5611] close(3) = 0 [pid 5611] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5611] memfd_create("syzkaller", 0) = 3 [pid 4997] umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5611] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5610] <... ioctl resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5611] <... mmap resumed>) = 0x7f18ca796000 [ 169.799142][ T5609] loop5: detected capacity change from 0 to 4096 [ 169.811369][ T5610] loop2: detected capacity change from 0 to 4096 [pid 5610] close(3 [pid 4997] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5610] <... close resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [pid 5610] mkdir("./file1", 0777 [pid 4997] fstat(3, [pid 5610] <... mkdir resumed>) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5610] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./48/binderfs") = 0 [pid 4997] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 169.850291][ T5609] NILFS (loop5): invalid segment: Checksum error in segment payload [ 169.861427][ T5609] NILFS (loop5): trying rollback from an earlier position [ 169.883114][ T5610] NILFS (loop2): invalid segment: Checksum error in segment payload [ 169.883133][ T5609] NILFS (loop5): recovery complete [pid 5611] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5609] <... mount resumed>) = 0 [pid 5609] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5609] chdir("./file1") = 0 [pid 5609] ioctl(4, LOOP_CLR_FD) = 0 [ 169.885013][ T5612] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.891147][ T5610] NILFS (loop2): trying rollback from an earlier position [pid 5609] close(4 [pid 5611] munmap(0x7f18ca796000, 2097152 [pid 5609] <... close resumed>) = 0 [pid 5611] <... munmap resumed>) = 0 [pid 5609] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5611] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5609] <... open resumed>) = 4 [pid 5609] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5609] ftruncate(5, 33587195) = 0 [pid 5609] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5609] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5609] sendfile(6, 7, NULL, 281474978811909 [pid 5611] <... openat resumed>) = 4 [ 169.944738][ T5610] NILFS (loop2): recovery complete [pid 5611] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5611] close(3) = 0 [pid 5611] mkdir("./file1", 0777) = 0 [ 169.971643][ T5611] loop1: detected capacity change from 0 to 4096 [ 170.007739][ T5613] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5611] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5610] <... mount resumed>) = 0 [pid 5610] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5610] chdir("./file1") = 0 [pid 5610] ioctl(4, LOOP_CLR_FD) = 0 [pid 5610] close(4) = 0 [pid 5610] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5610] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5610] ftruncate(5, 33587195) = 0 [pid 5610] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5610] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 170.013395][ T5611] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5610] sendfile(6, 7, NULL, 281474978811909 [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./48/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./48/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./48/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [ 170.117765][ T5611] NILFS (loop1): trying rollback from an earlier position [pid 4997] rmdir("./48/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./48") = 0 [pid 4997] mkdir("./49", 0777) = 0 [ 170.179663][ T5611] NILFS (loop1): recovery complete [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5611] <... mount resumed>) = 0 [pid 5611] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5615 [pid 5611] chdir("./file1") = 0 [pid 5611] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 5615 attached ) = 0 [pid 5615] chdir("./49" [pid 5611] close(4) = 0 [pid 5615] <... chdir resumed>) = 0 [pid 5611] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5615] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5611] <... open resumed>) = 4 [pid 5615] setpgid(0, 0 [pid 5611] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5615] <... setpgid resumed>) = 0 [pid 5611] <... open resumed>) = 5 [ 170.210303][ T5614] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5615] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5611] ftruncate(5, 33587195 [pid 5615] <... openat resumed>) = 3 [pid 5611] <... ftruncate resumed>) = 0 [pid 5615] write(3, "1000", 4 [pid 5611] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5615] <... write resumed>) = 4 [pid 5611] <... open resumed>) = 6 [pid 5615] close(3 [pid 5611] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5615] <... close resumed>) = 0 [pid 5611] <... open resumed>) = 7 [pid 5615] symlink("/dev/binderfs", "./binderfs" [pid 5611] sendfile(6, 7, NULL, 281474978811909 [pid 5615] <... symlink resumed>) = 0 [pid 5615] memfd_create("syzkaller", 0) = 3 [pid 5615] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5604] <... sendfile resumed>) = 1048576 [pid 5604] exit_group(0) = ? [pid 5604] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5604, si_uid=0, si_status=0, si_utime=0, si_stime=33 /* 0.33 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./49/binderfs") = 0 [pid 5001] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5615] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5615] munmap(0x7f18ca796000, 2097152) = 0 [pid 5615] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5615] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5615] close(3) = 0 [pid 5615] mkdir("./file1", 0777) = 0 [pid 5615] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5001] <... umount2 resumed>) = 0 [ 170.484330][ T5615] loop0: detected capacity change from 0 to 4096 [ 170.515526][ T5615] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5001] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./49/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./49/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 170.556316][ T5615] NILFS (loop0): trying rollback from an earlier position [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./49/file1") = 0 [pid 5606] <... sendfile resumed>) = 1048576 [pid 5001] getdents64(3, [pid 5615] <... mount resumed>) = 0 [pid 5615] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5606] exit_group(0 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5615] chdir("./file1" [pid 5606] <... exit_group resumed>) = ? [pid 5001] close(3 [pid 5615] <... chdir resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5615] ioctl(4, LOOP_CLR_FD [pid 5606] +++ exited with 0 +++ [pid 5001] rmdir("./49" [pid 5615] <... ioctl resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5606, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5615] close(4 [pid 5001] mkdir("./50", 0777 [pid 5615] <... close resumed>) = 0 [ 170.633170][ T5615] NILFS (loop0): recovery complete [ 170.643818][ T5616] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] <... mkdir resumed>) = 0 [pid 5615] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5615] <... open resumed>) = 4 [pid 5001] <... openat resumed>) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5615] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5000] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5615] <... open resumed>) = 5 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... openat resumed>) = 3 [pid 5615] ftruncate(5, 33587195 [pid 5000] fstat(3, [pid 5615] <... ftruncate resumed>) = 0 [pid 5001] close(3 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5615] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5001] <... close resumed>) = 0 [pid 5000] getdents64(3, [pid 5615] <... open resumed>) = 6 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5615] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5000] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5615] <... open resumed>) = 7 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5615] sendfile(6, 7, NULL, 281474978811909 [pid 5000] lstat("./50/binderfs", [pid 5001] <... clone resumed>, child_tidptr=0x555556f7b690) = 5617 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./50/binderfs") = 0 [pid 5000] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5617 attached [pid 5617] chdir("./50") = 0 [pid 5617] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5617] setpgid(0, 0) = 0 [pid 5617] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5617] write(3, "1000", 4) = 4 [pid 5617] close(3) = 0 [pid 5617] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5617] memfd_create("syzkaller", 0) = 3 [pid 5617] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5617] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... umount2 resumed>) = 0 [pid 5617] <... write resumed>) = 2097152 [pid 5617] munmap(0x7f18ca796000, 2097152 [pid 5000] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5617] <... munmap resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./50/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5617] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./50/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5609] <... sendfile resumed>) = 1048576 [pid 5617] <... openat resumed>) = 4 [pid 5000] <... openat resumed>) = 4 [pid 5609] exit_group(0 [pid 5617] ioctl(4, LOOP_SET_FD, 3 [pid 5609] <... exit_group resumed>) = ? [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./50/file1" [pid 5609] +++ exited with 0 +++ [pid 5000] <... rmdir resumed>) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5609, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./50") = 0 [pid 5617] <... ioctl resumed>) = 0 [pid 5610] <... sendfile resumed>) = 1048576 [pid 5002] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] mkdir("./51", 0777 [pid 5617] close(3 [pid 5610] exit_group(0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... mkdir resumed>) = 0 [pid 5617] <... close resumed>) = 0 [pid 5610] <... exit_group resumed>) = ? [pid 5002] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5617] mkdir("./file1", 0777 [pid 5610] +++ exited with 0 +++ [pid 5002] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 3 [pid 5617] <... mkdir resumed>) = 0 [pid 5002] fstat(3, [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5610, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 5617] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 170.972395][ T5617] loop4: detected capacity change from 0 to 4096 [pid 5002] getdents64(3, [pid 5000] close(3 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] <... close resumed>) = 0 [pid 4999] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] lstat("./50/binderfs", [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5618 [pid 4999] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5618 attached [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] fstat(3, [pid 5002] unlink("./50/binderfs" [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 4999] getdents64(3, [pid 5002] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./49/binderfs", [pid 5618] chdir("./51" [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5618] <... chdir resumed>) = 0 [pid 4999] unlink("./49/binderfs" [pid 5618] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] <... unlink resumed>) = 0 [pid 5618] <... prctl resumed>) = 0 [pid 4999] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5618] setpgid(0, 0) = 0 [ 171.032026][ T5617] NILFS (loop4): invalid segment: Checksum error in segment payload [ 171.048628][ T5617] NILFS (loop4): trying rollback from an earlier position [pid 5618] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5618] write(3, "1000", 4) = 4 [pid 5618] close(3) = 0 [pid 5618] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5618] memfd_create("syzkaller", 0) = 3 [pid 5618] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 171.121035][ T5617] NILFS (loop4): recovery complete [pid 5618] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5617] <... mount resumed>) = 0 [pid 5617] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5617] chdir("./file1") = 0 [pid 5617] ioctl(4, LOOP_CLR_FD) = 0 [pid 5617] close(4 [pid 4999] <... umount2 resumed>) = 0 [pid 5617] <... close resumed>) = 0 [pid 5617] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5618] <... write resumed>) = 2097152 [pid 4999] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5617] <... open resumed>) = 4 [ 171.178042][ T5619] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5617] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5617] ftruncate(5, 33587195) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5618] munmap(0x7f18ca796000, 2097152 [pid 5617] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4999] lstat("./49/file1", [pid 5617] <... open resumed>) = 6 [pid 5618] <... munmap resumed>) = 0 [pid 5617] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5618] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5617] <... open resumed>) = 7 [pid 5002] <... umount2 resumed>) = 0 [pid 4999] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5618] <... openat resumed>) = 4 [pid 5002] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./50/file1", [pid 5618] ioctl(4, LOOP_SET_FD, 3 [pid 5617] sendfile(6, 7, NULL, 281474978811909 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./50/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] openat(AT_FDCWD, "./49/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5618] <... ioctl resumed>) = 0 [pid 5002] rmdir("./50/file1" [pid 4999] <... openat resumed>) = 4 [pid 5618] close(3 [pid 5002] <... rmdir resumed>) = 0 [pid 4999] fstat(4, [pid 5618] <... close resumed>) = 0 [pid 5002] getdents64(3, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5618] mkdir("./file1", 0777 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] getdents64(4, [pid 5618] <... mkdir resumed>) = 0 [pid 5002] close(3 [pid 5618] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5002] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] rmdir("./50") = 0 [pid 4999] getdents64(4, [ 171.265569][ T5618] loop3: detected capacity change from 0 to 4096 [pid 5002] mkdir("./51", 0777 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4999] close(4 [pid 5002] <... openat resumed>) = 3 [pid 4999] <... close resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 4999] rmdir("./49/file1" [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 4999] <... rmdir resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5620 ./strace-static-x86_64: Process 5620 attached [pid 5620] chdir("./51") = 0 [pid 4999] getdents64(3, [pid 5620] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5620] setpgid(0, 0 [pid 4999] close(3 [pid 5620] <... setpgid resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5620] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] rmdir("./49" [pid 5620] <... openat resumed>) = 3 [pid 5620] write(3, "1000", 4 [pid 4999] <... rmdir resumed>) = 0 [pid 5620] <... write resumed>) = 4 [ 171.309731][ T5618] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 4999] mkdir("./50", 0777 [pid 5620] close(3 [pid 4999] <... mkdir resumed>) = 0 [pid 5620] <... close resumed>) = 0 [pid 5620] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5620] memfd_create("syzkaller", 0) = 3 [pid 5620] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5620] <... mmap resumed>) = 0x7f18ca796000 [pid 4999] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5621 ./strace-static-x86_64: Process 5621 attached [pid 5621] chdir("./50") = 0 [ 171.370005][ T5618] NILFS (loop3): trying rollback from an earlier position [pid 5621] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5621] setpgid(0, 0) = 0 [pid 5621] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5621] write(3, "1000", 4) = 4 [pid 5620] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5621] close(3) = 0 [pid 5621] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5621] memfd_create("syzkaller", 0) = 3 [pid 5621] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 171.443443][ T5618] NILFS (loop3): recovery complete [pid 5621] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5618] <... mount resumed>) = 0 [pid 5618] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5611] <... sendfile resumed>) = 1048576 [pid 5618] <... openat resumed>) = 3 [pid 5618] chdir("./file1" [pid 5611] exit_group(0 [pid 5618] <... chdir resumed>) = 0 [pid 5611] <... exit_group resumed>) = ? [pid 5618] ioctl(4, LOOP_CLR_FD [pid 5611] +++ exited with 0 +++ [pid 5618] <... ioctl resumed>) = 0 [pid 5618] close(4 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5611, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5620] <... write resumed>) = 2097152 [pid 5618] <... close resumed>) = 0 [pid 4998] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5620] munmap(0x7f18ca796000, 2097152 [pid 5618] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5620] <... munmap resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5620] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5618] <... open resumed>) = 4 [pid 4998] <... openat resumed>) = 3 [pid 5620] <... openat resumed>) = 4 [pid 5618] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] fstat(3, [pid 5620] ioctl(4, LOOP_SET_FD, 3 [pid 5618] <... open resumed>) = 5 [ 171.515047][ T5622] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5618] ftruncate(5, 33587195 [pid 4998] getdents64(3, [pid 5618] <... ftruncate resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5618] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4998] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5618] <... open resumed>) = 6 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5618] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4998] lstat("./49/binderfs", [pid 5618] <... open resumed>) = 7 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5618] sendfile(6, 7, NULL, 281474978811909 [pid 4998] unlink("./49/binderfs") = 0 [pid 4998] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5615] <... sendfile resumed>) = 1048576 [pid 5615] exit_group(0) = ? [pid 5620] <... ioctl resumed>) = 0 [pid 5615] +++ exited with 0 +++ [pid 5620] close(3 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5615, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5621] <... write resumed>) = 2097152 [pid 5620] <... close resumed>) = 0 [pid 4997] restart_syscall(<... resuming interrupted clone ...> [pid 5621] munmap(0x7f18ca796000, 2097152 [pid 5620] mkdir("./file1", 0777 [pid 4997] <... restart_syscall resumed>) = 0 [pid 5621] <... munmap resumed>) = 0 [pid 5620] <... mkdir resumed>) = 0 [ 171.567671][ T5620] loop5: detected capacity change from 0 to 4096 [pid 5621] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5620] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5621] <... openat resumed>) = 4 [pid 4997] umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5621] ioctl(4, LOOP_SET_FD, 3 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./49/binderfs") = 0 [pid 5621] <... ioctl resumed>) = 0 [pid 4997] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5621] close(3) = 0 [pid 5621] mkdir("./file1", 0777) = 0 [ 171.636014][ T5621] loop2: detected capacity change from 0 to 4096 [ 171.663593][ T5620] NILFS (loop5): invalid segment: Checksum error in segment payload [ 171.671839][ T5620] NILFS (loop5): trying rollback from an earlier position [pid 5621] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4997] <... umount2 resumed>) = 0 [ 171.700755][ T5621] NILFS (loop2): invalid segment: Checksum error in segment payload [ 171.734568][ T5620] NILFS (loop5): recovery complete [pid 4997] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5620] <... mount resumed>) = 0 [pid 5620] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5620] chdir("./file1") = 0 [pid 5620] ioctl(4, LOOP_CLR_FD [pid 4998] <... umount2 resumed>) = 0 [pid 5620] <... ioctl resumed>) = 0 [pid 5620] close(4 [pid 4998] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./49/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./49/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, [pid 5620] <... close resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5620] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [ 171.760464][ T5623] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.766239][ T5621] NILFS (loop2): trying rollback from an earlier position [pid 4997] lstat("./49/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5620] <... open resumed>) = 4 [pid 4997] umount2("./49/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5620] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5620] <... open resumed>) = 5 [pid 4998] getdents64(4, [pid 4997] openat(AT_FDCWD, "./49/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5620] ftruncate(5, 33587195 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] <... openat resumed>) = 4 [pid 5620] <... ftruncate resumed>) = 0 [pid 4997] fstat(4, [pid 5620] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5620] <... open resumed>) = 6 [pid 4997] getdents64(4, [pid 5620] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4998] getdents64(4, [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5620] <... open resumed>) = 7 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] getdents64(4, [pid 5620] sendfile(6, 7, NULL, 281474978811909 [pid 4998] close(4 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./49/file1" [pid 4998] <... close resumed>) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3 [pid 4998] rmdir("./49/file1" [pid 4997] <... close resumed>) = 0 [ 171.830242][ T5621] NILFS (loop2): recovery complete [pid 4998] <... rmdir resumed>) = 0 [pid 4997] rmdir("./49" [pid 4998] getdents64(3, [pid 4997] <... rmdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] mkdir("./50", 0777 [pid 5621] <... mount resumed>) = 0 [pid 4998] close(3 [pid 4997] <... mkdir resumed>) = 0 [pid 5621] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5621] <... openat resumed>) = 3 [pid 4998] <... close resumed>) = 0 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5621] chdir("./file1" [pid 4998] rmdir("./49" [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5621] <... chdir resumed>) = 0 [pid 4997] close(3 [pid 5621] ioctl(4, LOOP_CLR_FD [pid 4998] <... rmdir resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 5621] <... ioctl resumed>) = 0 [pid 4998] mkdir("./50", 0777 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5621] close(4 [pid 4998] <... mkdir resumed>) = 0 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5625 ./strace-static-x86_64: Process 5625 attached [pid 5621] <... close resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5621] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] <... openat resumed>) = 3 [ 171.875314][ T5624] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5625] chdir("./50" [pid 5621] <... open resumed>) = 4 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5625] <... chdir resumed>) = 0 [pid 5621] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5625] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5621] <... open resumed>) = 5 [pid 4998] close(3 [pid 5625] <... prctl resumed>) = 0 [pid 5621] ftruncate(5, 33587195 [pid 4998] <... close resumed>) = 0 [pid 5625] setpgid(0, 0 [pid 5621] <... ftruncate resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5625] <... setpgid resumed>) = 0 [pid 5621] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5625] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5621] <... open resumed>) = 6 [pid 5625] <... openat resumed>) = 3 [pid 5621] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5626 [pid 5625] write(3, "1000", 4 [pid 5621] <... open resumed>) = 7 [pid 5625] <... write resumed>) = 4 [pid 5621] sendfile(6, 7, NULL, 281474978811909 [pid 5625] close(3) = 0 [pid 5625] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5625] memfd_create("syzkaller", 0) = 3 [pid 5625] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 ./strace-static-x86_64: Process 5626 attached [pid 5626] chdir("./50") = 0 [pid 5626] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5626] setpgid(0, 0) = 0 [pid 5626] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5626] write(3, "1000", 4) = 4 [pid 5626] close(3) = 0 [pid 5626] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5626] memfd_create("syzkaller", 0) = 3 [pid 5626] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5625] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5626] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5625] <... write resumed>) = 2097152 [pid 5625] munmap(0x7f18ca796000, 2097152 [pid 5626] <... write resumed>) = 2097152 [pid 5626] munmap(0x7f18ca796000, 2097152 [pid 5625] <... munmap resumed>) = 0 [pid 5625] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5626] <... munmap resumed>) = 0 [pid 5625] <... openat resumed>) = 4 [pid 5626] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5625] ioctl(4, LOOP_SET_FD, 3 [pid 5626] <... openat resumed>) = 4 [pid 5626] ioctl(4, LOOP_SET_FD, 3 [pid 5625] <... ioctl resumed>) = 0 [pid 5625] close(3) = 0 [pid 5625] mkdir("./file1", 0777) = 0 [pid 5626] <... ioctl resumed>) = 0 [pid 5626] close(3 [pid 5617] <... sendfile resumed>) = 1048576 [pid 5626] <... close resumed>) = 0 [pid 5617] exit_group(0 [pid 5626] mkdir("./file1", 0777 [pid 5617] <... exit_group resumed>) = ? [pid 5625] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5617] +++ exited with 0 +++ [pid 5626] <... mkdir resumed>) = 0 [pid 5626] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5617, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5001] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 172.187613][ T5625] loop0: detected capacity change from 0 to 4096 [ 172.196386][ T5626] loop1: detected capacity change from 0 to 4096 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./50/binderfs") = 0 [ 172.231913][ T5625] NILFS (loop0): invalid segment: Checksum error in segment payload [ 172.252832][ T5625] NILFS (loop0): trying rollback from an earlier position [ 172.253880][ T5626] NILFS (loop1): invalid segment: Checksum error in segment payload [ 172.279893][ T5626] NILFS (loop1): trying rollback from an earlier position [ 172.339214][ T5625] NILFS (loop0): recovery complete [ 172.356593][ T5626] NILFS (loop1): recovery complete [pid 5001] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5625] <... mount resumed>) = 0 [pid 5625] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5001] <... umount2 resumed>) = 0 [pid 5625] chdir("./file1") = 0 [pid 5625] ioctl(4, LOOP_CLR_FD) = 0 [pid 5625] close(4) = 0 [pid 5625] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5626] <... mount resumed>) = 0 [pid 5626] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5625] <... open resumed>) = 4 [pid 5626] <... openat resumed>) = 3 [pid 5625] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5626] chdir("./file1") = 0 [pid 5625] <... open resumed>) = 5 [pid 5626] ioctl(4, LOOP_CLR_FD [pid 5625] ftruncate(5, 33587195 [pid 5626] <... ioctl resumed>) = 0 [pid 5625] <... ftruncate resumed>) = 0 [pid 5626] close(4 [pid 5625] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5626] <... close resumed>) = 0 [pid 5625] <... open resumed>) = 6 [pid 5626] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5625] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5626] <... open resumed>) = 4 [pid 5625] <... open resumed>) = 7 [pid 5001] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5626] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5625] sendfile(6, 7, NULL, 281474978811909 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5626] <... open resumed>) = 5 [ 172.382593][ T5627] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.415503][ T5628] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5626] ftruncate(5, 33587195) = 0 [pid 5626] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5626] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5626] sendfile(6, 7, NULL, 281474978811909 [pid 5001] lstat("./50/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./50/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./50/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./50") = 0 [pid 5001] mkdir("./51", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5629 ./strace-static-x86_64: Process 5629 attached [pid 5629] chdir("./51") = 0 [pid 5629] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5629] setpgid(0, 0) = 0 [pid 5629] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5629] write(3, "1000", 4) = 4 [pid 5629] close(3) = 0 [pid 5629] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5629] memfd_create("syzkaller", 0) = 3 [pid 5629] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5629] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5618] <... sendfile resumed>) = 1048576 [pid 5618] exit_group(0) = ? [pid 5618] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5618, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./51/binderfs") = 0 [pid 5000] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5629] <... write resumed>) = 2097152 [pid 5629] munmap(0x7f18ca796000, 2097152) = 0 [pid 5629] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5629] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5629] close(3) = 0 [pid 5629] mkdir("./file1", 0777) = 0 [pid 5621] <... sendfile resumed>) = 1048576 [pid 5629] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5621] exit_group(0) = ? [ 172.834343][ T5629] loop4: detected capacity change from 0 to 4096 [pid 5621] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5621, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./50/binderfs", [pid 5000] <... umount2 resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./51/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./51/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, [pid 4999] unlink("./50/binderfs" [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./51/file1") = 0 [pid 5000] getdents64(3, [pid 4999] <... unlink resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3 [pid 4999] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... close resumed>) = 0 [pid 5000] rmdir("./51") = 0 [pid 5000] mkdir("./52", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [ 172.917788][ T5629] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5630 ./strace-static-x86_64: Process 5630 attached [pid 5630] chdir("./52") = 0 [pid 5630] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5630] setpgid(0, 0) = 0 [pid 5630] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5630] write(3, "1000", 4) = 4 [pid 5630] close(3) = 0 [pid 5630] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5630] memfd_create("syzkaller", 0) = 3 [pid 5630] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5620] <... sendfile resumed>) = 1048576 [pid 5620] exit_group(0) = ? [pid 5620] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5620, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5002] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 172.983137][ T5629] NILFS (loop4): trying rollback from an earlier position [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./51/binderfs" [pid 5630] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... unlink resumed>) = 0 [ 173.055552][ T5629] NILFS (loop4): recovery complete [pid 5002] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5629] <... mount resumed>) = 0 [pid 5629] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5629] chdir("./file1" [pid 4999] <... umount2 resumed>) = 0 [pid 5629] <... chdir resumed>) = 0 [pid 4999] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5629] ioctl(4, LOOP_CLR_FD [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5629] <... ioctl resumed>) = 0 [pid 4999] lstat("./50/file1", [pid 5629] close(4) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5629] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5630] <... write resumed>) = 2097152 [pid 5629] <... open resumed>) = 4 [pid 4999] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5630] munmap(0x7f18ca796000, 2097152 [pid 5629] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5630] <... munmap resumed>) = 0 [pid 5630] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 4999] openat(AT_FDCWD, "./50/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5630] ioctl(4, LOOP_SET_FD, 3 [pid 5629] <... open resumed>) = 5 [pid 4999] <... openat resumed>) = 4 [pid 5629] ftruncate(5, 33587195 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5629] <... ftruncate resumed>) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5629] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5629] <... open resumed>) = 6 [pid 4999] close(4 [pid 5629] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4999] <... close resumed>) = 0 [ 173.096309][ T5631] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5629] <... open resumed>) = 7 [pid 4999] rmdir("./50/file1") = 0 [pid 5629] sendfile(6, 7, NULL, 281474978811909 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./50") = 0 [pid 4999] mkdir("./51", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5632 ./strace-static-x86_64: Process 5632 attached [pid 5632] chdir("./51" [pid 5630] <... ioctl resumed>) = 0 [pid 5630] close(3) = 0 [pid 5630] mkdir("./file1", 0777 [pid 5632] <... chdir resumed>) = 0 [pid 5632] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5630] <... mkdir resumed>) = 0 [pid 5632] <... prctl resumed>) = 0 [ 173.170801][ T5630] loop3: detected capacity change from 0 to 4096 [pid 5630] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5632] setpgid(0, 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5632] <... setpgid resumed>) = 0 [pid 5632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5632] write(3, "1000", 4 [pid 5002] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5632] <... write resumed>) = 4 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5632] close(3 [pid 5002] lstat("./51/file1", [pid 5632] <... close resumed>) = 0 [pid 5632] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5632] memfd_create("syzkaller", 0 [pid 5002] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5632] <... memfd_create resumed>) = 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5632] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] openat(AT_FDCWD, "./51/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5632] <... mmap resumed>) = 0x7f18ca796000 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5632] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./51/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./51") = 0 [pid 5002] mkdir("./52", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [ 173.264689][ T5630] NILFS (loop3): invalid segment: Checksum error in segment payload [ 173.279318][ T5630] NILFS (loop3): trying rollback from an earlier position [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5633 attached [pid 5633] chdir("./52" [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5633 [pid 5633] <... chdir resumed>) = 0 [pid 5633] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5633] setpgid(0, 0) = 0 [pid 5633] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5633] write(3, "1000", 4) = 4 [pid 5633] close(3) = 0 [pid 5633] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5633] memfd_create("syzkaller", 0 [pid 5632] <... write resumed>) = 2097152 [pid 5633] <... memfd_create resumed>) = 3 [pid 5632] munmap(0x7f18ca796000, 2097152) = 0 [pid 5633] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5632] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 173.375237][ T5630] NILFS (loop3): recovery complete [pid 5632] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5632] close(3 [pid 5630] <... mount resumed>) = 0 [pid 5630] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5630] chdir("./file1") = 0 [pid 5630] ioctl(4, LOOP_CLR_FD) = 0 [pid 5630] close(4) = 0 [pid 5630] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5632] <... close resumed>) = 0 [pid 5630] <... open resumed>) = 4 [pid 5632] mkdir("./file1", 0777 [pid 5630] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5630] ftruncate(5, 33587195 [pid 5632] <... mkdir resumed>) = 0 [pid 5630] <... ftruncate resumed>) = 0 [pid 5630] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5632] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5630] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5633] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5630] <... open resumed>) = 7 [ 173.404760][ T5632] loop2: detected capacity change from 0 to 4096 [ 173.436346][ T5634] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5630] sendfile(6, 7, NULL, 281474978811909 [pid 5633] <... write resumed>) = 2097152 [pid 5625] <... sendfile resumed>) = 1048576 [ 173.476756][ T5632] NILFS (loop2): invalid segment: Checksum error in segment payload [ 173.514578][ T5632] NILFS (loop2): trying rollback from an earlier position [pid 5625] exit_group(0) = ? [pid 5633] munmap(0x7f18ca796000, 2097152 [pid 5625] +++ exited with 0 +++ [pid 5633] <... munmap resumed>) = 0 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5625, si_uid=0, si_status=0, si_utime=0, si_stime=33 /* 0.33 s */} --- [pid 5633] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5633] ioctl(4, LOOP_SET_FD, 3 [pid 4997] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./50/binderfs") = 0 [pid 4997] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5626] <... sendfile resumed>) = 1048576 [pid 5626] exit_group(0) = ? [pid 5626] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5626, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5633] <... ioctl resumed>) = 0 [pid 5633] close(3) = 0 [pid 4998] umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5633] mkdir("./file1", 0777 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5633] <... mkdir resumed>) = 0 [ 173.575101][ T5633] loop5: detected capacity change from 0 to 4096 [ 173.579351][ T5632] NILFS (loop2): recovery complete [pid 4998] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5633] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5632] <... mount resumed>) = 0 [pid 5632] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4998] <... openat resumed>) = 3 [pid 5632] <... openat resumed>) = 3 [pid 4998] fstat(3, [pid 5632] chdir("./file1") = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5632] ioctl(4, LOOP_CLR_FD [pid 4998] getdents64(3, [pid 5632] <... ioctl resumed>) = 0 [pid 5632] close(4 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5632] <... close resumed>) = 0 [pid 4998] umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5632] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] lstat("./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./50/binderfs" [pid 5632] <... open resumed>) = 4 [pid 5632] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] <... unlink resumed>) = 0 [pid 4998] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5632] <... open resumed>) = 5 [pid 5632] ftruncate(5, 33587195) = 0 [pid 5632] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5632] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 173.632246][ T5635] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.651735][ T5633] NILFS (loop5): invalid segment: Checksum error in segment payload [ 173.664966][ T5633] NILFS (loop5): trying rollback from an earlier position [pid 5632] sendfile(6, 7, NULL, 281474978811909 [pid 5633] <... mount resumed>) = 0 [pid 5633] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [ 173.720183][ T5633] NILFS (loop5): recovery complete [pid 5633] chdir("./file1") = 0 [pid 5633] ioctl(4, LOOP_CLR_FD) = 0 [pid 5633] close(4) = 0 [pid 4997] <... umount2 resumed>) = 0 [pid 5633] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5633] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5633] ftruncate(5, 33587195) = 0 [pid 5633] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5633] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 173.750179][ T5636] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5633] sendfile(6, 7, NULL, 281474978811909 [pid 4997] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./50/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./50/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./50/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./50") = 0 [pid 4997] mkdir("./51", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4998] <... umount2 resumed>) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] close(3 [pid 4998] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] lstat("./50/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5637 [pid 4998] umount2("./50/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./50/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./50/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./50") = 0 [pid 4998] mkdir("./51", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5638 ./strace-static-x86_64: Process 5638 attached [pid 5638] chdir("./51") = 0 [pid 5638] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5638] setpgid(0, 0) = 0 [pid 5638] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5638] write(3, "1000", 4) = 4 [pid 5638] close(3) = 0 [pid 5638] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5638] memfd_create("syzkaller", 0) = 3 [pid 5638] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 ./strace-static-x86_64: Process 5637 attached [pid 5637] chdir("./51") = 0 [pid 5637] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5637] setpgid(0, 0) = 0 [pid 5637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5637] write(3, "1000", 4) = 4 [pid 5637] close(3) = 0 [pid 5638] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5637] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5637] memfd_create("syzkaller", 0) = 3 [pid 5637] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5637] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5638] <... write resumed>) = 2097152 [pid 5638] munmap(0x7f18ca796000, 2097152 [pid 5629] <... sendfile resumed>) = 1048576 [pid 5638] <... munmap resumed>) = 0 [pid 5637] munmap(0x7f18ca796000, 2097152 [pid 5629] exit_group(0 [pid 5638] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5637] <... munmap resumed>) = 0 [pid 5629] <... exit_group resumed>) = ? [pid 5638] <... openat resumed>) = 4 [pid 5637] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5629] +++ exited with 0 +++ [pid 5638] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5637] <... openat resumed>) = 4 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5629, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5637] ioctl(4, LOOP_SET_FD, 3 [pid 5001] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5638] close(3) = 0 [pid 5638] mkdir("./file1", 0777) = 0 [pid 5638] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5637] <... ioctl resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5637] close(3 [pid 5001] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5637] <... close resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5637] mkdir("./file1", 0777 [pid 5001] fstat(3, [pid 5637] <... mkdir resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, [pid 5637] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./51/binderfs") = 0 [ 174.183533][ T5638] loop1: detected capacity change from 0 to 4096 [ 174.191080][ T5637] loop0: detected capacity change from 0 to 4096 [ 174.208271][ T5638] NILFS (loop1): invalid segment: Checksum error in segment payload [ 174.245517][ T5637] NILFS (loop0): invalid segment: Checksum error in segment payload [ 174.249700][ T5638] NILFS (loop1): trying rollback from an earlier position [ 174.313222][ T5637] NILFS (loop0): trying rollback from an earlier position [ 174.347125][ T5638] NILFS (loop1): recovery complete [pid 5001] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5638] <... mount resumed>) = 0 [pid 5638] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5638] chdir("./file1") = 0 [pid 5638] ioctl(4, LOOP_CLR_FD) = 0 [pid 5638] close(4) = 0 [pid 5638] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5638] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5638] ftruncate(5, 33587195) = 0 [pid 5638] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5638] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5638] sendfile(6, 7, NULL, 281474978811909 [pid 5001] <... umount2 resumed>) = 0 [ 174.381146][ T5639] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.392924][ T5637] NILFS (loop0): recovery complete [pid 5637] <... mount resumed>) = 0 [pid 5001] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./51/file1", [pid 5637] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./51/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5637] <... openat resumed>) = 3 [pid 5001] close(4 [pid 5637] chdir("./file1" [pid 5001] <... close resumed>) = 0 [ 174.434417][ T5640] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5637] <... chdir resumed>) = 0 [pid 5001] rmdir("./51/file1" [pid 5637] ioctl(4, LOOP_CLR_FD [pid 5001] <... rmdir resumed>) = 0 [pid 5637] <... ioctl resumed>) = 0 [pid 5001] getdents64(3, [pid 5637] close(4 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5637] <... close resumed>) = 0 [pid 5001] close(3 [pid 5637] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./51" [pid 5637] <... open resumed>) = 4 [pid 5001] <... rmdir resumed>) = 0 [pid 5637] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5001] mkdir("./52", 0777 [pid 5637] <... open resumed>) = 5 [pid 5001] <... mkdir resumed>) = 0 [pid 5637] ftruncate(5, 33587195 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5637] <... ftruncate resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5637] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5637] <... open resumed>) = 6 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5637] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5630] <... sendfile resumed>) = 1048576 [pid 5001] close(3 [pid 5637] <... open resumed>) = 7 [pid 5630] exit_group(0 [pid 5001] <... close resumed>) = 0 [pid 5637] sendfile(6, 7, NULL, 281474978811909 [pid 5630] <... exit_group resumed>) = ? [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5641 [pid 5630] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5630, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 5000] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5641 attached ) = 3 [pid 5641] chdir("./52" [pid 5000] fstat(3, [pid 5641] <... chdir resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5641] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] getdents64(3, [pid 5641] <... prctl resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5641] setpgid(0, 0 [pid 5000] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5641] <... setpgid resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] lstat("./52/binderfs", [pid 5641] <... openat resumed>) = 3 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5641] write(3, "1000", 4 [pid 5000] unlink("./52/binderfs" [pid 5641] <... write resumed>) = 4 [pid 5000] <... unlink resumed>) = 0 [pid 5641] close(3 [pid 5000] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5641] <... close resumed>) = 0 [pid 5641] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5641] memfd_create("syzkaller", 0) = 3 [pid 5641] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5641] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5632] <... sendfile resumed>) = 1048576 [pid 5632] exit_group(0) = ? [pid 5632] +++ exited with 0 +++ [pid 5641] munmap(0x7f18ca796000, 2097152 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5632, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5641] <... munmap resumed>) = 0 [pid 5641] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4999] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5641] <... openat resumed>) = 4 [pid 5000] <... umount2 resumed>) = 0 [pid 5641] ioctl(4, LOOP_SET_FD, 3 [pid 4999] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... openat resumed>) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./51/binderfs", [pid 5641] <... ioctl resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5641] close(3 [pid 5000] lstat("./52/file1", [pid 4999] unlink("./51/binderfs") = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5641] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5641] mkdir("./file1", 0777 [pid 5000] openat(AT_FDCWD, "./52/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5641] <... mkdir resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 5641] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [ 174.795109][ T5641] loop4: detected capacity change from 0 to 4096 [pid 5000] close(4 [pid 5633] <... sendfile resumed>) = 1048576 [pid 5000] <... close resumed>) = 0 [pid 5633] exit_group(0 [pid 5000] rmdir("./52/file1" [pid 5633] <... exit_group resumed>) = ? [pid 5000] <... rmdir resumed>) = 0 [pid 5633] +++ exited with 0 +++ [pid 5000] getdents64(3, [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5633, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3 [pid 5002] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] rmdir("./52" [pid 5002] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] <... rmdir resumed>) = 0 [ 174.843169][ T5641] NILFS (loop4): invalid segment: Checksum error in segment payload [ 174.851501][ T5641] NILFS (loop4): trying rollback from an earlier position [pid 5002] fstat(3, [pid 5000] mkdir("./53", 0777 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 5000] <... mkdir resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5002] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... openat resumed>) = 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] ioctl(3, LOOP_CLR_FD [ 174.902547][ T5641] NILFS (loop4): recovery complete [pid 5002] lstat("./52/binderfs", [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./52/binderfs") = 0 [pid 5002] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] close(3 [pid 5641] <... mount resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5641] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5641] <... openat resumed>) = 3 [pid 5641] chdir("./file1") = 0 [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5643 [pid 5641] ioctl(4, LOOP_CLR_FD) = 0 [pid 5641] close(4) = 0 [pid 5641] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000./strace-static-x86_64: Process 5643 attached ) = 4 [pid 5643] chdir("./53" [pid 5641] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5643] <... chdir resumed>) = 0 [pid 5641] <... open resumed>) = 5 [pid 5643] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5641] ftruncate(5, 33587195 [pid 5643] <... prctl resumed>) = 0 [pid 5641] <... ftruncate resumed>) = 0 [pid 5643] setpgid(0, 0 [pid 5641] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5643] <... setpgid resumed>) = 0 [pid 5641] <... open resumed>) = 6 [pid 5643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5641] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5643] <... openat resumed>) = 3 [pid 5641] <... open resumed>) = 7 [pid 5643] write(3, "1000", 4 [ 174.943648][ T5642] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5641] sendfile(6, 7, NULL, 281474978811909 [pid 5643] <... write resumed>) = 4 [pid 5643] close(3 [pid 4999] <... umount2 resumed>) = 0 [pid 5643] <... close resumed>) = 0 [pid 4999] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5643] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5643] memfd_create("syzkaller", 0 [pid 4999] lstat("./51/file1", [pid 5643] <... memfd_create resumed>) = 3 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5643] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5643] <... mmap resumed>) = 0x7f18ca796000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./51/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./51/file1") = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 5643] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] rmdir("./51") = 0 [pid 4999] mkdir("./52", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5644 ./strace-static-x86_64: Process 5644 attached [pid 5644] chdir("./52") = 0 [pid 5644] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5644] setpgid(0, 0) = 0 [pid 5644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5644] write(3, "1000", 4) = 4 [pid 5644] close(3) = 0 [pid 5644] symlink("/dev/binderfs", "./binderfs" [pid 5643] <... write resumed>) = 2097152 [pid 5002] <... umount2 resumed>) = 0 [pid 5644] <... symlink resumed>) = 0 [pid 5002] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5644] memfd_create("syzkaller", 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5644] <... memfd_create resumed>) = 3 [pid 5002] lstat("./52/file1", [pid 5644] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5643] munmap(0x7f18ca796000, 2097152 [pid 5644] <... mmap resumed>) = 0x7f18ca796000 [pid 5002] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5643] <... munmap resumed>) = 0 [pid 5643] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5643] ioctl(4, LOOP_SET_FD, 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./52/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./52/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./52") = 0 [pid 5002] mkdir("./53", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5644] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5643] <... ioctl resumed>) = 0 [pid 5643] close(3) = 0 [pid 5643] mkdir("./file1", 0777) = 0 [ 175.218665][ T5643] loop3: detected capacity change from 0 to 4096 [pid 5643] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5645 ./strace-static-x86_64: Process 5645 attached [pid 5645] chdir("./53") = 0 [pid 5645] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5644] <... write resumed>) = 2097152 [pid 5645] <... prctl resumed>) = 0 [pid 5645] setpgid(0, 0) = 0 [pid 5644] munmap(0x7f18ca796000, 2097152) = 0 [pid 5645] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5645] write(3, "1000", 4) = 4 [pid 5645] close(3) = 0 [pid 5645] symlink("/dev/binderfs", "./binderfs" [pid 5644] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5645] <... symlink resumed>) = 0 [pid 5645] memfd_create("syzkaller", 0) = 3 [pid 5645] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 175.290637][ T5643] NILFS (loop3): invalid segment: Checksum error in segment payload [ 175.315814][ T5643] NILFS (loop3): trying rollback from an earlier position [pid 5644] <... openat resumed>) = 4 [pid 5638] <... sendfile resumed>) = 1048576 [pid 5644] ioctl(4, LOOP_SET_FD, 3 [pid 5638] exit_group(0) = ? [pid 5638] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5638, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 4998] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5644] <... ioctl resumed>) = 0 [pid 5644] close(3) = 0 [pid 5644] mkdir("./file1", 0777 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, [pid 5644] <... mkdir resumed>) = 0 [pid 5643] <... mount resumed>) = 0 [pid 5644] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5643] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5645] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5643] <... openat resumed>) = 3 [pid 4998] getdents64(3, [pid 5643] chdir("./file1" [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5643] <... chdir resumed>) = 0 [pid 4998] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5643] ioctl(4, LOOP_CLR_FD [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5643] <... ioctl resumed>) = 0 [pid 4998] lstat("./51/binderfs", [pid 5643] close(4 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5643] <... close resumed>) = 0 [pid 4998] unlink("./51/binderfs" [pid 5643] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] <... unlink resumed>) = 0 [pid 4998] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5643] <... open resumed>) = 4 [pid 5643] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5643] ftruncate(5, 33587195) = 0 [pid 5643] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [ 175.388594][ T5644] loop2: detected capacity change from 0 to 4096 [ 175.396153][ T5643] NILFS (loop3): recovery complete [ 175.412645][ T5646] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5643] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5643] sendfile(6, 7, NULL, 281474978811909 [pid 5645] <... write resumed>) = 2097152 [pid 5645] munmap(0x7f18ca796000, 2097152) = 0 [pid 5645] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5645] ioctl(4, LOOP_SET_FD, 3 [pid 5637] <... sendfile resumed>) = 1048576 [pid 5637] exit_group(0) = ? [pid 5637] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5637, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 4997] umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5645] <... ioctl resumed>) = 0 [ 175.464931][ T5644] NILFS (loop2): invalid segment: Checksum error in segment payload [ 175.492675][ T5644] NILFS (loop2): trying rollback from an earlier position [ 175.508489][ T5645] loop5: detected capacity change from 0 to 4096 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./51/binderfs" [pid 5645] close(3) = 0 [pid 4997] <... unlink resumed>) = 0 [pid 5645] mkdir("./file1", 0777) = 0 [pid 4997] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5645] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] <... umount2 resumed>) = 0 [ 175.568813][ T5645] NILFS (loop5): invalid segment: Checksum error in segment payload [ 175.577347][ T5644] NILFS (loop2): recovery complete [ 175.590621][ T5645] NILFS (loop5): trying rollback from an earlier position [pid 4998] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./51/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./51/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5644] <... mount resumed>) = 0 [pid 4998] fstat(4, [pid 5644] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5644] <... openat resumed>) = 3 [pid 4998] getdents64(4, [pid 5644] chdir("./file1" [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5644] <... chdir resumed>) = 0 [pid 4998] getdents64(4, [pid 5644] ioctl(4, LOOP_CLR_FD [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5644] <... ioctl resumed>) = 0 [pid 4998] close(4 [pid 5644] close(4 [pid 4998] <... close resumed>) = 0 [pid 5644] <... close resumed>) = 0 [pid 4998] rmdir("./51/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [ 175.633138][ T5647] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.634660][ T5645] NILFS (loop5): recovery complete [pid 4998] rmdir("./51" [pid 5644] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] mkdir("./52", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5645] <... mount resumed>) = 0 [pid 5644] <... open resumed>) = 4 [pid 4998] close(3 [pid 5645] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5644] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] <... close resumed>) = 0 [pid 5645] <... openat resumed>) = 3 [pid 5644] <... open resumed>) = 5 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] <... umount2 resumed>) = 0 [pid 5645] chdir("./file1" [pid 5644] ftruncate(5, 33587195 [pid 4997] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5645] <... chdir resumed>) = 0 [pid 5644] <... ftruncate resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5645] ioctl(4, LOOP_CLR_FD [pid 5644] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5649 [pid 4997] lstat("./51/file1", [pid 5645] <... ioctl resumed>) = 0 [pid 5644] <... open resumed>) = 6 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5645] close(4 [pid 5644] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4997] umount2("./51/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5645] <... close resumed>) = 0 [pid 5644] <... open resumed>) = 7 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5645] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5644] sendfile(6, 7, NULL, 281474978811909 [pid 4997] openat(AT_FDCWD, "./51/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5645] <... open resumed>) = 4 [pid 4997] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5649 attached [pid 5645] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4997] fstat(4, [pid 5645] <... open resumed>) = 5 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5645] ftruncate(5, 33587195 [pid 4997] getdents64(4, [pid 5645] <... ftruncate resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5645] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4997] getdents64(4, [pid 5649] chdir("./52" [pid 5645] <... open resumed>) = 6 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5645] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4997] close(4 [pid 5645] <... open resumed>) = 7 [pid 4997] <... close resumed>) = 0 [ 175.694043][ T5648] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5645] sendfile(6, 7, NULL, 281474978811909 [pid 4997] rmdir("./51/file1" [pid 5649] <... chdir resumed>) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 5649] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4997] getdents64(3, [pid 5649] <... prctl resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5649] setpgid(0, 0 [pid 4997] close(3 [pid 5649] <... setpgid resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 4997] rmdir("./51" [pid 5649] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4997] <... rmdir resumed>) = 0 [pid 4997] mkdir("./52", 0777 [pid 5649] <... openat resumed>) = 3 [pid 4997] <... mkdir resumed>) = 0 [pid 5649] write(3, "1000", 4 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5649] <... write resumed>) = 4 [pid 4997] <... openat resumed>) = 3 [pid 5649] close(3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5649] <... close resumed>) = 0 [pid 5649] symlink("/dev/binderfs", "./binderfs" [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5650 [pid 5649] <... symlink resumed>) = 0 [pid 5649] memfd_create("syzkaller", 0) = 3 ./strace-static-x86_64: Process 5650 attached [pid 5649] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5650] chdir("./52") = 0 [pid 5650] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5650] setpgid(0, 0) = 0 [pid 5650] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5650] write(3, "1000", 4) = 4 [pid 5650] close(3) = 0 [pid 5650] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5650] memfd_create("syzkaller", 0) = 3 [pid 5650] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5649] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5650] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5649] <... write resumed>) = 2097152 [pid 5649] munmap(0x7f18ca796000, 2097152) = 0 [pid 5649] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5649] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5649] close(3) = 0 [pid 5649] mkdir("./file1", 0777) = 0 [ 175.976760][ T5649] loop1: detected capacity change from 0 to 4096 [pid 5649] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5650] <... write resumed>) = 2097152 [pid 5650] munmap(0x7f18ca796000, 2097152) = 0 [pid 5650] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5650] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5650] close(3 [pid 5641] <... sendfile resumed>) = 1048576 [pid 5641] exit_group(0 [pid 5650] <... close resumed>) = 0 [pid 5641] <... exit_group resumed>) = ? [pid 5650] mkdir("./file1", 0777) = 0 [pid 5641] +++ exited with 0 +++ [pid 5650] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5641, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 176.031147][ T5649] NILFS (loop1): invalid segment: Checksum error in segment payload [ 176.053889][ T5650] loop0: detected capacity change from 0 to 4096 [ 176.057197][ T5649] NILFS (loop1): trying rollback from an earlier position [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./52/binderfs") = 0 [ 176.121024][ T5650] NILFS (loop0): invalid segment: Checksum error in segment payload [ 176.141811][ T5650] NILFS (loop0): trying rollback from an earlier position [ 176.153758][ T5649] NILFS (loop1): recovery complete [pid 5001] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5649] <... mount resumed>) = 0 [pid 5649] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5649] chdir("./file1") = 0 [pid 5649] ioctl(4, LOOP_CLR_FD) = 0 [pid 5649] close(4) = 0 [pid 5649] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5649] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5649] ftruncate(5, 33587195) = 0 [pid 5649] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [ 176.180125][ T5651] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5649] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 176.230383][ T5650] NILFS (loop0): recovery complete [pid 5649] sendfile(6, 7, NULL, 281474978811909 [pid 5650] <... mount resumed>) = 0 [pid 5650] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5650] chdir("./file1") = 0 [pid 5650] ioctl(4, LOOP_CLR_FD) = 0 [pid 5650] close(4) = 0 [pid 5650] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5650] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5650] ftruncate(5, 33587195) = 0 [pid 5650] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5650] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 176.270378][ T5652] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5650] sendfile(6, 7, NULL, 281474978811909 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./52/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./52/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./52/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./52") = 0 [pid 5001] mkdir("./53", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5653 ./strace-static-x86_64: Process 5653 attached [pid 5653] chdir("./53") = 0 [pid 5653] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5653] setpgid(0, 0) = 0 [pid 5653] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5653] write(3, "1000", 4) = 4 [pid 5653] close(3) = 0 [pid 5653] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5653] memfd_create("syzkaller", 0) = 3 [pid 5653] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5653] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5644] <... sendfile resumed>) = 1048576 [pid 5643] <... sendfile resumed>) = 1048576 [pid 5644] exit_group(0 [pid 5643] exit_group(0 [pid 5644] <... exit_group resumed>) = ? [pid 5643] <... exit_group resumed>) = ? [pid 5643] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5643, si_uid=0, si_status=0, si_utime=0, si_stime=34 /* 0.34 s */} --- [pid 5644] +++ exited with 0 +++ [pid 5000] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5644, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] unlink("./53/binderfs") = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5653] <... write resumed>) = 2097152 [pid 5653] munmap(0x7f18ca796000, 2097152 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5653] <... munmap resumed>) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./52/binderfs", [pid 5653] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./52/binderfs") = 0 [pid 5653] <... openat resumed>) = 4 [pid 4999] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5653] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5653] close(3) = 0 [pid 5653] mkdir("./file1", 0777) = 0 [ 176.700329][ T5653] loop4: detected capacity change from 0 to 4096 [ 176.756919][ T5653] NILFS (loop4): invalid segment: Checksum error in segment payload [ 176.803238][ T5653] NILFS (loop4): trying rollback from an earlier position [pid 5653] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./53/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./53/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... umount2 resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, [pid 4999] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... close resumed>) = 0 [pid 5000] rmdir("./53/file1" [pid 4999] lstat("./52/file1", [pid 5000] <... rmdir resumed>) = 0 [pid 5000] getdents64(3, [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5645] <... sendfile resumed>) = 1048576 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3 [pid 4999] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] rmdir("./53" [ 176.897399][ T5653] NILFS (loop4): recovery complete [pid 4999] openat(AT_FDCWD, "./52/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 5645] exit_group(0 [pid 5000] mkdir("./54", 0777 [pid 4999] fstat(4, [pid 5000] <... mkdir resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] getdents64(4, [pid 5000] <... openat resumed>) = 3 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] getdents64(4, [pid 5645] <... exit_group resumed>) = ? [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(3 [pid 4999] close(4 [pid 5653] <... mount resumed>) = 0 [pid 5645] +++ exited with 0 +++ [pid 5000] <... close resumed>) = 0 [pid 5653] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5653] chdir("./file1") = 0 [pid 5653] ioctl(4, LOOP_CLR_FD) = 0 [pid 5653] close(4) = 0 [pid 5653] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5645, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... close resumed>) = 0 [pid 5653] <... open resumed>) = 4 [pid 5653] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4999] rmdir("./52/file1" [pid 5653] <... open resumed>) = 5 [pid 5653] ftruncate(5, 33587195) = 0 [pid 4999] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5655 attached [pid 5653] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5655 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5653] <... open resumed>) = 6 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5653] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5002] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] close(3 [pid 5653] <... open resumed>) = 7 [pid 5002] <... openat resumed>) = 3 [pid 4999] <... close resumed>) = 0 [pid 5653] sendfile(6, 7, NULL, 281474978811909 [pid 5002] fstat(3, [pid 4999] rmdir("./52" [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... rmdir resumed>) = 0 [ 176.937148][ T5654] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] getdents64(3, [pid 4999] mkdir("./53", 0777 [pid 5655] chdir("./54" [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5655] <... chdir resumed>) = 0 [pid 5002] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... mkdir resumed>) = 0 [pid 5655] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5655] <... prctl resumed>) = 0 [pid 5655] setpgid(0, 0 [pid 5002] lstat("./53/binderfs", [pid 4999] <... openat resumed>) = 3 [pid 5655] <... setpgid resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5655] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] unlink("./53/binderfs" [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5655] <... openat resumed>) = 3 [pid 5002] <... unlink resumed>) = 0 [pid 4999] close(3 [pid 5655] write(3, "1000", 4 [pid 5002] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... close resumed>) = 0 [pid 5655] <... write resumed>) = 4 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5655] close(3) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5656 [pid 5655] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5655] memfd_create("syzkaller", 0) = 3 [pid 5655] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 ./strace-static-x86_64: Process 5656 attached [pid 5656] chdir("./53") = 0 [pid 5656] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5656] setpgid(0, 0) = 0 [pid 5656] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5655] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5656] write(3, "1000", 4) = 4 [pid 5656] close(3) = 0 [pid 5656] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5656] memfd_create("syzkaller", 0) = 3 [pid 5656] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5650] <... sendfile resumed>) = 1048576 [pid 5650] exit_group(0) = ? [pid 5650] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5650, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 4997] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, [pid 5656] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./52/binderfs") = 0 [pid 4997] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5655] <... write resumed>) = 2097152 [pid 5655] munmap(0x7f18ca796000, 2097152) = 0 [pid 5655] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5655] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5655] close(3) = 0 [pid 5655] mkdir("./file1", 0777) = 0 [pid 5655] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5656] <... write resumed>) = 2097152 [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 177.231101][ T5655] loop3: detected capacity change from 0 to 4096 [pid 5002] lstat("./53/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5656] munmap(0x7f18ca796000, 2097152 [pid 5002] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5656] <... munmap resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./53/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, [pid 5656] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5656] <... openat resumed>) = 4 [pid 5002] getdents64(4, [pid 5656] ioctl(4, LOOP_SET_FD, 3 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./53/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./53") = 0 [pid 5002] mkdir("./54", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 177.308403][ T5656] loop2: detected capacity change from 0 to 4096 [ 177.317835][ T5655] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5002] close(3) = 0 [pid 5656] <... ioctl resumed>) = 0 [pid 5656] close(3) = 0 [pid 5656] mkdir("./file1", 0777) = 0 [pid 5656] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5657 ./strace-static-x86_64: Process 5657 attached [pid 5649] <... sendfile resumed>) = 1048576 [pid 5657] chdir("./54" [pid 5649] exit_group(0 [pid 5657] <... chdir resumed>) = 0 [pid 5649] <... exit_group resumed>) = ? [pid 5657] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5649] +++ exited with 0 +++ [pid 4997] <... umount2 resumed>) = 0 [pid 5657] <... prctl resumed>) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5649, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5657] setpgid(0, 0 [pid 4997] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5657] <... setpgid resumed>) = 0 [ 177.350406][ T5655] NILFS (loop3): trying rollback from an earlier position [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5657] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5657] <... openat resumed>) = 3 [pid 4998] <... restart_syscall resumed>) = 0 [pid 5657] write(3, "1000", 4) = 4 [pid 4997] lstat("./52/file1", [pid 5657] close(3) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5657] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4998] umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5657] memfd_create("syzkaller", 0) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5657] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4998] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] openat(AT_FDCWD, "./52/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... openat resumed>) = 3 [pid 4997] <... openat resumed>) = 4 [pid 4998] fstat(3, [pid 4997] fstat(4, [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, [pid 4997] getdents64(4, [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [ 177.392735][ T5656] NILFS (loop2): invalid segment: Checksum error in segment payload [ 177.401000][ T5656] NILFS (loop2): trying rollback from an earlier position [ 177.411389][ T5655] NILFS (loop3): recovery complete [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] getdents64(4, [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] lstat("./52/binderfs", [pid 4997] close(4 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] <... close resumed>) = 0 [pid 4998] unlink("./52/binderfs" [pid 4997] rmdir("./52/file1" [pid 5656] <... mount resumed>) = 0 [pid 5655] <... mount resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 5656] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5655] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4998] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] getdents64(3, [pid 5656] <... openat resumed>) = 3 [pid 5655] <... openat resumed>) = 3 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5656] chdir("./file1" [pid 5655] chdir("./file1" [pid 4997] close(3) = 0 [pid 4997] rmdir("./52") = 0 [pid 4997] mkdir("./53", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5656] <... chdir resumed>) = 0 [pid 5655] <... chdir resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [pid 5656] ioctl(4, LOOP_CLR_FD [pid 5655] ioctl(4, LOOP_CLR_FD [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5656] <... ioctl resumed>) = 0 [pid 5655] <... ioctl resumed>) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5656] close(4 [pid 5655] close(4 [pid 4997] close(3 [pid 5657] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5656] <... close resumed>) = 0 [pid 5655] <... close resumed>) = 0 [pid 4997] <... close resumed>) = 0 [ 177.438804][ T5656] NILFS (loop2): recovery complete [ 177.444819][ T5658] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.454285][ T5659] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5656] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5655] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5660 [pid 5656] <... open resumed>) = 4 [pid 5655] <... open resumed>) = 4 [pid 5656] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5655] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5656] <... open resumed>) = 5 [pid 5655] <... open resumed>) = 5 ./strace-static-x86_64: Process 5660 attached [pid 5656] ftruncate(5, 33587195 [pid 5655] ftruncate(5, 33587195 [pid 5660] chdir("./53" [pid 5656] <... ftruncate resumed>) = 0 [pid 5655] <... ftruncate resumed>) = 0 [pid 5660] <... chdir resumed>) = 0 [pid 5656] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5655] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5660] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5656] <... open resumed>) = 6 [pid 5655] <... open resumed>) = 6 [pid 4998] <... umount2 resumed>) = 0 [pid 5660] <... prctl resumed>) = 0 [pid 5657] <... write resumed>) = 2097152 [pid 5656] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5655] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4998] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5660] setpgid(0, 0 [pid 5657] munmap(0x7f18ca796000, 2097152 [pid 5656] <... open resumed>) = 7 [pid 5655] <... open resumed>) = 7 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5660] <... setpgid resumed>) = 0 [pid 5660] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5657] <... munmap resumed>) = 0 [pid 5656] sendfile(6, 7, NULL, 281474978811909 [pid 5660] <... openat resumed>) = 3 [pid 5657] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5655] sendfile(6, 7, NULL, 281474978811909 [pid 4998] lstat("./52/file1", [pid 5660] write(3, "1000", 4) = 4 [pid 5660] close(3 [pid 5657] <... openat resumed>) = 4 [pid 5660] <... close resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5660] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5657] ioctl(4, LOOP_SET_FD, 3 [pid 4998] umount2("./52/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5660] memfd_create("syzkaller", 0) = 3 [pid 5660] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./52/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 5660] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5657] <... ioctl resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5657] close(3 [pid 4998] getdents64(4, [pid 5657] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5657] mkdir("./file1", 0777 [pid 4998] close(4 [pid 5657] <... mkdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [ 177.580515][ T5657] loop5: detected capacity change from 0 to 4096 [pid 5657] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] rmdir("./52/file1") = 0 [pid 4998] getdents64(3, [pid 5660] <... write resumed>) = 2097152 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5660] munmap(0x7f18ca796000, 2097152 [pid 4998] close(3) = 0 [pid 4998] rmdir("./52" [pid 5660] <... munmap resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5660] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4998] mkdir("./53", 0777 [pid 5660] <... openat resumed>) = 4 [pid 4998] <... mkdir resumed>) = 0 [pid 5660] ioctl(4, LOOP_SET_FD, 3 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5661 ./strace-static-x86_64: Process 5661 attached [pid 5661] chdir("./53") = 0 [pid 5661] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5661] setpgid(0, 0) = 0 [pid 5661] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5661] write(3, "1000", 4) = 4 [pid 5661] close(3) = 0 [pid 5661] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5661] memfd_create("syzkaller", 0) = 3 [pid 5661] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5660] <... ioctl resumed>) = 0 [pid 5660] close(3) = 0 [pid 5660] mkdir("./file1", 0777) = 0 [ 177.675211][ T5657] NILFS (loop5): invalid segment: Checksum error in segment payload [ 177.676575][ T5660] loop0: detected capacity change from 0 to 4096 [ 177.705680][ T5657] NILFS (loop5): trying rollback from an earlier position [pid 5660] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5661] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5657] <... mount resumed>) = 0 [ 177.759855][ T5657] NILFS (loop5): recovery complete [ 177.767368][ T5660] NILFS (loop0): invalid segment: Checksum error in segment payload [ 177.792436][ T5662] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5657] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5657] chdir("./file1") = 0 [pid 5657] ioctl(4, LOOP_CLR_FD) = 0 [pid 5657] close(4) = 0 [pid 5657] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5657] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5657] ftruncate(5, 33587195) = 0 [pid 5657] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5657] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 177.809874][ T5660] NILFS (loop0): trying rollback from an earlier position [pid 5657] sendfile(6, 7, NULL, 281474978811909 [pid 5661] <... write resumed>) = 2097152 [pid 5661] munmap(0x7f18ca796000, 2097152) = 0 [pid 5661] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5661] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5661] close(3) = 0 [pid 5661] mkdir("./file1", 0777) = 0 [ 177.899503][ T5661] loop1: detected capacity change from 0 to 4096 [ 177.922089][ T5660] NILFS (loop0): recovery complete [pid 5661] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5653] <... sendfile resumed>) = 1048576 [pid 5660] <... mount resumed>) = 0 [pid 5653] exit_group(0 [pid 5660] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5653] <... exit_group resumed>) = ? [pid 5660] <... openat resumed>) = 3 [pid 5660] chdir("./file1") = 0 [pid 5653] +++ exited with 0 +++ [pid 5660] ioctl(4, LOOP_CLR_FD [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5653, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5660] <... ioctl resumed>) = 0 [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5660] close(4 [pid 5001] <... restart_syscall resumed>) = 0 [pid 5660] <... close resumed>) = 0 [pid 5660] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5001] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5660] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5660] <... open resumed>) = 5 [ 177.980905][ T5661] NILFS (loop1): invalid segment: Checksum error in segment payload [ 177.993140][ T5663] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.006829][ T5661] NILFS (loop1): trying rollback from an earlier position [pid 5001] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5660] ftruncate(5, 33587195 [pid 5001] <... openat resumed>) = 3 [pid 5660] <... ftruncate resumed>) = 0 [pid 5001] fstat(3, [pid 5660] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5660] <... open resumed>) = 6 [pid 5001] getdents64(3, [pid 5660] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5660] <... open resumed>) = 7 [pid 5001] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5660] sendfile(6, 7, NULL, 281474978811909 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./53/binderfs") = 0 [ 178.078276][ T5661] NILFS (loop1): recovery complete [pid 5001] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5661] <... mount resumed>) = 0 [pid 5661] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5661] chdir("./file1") = 0 [pid 5661] ioctl(4, LOOP_CLR_FD) = 0 [pid 5661] close(4) = 0 [pid 5661] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5661] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5661] ftruncate(5, 33587195) = 0 [pid 5661] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5661] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 178.128566][ T5664] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5661] sendfile(6, 7, NULL, 281474978811909 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./53/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./53/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./53/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./53") = 0 [pid 5001] mkdir("./54", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5665 ./strace-static-x86_64: Process 5665 attached [pid 5665] chdir("./54") = 0 [pid 5665] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5665] setpgid(0, 0) = 0 [pid 5665] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5665] write(3, "1000", 4) = 4 [pid 5665] close(3) = 0 [pid 5665] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5665] memfd_create("syzkaller", 0) = 3 [pid 5665] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5665] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5665] munmap(0x7f18ca796000, 2097152) = 0 [pid 5665] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5665] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5665] close(3) = 0 [pid 5665] mkdir("./file1", 0777) = 0 [ 178.542020][ T5665] loop4: detected capacity change from 0 to 4096 [ 178.611862][ T5665] NILFS (loop4): invalid segment: Checksum error in segment payload [ 178.649630][ T5665] NILFS (loop4): trying rollback from an earlier position [pid 5665] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5655] <... sendfile resumed>) = 1048576 [pid 5655] exit_group(0) = ? [pid 5655] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5655, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [ 178.695550][ T5665] NILFS (loop4): recovery complete [pid 5000] umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./54/binderfs") = 0 [pid 5000] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5665] <... mount resumed>) = 0 [pid 5665] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5665] chdir("./file1") = 0 [pid 5665] ioctl(4, LOOP_CLR_FD) = 0 [ 178.750648][ T5666] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5665] close(4) = 0 [pid 5657] <... sendfile resumed>) = 1048576 [pid 5656] <... sendfile resumed>) = 1048576 [pid 5657] exit_group(0) = ? [pid 5657] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5657, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5665] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5002] umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./54/binderfs", [pid 5665] <... open resumed>) = 4 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./54/binderfs" [pid 5665] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] <... unlink resumed>) = 0 [pid 5002] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5665] <... open resumed>) = 5 [pid 5665] ftruncate(5, 33587195 [pid 5656] exit_group(0 [pid 5665] <... ftruncate resumed>) = 0 [pid 5656] <... exit_group resumed>) = ? [pid 5665] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5665] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5665] sendfile(6, 7, NULL, 281474978811909 [pid 5656] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5656, si_uid=0, si_status=0, si_utime=0, si_stime=34 /* 0.34 s */} --- [pid 4999] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./53/binderfs") = 0 [pid 4999] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./54/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./54/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./54/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./54") = 0 [pid 5000] mkdir("./55", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5667 ./strace-static-x86_64: Process 5667 attached [pid 5667] chdir("./55") = 0 [pid 5667] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5667] setpgid(0, 0) = 0 [pid 5667] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5667] write(3, "1000", 4) = 4 [pid 5667] close(3) = 0 [pid 5667] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5667] memfd_create("syzkaller", 0) = 3 [pid 5667] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./54/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./54/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, [pid 5667] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, [pid 4999] <... umount2 resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] close(4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./54/file1" [pid 4999] lstat("./53/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... rmdir resumed>) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./54" [pid 4999] openat(AT_FDCWD, "./53/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... rmdir resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 5002] mkdir("./55", 0777 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 5002] <... mkdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] <... openat resumed>) = 3 [pid 4999] close(4 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 4999] <... close resumed>) = 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] rmdir("./53/file1" [pid 5002] close(3 [pid 4999] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, [pid 5002] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./53") = 0 [pid 4999] mkdir("./54", 0777 [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5668 [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 ./strace-static-x86_64: Process 5668 attached [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5668] chdir("./55" [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5669 [pid 5668] <... chdir resumed>) = 0 [pid 5668] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5668] setpgid(0, 0) = 0 [pid 5668] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5669 attached ) = 3 [pid 5669] chdir("./54" [pid 5668] write(3, "1000", 4 [pid 5669] <... chdir resumed>) = 0 [pid 5668] <... write resumed>) = 4 [pid 5669] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5668] close(3 [pid 5669] <... prctl resumed>) = 0 [pid 5668] <... close resumed>) = 0 [pid 5669] setpgid(0, 0 [pid 5668] symlink("/dev/binderfs", "./binderfs" [pid 5667] <... write resumed>) = 2097152 [pid 5669] <... setpgid resumed>) = 0 [pid 5669] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5668] <... symlink resumed>) = 0 [pid 5669] <... openat resumed>) = 3 [pid 5669] write(3, "1000", 4 [pid 5668] memfd_create("syzkaller", 0 [pid 5669] <... write resumed>) = 4 [pid 5668] <... memfd_create resumed>) = 3 [pid 5669] close(3 [pid 5668] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5669] <... close resumed>) = 0 [pid 5668] <... mmap resumed>) = 0x7f18ca796000 [pid 5669] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5669] memfd_create("syzkaller", 0) = 3 [pid 5669] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5667] munmap(0x7f18ca796000, 2097152) = 0 [pid 5667] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5667] ioctl(4, LOOP_SET_FD, 3 [pid 5668] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5660] <... sendfile resumed>) = 1048576 [pid 5660] exit_group(0) = ? [pid 5667] <... ioctl resumed>) = 0 [pid 5669] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5667] close(3) = 0 [pid 5667] mkdir("./file1", 0777) = 0 [pid 5667] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5660] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5660, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 4997] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4997] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 179.198266][ T5667] loop3: detected capacity change from 0 to 4096 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./53/binderfs") = 0 [pid 4997] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5669] <... write resumed>) = 2097152 [pid 5669] munmap(0x7f18ca796000, 2097152 [pid 5668] <... write resumed>) = 2097152 [pid 5661] <... sendfile resumed>) = 1048576 [pid 5669] <... munmap resumed>) = 0 [pid 5668] munmap(0x7f18ca796000, 2097152 [pid 5661] exit_group(0 [pid 5669] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5668] <... munmap resumed>) = 0 [pid 5661] <... exit_group resumed>) = ? [pid 5669] <... openat resumed>) = 4 [pid 5668] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5661] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5661, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 5669] ioctl(4, LOOP_SET_FD, 3 [ 179.256535][ T5667] NILFS (loop3): invalid segment: Checksum error in segment payload [ 179.285359][ T5667] NILFS (loop3): trying rollback from an earlier position [pid 5668] <... openat resumed>) = 4 [pid 5668] ioctl(4, LOOP_SET_FD, 3 [pid 4998] umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5668] <... ioctl resumed>) = 0 [pid 5668] close(3) = 0 [pid 5669] <... ioctl resumed>) = 0 [pid 5668] mkdir("./file1", 0777 [pid 5669] close(3 [pid 5668] <... mkdir resumed>) = 0 [pid 5669] <... close resumed>) = 0 [pid 5669] mkdir("./file1", 0777) = 0 [pid 5669] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, [pid 5667] <... mount resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5668] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5667] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5667] chdir("./file1") = 0 [pid 5667] ioctl(4, LOOP_CLR_FD) = 0 [pid 5667] close(4) = 0 [pid 5667] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./53/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./53/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 179.312762][ T5669] loop2: detected capacity change from 0 to 4096 [ 179.320087][ T5668] loop5: detected capacity change from 0 to 4096 [ 179.320895][ T5667] NILFS (loop3): recovery complete [ 179.346509][ T5670] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] getdents64(4, [pid 4998] lstat("./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5667] <... open resumed>) = 4 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5667] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] unlink("./53/binderfs" [pid 5667] <... open resumed>) = 5 [pid 4997] getdents64(4, [pid 5667] ftruncate(5, 33587195 [pid 4998] <... unlink resumed>) = 0 [pid 5667] <... ftruncate resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5667] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4998] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5667] <... open resumed>) = 6 [pid 4997] close(4 [pid 5667] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4997] <... close resumed>) = 0 [ 179.379073][ T5669] NILFS (loop2): invalid segment: Checksum error in segment payload [ 179.403959][ T5668] NILFS (loop5): invalid segment: Checksum error in segment payload [ 179.418874][ T5668] NILFS (loop5): trying rollback from an earlier position [pid 5667] <... open resumed>) = 7 [pid 4997] rmdir("./53/file1" [pid 5667] sendfile(6, 7, NULL, 281474978811909 [pid 4997] <... rmdir resumed>) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./53") = 0 [pid 4997] mkdir("./54", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5671 ./strace-static-x86_64: Process 5671 attached [pid 5671] chdir("./54") = 0 [pid 5671] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5671] setpgid(0, 0) = 0 [pid 5671] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5671] write(3, "1000", 4) = 4 [pid 5671] close(3) = 0 [pid 5671] symlink("/dev/binderfs", "./binderfs") = 0 [ 179.437332][ T5669] NILFS (loop2): trying rollback from an earlier position [ 179.459282][ T5669] NILFS (loop2): recovery complete [pid 5669] <... mount resumed>) = 0 [pid 5671] memfd_create("syzkaller", 0) = 3 [pid 5671] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5669] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5669] chdir("./file1") = 0 [pid 5669] ioctl(4, LOOP_CLR_FD) = 0 [pid 5669] close(4) = 0 [pid 5669] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5669] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5669] ftruncate(5, 33587195) = 0 [pid 5669] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5669] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 179.490784][ T5672] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 179.522615][ T5668] NILFS (loop5): recovery complete [pid 5669] sendfile(6, 7, NULL, 281474978811909 [pid 5671] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5668] <... mount resumed>) = 0 [pid 5668] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5668] chdir("./file1") = 0 [pid 5668] ioctl(4, LOOP_CLR_FD) = 0 [pid 5668] close(4) = 0 [pid 5668] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5668] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5668] ftruncate(5, 33587195 [pid 4998] <... umount2 resumed>) = 0 [pid 5668] <... ftruncate resumed>) = 0 [pid 5668] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5668] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4998] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5668] <... open resumed>) = 7 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5668] sendfile(6, 7, NULL, 281474978811909 [pid 4998] lstat("./53/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 179.613885][ T5673] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] umount2("./53/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./53/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./53/file1" [pid 5671] <... write resumed>) = 2097152 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./53") = 0 [pid 5671] munmap(0x7f18ca796000, 2097152) = 0 [pid 4998] mkdir("./54", 0777) = 0 [pid 5671] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5671] ioctl(4, LOOP_SET_FD, 3 [pid 4998] <... openat resumed>) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 5671] <... ioctl resumed>) = 0 [pid 5671] close(3) = 0 [pid 5671] mkdir("./file1", 0777) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5671] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, ""./strace-static-x86_64: Process 5674 attached [pid 5674] chdir("./54" [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5674 [pid 5674] <... chdir resumed>) = 0 [pid 5674] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5674] setpgid(0, 0) = 0 [ 179.730022][ T5671] loop0: detected capacity change from 0 to 4096 [pid 5674] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5674] write(3, "1000", 4) = 4 [pid 5674] close(3) = 0 [pid 5674] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5674] memfd_create("syzkaller", 0) = 3 [pid 5674] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 179.825546][ T5671] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5674] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5665] <... sendfile resumed>) = 1048576 [pid 5665] exit_group(0) = ? [pid 5665] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5665, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=24 /* 0.24 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 179.877982][ T5671] NILFS (loop0): trying rollback from an earlier position [ 179.898246][ T5671] NILFS (loop0): recovery complete [pid 5001] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5671] <... mount resumed>) = 0 [pid 5001] fstat(3, [pid 5674] <... write resumed>) = 2097152 [pid 5671] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5674] munmap(0x7f18ca796000, 2097152 [pid 5671] <... openat resumed>) = 3 [pid 5001] getdents64(3, [pid 5674] <... munmap resumed>) = 0 [pid 5671] chdir("./file1" [pid 5674] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5671] <... chdir resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5674] <... openat resumed>) = 4 [pid 5671] ioctl(4, LOOP_CLR_FD [pid 5674] ioctl(4, LOOP_SET_FD, 3 [pid 5671] <... ioctl resumed>) = 0 [pid 5674] <... ioctl resumed>) = 0 [pid 5671] close(4 [pid 5001] umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5671] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5671] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5001] lstat("./54/binderfs", [pid 5671] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5674] close(3 [pid 5671] ftruncate(5, 33587195 [pid 5674] <... close resumed>) = 0 [pid 5671] <... ftruncate resumed>) = 0 [pid 5674] mkdir("./file1", 0777 [pid 5671] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5674] <... mkdir resumed>) = 0 [pid 5671] <... open resumed>) = 6 [pid 5671] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5674] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5671] <... open resumed>) = 7 [ 179.942528][ T5675] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 179.975913][ T5674] loop1: detected capacity change from 0 to 4096 [pid 5001] unlink("./54/binderfs" [pid 5671] sendfile(6, 7, NULL, 281474978811909 [pid 5001] <... unlink resumed>) = 0 [ 180.059967][ T5674] NILFS (loop1): invalid segment: Checksum error in segment payload [ 180.108154][ T5674] NILFS (loop1): trying rollback from an earlier position [pid 5001] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5001] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./54/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./54/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./54/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./54") = 0 [ 180.206484][ T5674] NILFS (loop1): recovery complete [pid 5001] mkdir("./55", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5677 ./strace-static-x86_64: Process 5677 attached [pid 5674] <... mount resumed>) = 0 [pid 5674] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5674] chdir("./file1") = 0 [pid 5674] ioctl(4, LOOP_CLR_FD) = 0 [pid 5674] close(4) = 0 [pid 5674] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5674] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5674] ftruncate(5, 33587195 [pid 5677] chdir("./55" [pid 5674] <... ftruncate resumed>) = 0 [pid 5677] <... chdir resumed>) = 0 [pid 5674] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5677] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5674] <... open resumed>) = 6 [pid 5677] <... prctl resumed>) = 0 [pid 5674] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5677] setpgid(0, 0 [pid 5674] <... open resumed>) = 7 [pid 5677] <... setpgid resumed>) = 0 [pid 5674] sendfile(6, 7, NULL, 281474978811909 [pid 5677] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 180.243044][ T5676] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5677] write(3, "1000", 4) = 4 [pid 5677] close(3) = 0 [pid 5677] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5677] memfd_create("syzkaller", 0) = 3 [pid 5677] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5677] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5667] <... sendfile resumed>) = 1048576 [pid 5667] exit_group(0) = ? [pid 5667] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5667, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./55/binderfs") = 0 [pid 5677] <... write resumed>) = 2097152 [pid 5000] umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5677] munmap(0x7f18ca796000, 2097152) = 0 [pid 5677] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5677] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5677] close(3) = 0 [pid 5677] mkdir("./file1", 0777) = 0 [ 180.534273][ T5677] loop4: detected capacity change from 0 to 4096 [pid 5668] <... sendfile resumed>) = 1048576 [pid 5677] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5668] exit_group(0) = ? [pid 5668] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5668, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- [pid 5002] umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./55/binderfs") = 0 [pid 5002] umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5669] <... sendfile resumed>) = 1048576 [pid 5669] exit_group(0) = ? [pid 5669] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5669, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 4999] umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 180.610997][ T5677] NILFS (loop4): invalid segment: Checksum error in segment payload [ 180.636473][ T5677] NILFS (loop4): trying rollback from an earlier position [pid 4999] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./54/binderfs") = 0 [ 180.707758][ T5677] NILFS (loop4): recovery complete [pid 4999] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5677] <... mount resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5677] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5677] chdir("./file1") = 0 [pid 5677] ioctl(4, LOOP_CLR_FD) = 0 [pid 5677] close(4) = 0 [pid 5677] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5677] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5677] ftruncate(5, 33587195) = 0 [pid 5677] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5677] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5677] sendfile(6, 7, NULL, 281474978811909 [pid 5000] umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./55/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 180.752189][ T5678] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./55/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./55/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./55" [pid 5002] <... umount2 resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5000] mkdir("./56", 0777) = 0 [pid 5002] umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... openat resumed>) = 3 [pid 5002] lstat("./55/file1", [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] close(3 [pid 5002] openat(AT_FDCWD, "./55/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, [pid 5000] <... close resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./55/file1") = 0 [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5679 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./55") = 0 [pid 5002] mkdir("./56", 0777) = 0 ./strace-static-x86_64: Process 5679 attached [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4999] <... umount2 resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 5679] chdir("./56" [pid 5002] <... close resumed>) = 0 [pid 4999] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5679] <... chdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5680 [pid 5679] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] lstat("./54/file1", [pid 5679] <... prctl resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5680 attached [pid 5679] setpgid(0, 0 [pid 4999] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5679] <... setpgid resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5679] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5680] chdir("./56" [pid 4999] openat(AT_FDCWD, "./54/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5679] <... openat resumed>) = 3 [pid 4999] <... openat resumed>) = 4 [pid 5679] write(3, "1000", 4 [pid 5680] <... chdir resumed>) = 0 [pid 5679] <... write resumed>) = 4 [pid 4999] fstat(4, [pid 5680] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5679] close(3 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5679] <... close resumed>) = 0 [pid 5680] <... prctl resumed>) = 0 [pid 5679] symlink("/dev/binderfs", "./binderfs" [pid 4999] getdents64(4, [pid 5680] setpgid(0, 0 [pid 5679] <... symlink resumed>) = 0 [pid 5680] <... setpgid resumed>) = 0 [pid 5679] memfd_create("syzkaller", 0 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5680] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5679] <... memfd_create resumed>) = 3 [pid 4999] getdents64(4, [pid 5679] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5680] <... openat resumed>) = 3 [pid 5679] <... mmap resumed>) = 0x7f18ca796000 [pid 4999] close(4) = 0 [pid 5680] write(3, "1000", 4 [pid 4999] rmdir("./54/file1" [pid 5680] <... write resumed>) = 4 [pid 5680] close(3 [pid 4999] <... rmdir resumed>) = 0 [pid 5680] <... close resumed>) = 0 [pid 4999] getdents64(3, [pid 5680] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5680] <... symlink resumed>) = 0 [pid 4999] close(3 [pid 5680] memfd_create("syzkaller", 0 [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./54" [pid 5680] <... memfd_create resumed>) = 3 [pid 5680] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./55", 0777 [pid 5680] <... mmap resumed>) = 0x7f18ca796000 [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 5679] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5681 ./strace-static-x86_64: Process 5681 attached [pid 5681] chdir("./55" [pid 5680] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5681] <... chdir resumed>) = 0 [pid 5681] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5681] setpgid(0, 0) = 0 [pid 5681] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5681] write(3, "1000", 4) = 4 [pid 5681] close(3) = 0 [pid 5681] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5681] memfd_create("syzkaller", 0) = 3 [pid 5681] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5681] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5679] <... write resumed>) = 2097152 [pid 5679] munmap(0x7f18ca796000, 2097152) = 0 [pid 5679] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5679] ioctl(4, LOOP_SET_FD, 3 [pid 5680] <... write resumed>) = 2097152 [pid 5680] munmap(0x7f18ca796000, 2097152) = 0 [pid 5680] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5680] ioctl(4, LOOP_SET_FD, 3 [pid 5679] <... ioctl resumed>) = 0 [pid 5679] close(3) = 0 [pid 5679] mkdir("./file1", 0777 [pid 5680] <... ioctl resumed>) = 0 [pid 5679] <... mkdir resumed>) = 0 [pid 5671] <... sendfile resumed>) = 1048576 [pid 5680] close(3 [pid 5679] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5671] exit_group(0) = ? [ 181.148447][ T5679] loop3: detected capacity change from 0 to 4096 [ 181.166703][ T5680] loop5: detected capacity change from 0 to 4096 [pid 5681] <... write resumed>) = 2097152 [pid 5680] <... close resumed>) = 0 [pid 5680] mkdir("./file1", 0777 [pid 5671] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5671, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 4997] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4997] umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, [pid 5680] <... mkdir resumed>) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5680] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./54/binderfs", [pid 5681] munmap(0x7f18ca796000, 2097152 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./54/binderfs") = 0 [pid 5681] <... munmap resumed>) = 0 [pid 4997] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5681] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5681] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5681] close(3) = 0 [pid 5681] mkdir("./file1", 0777) = 0 [pid 5681] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5674] <... sendfile resumed>) = 1048576 [pid 5674] exit_group(0) = ? [pid 5674] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5674, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [ 181.229165][ T5679] NILFS (loop3): invalid segment: Checksum error in segment payload [ 181.235035][ T5681] loop2: detected capacity change from 0 to 4096 [ 181.240851][ T5680] NILFS (loop5): invalid segment: Checksum error in segment payload [ 181.256845][ T5680] NILFS (loop5): trying rollback from an earlier position [ 181.265088][ T5679] NILFS (loop3): trying rollback from an earlier position [pid 4998] umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5680] <... mount resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5680] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4998] lstat("./54/binderfs", [pid 5680] <... openat resumed>) = 3 [pid 5679] <... mount resumed>) = 0 [pid 5680] chdir("./file1" [pid 5679] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5680] <... chdir resumed>) = 0 [pid 5679] <... openat resumed>) = 3 [pid 4998] unlink("./54/binderfs" [pid 5680] ioctl(4, LOOP_CLR_FD [pid 5679] chdir("./file1" [pid 5680] <... ioctl resumed>) = 0 [pid 5679] <... chdir resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 5680] close(4 [pid 5679] ioctl(4, LOOP_CLR_FD [pid 4998] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = 0 [pid 5680] <... close resumed>) = 0 [pid 5679] <... ioctl resumed>) = 0 [pid 5680] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5679] close(4) = 0 [pid 5680] <... open resumed>) = 4 [ 181.292304][ T5680] NILFS (loop5): recovery complete [ 181.299920][ T5679] NILFS (loop3): recovery complete [ 181.306193][ T5681] NILFS (loop2): invalid segment: Checksum error in segment payload [ 181.318722][ T5682] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.330226][ T5683] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5679] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5680] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5679] <... open resumed>) = 4 [pid 5680] ftruncate(5, 33587195 [pid 5679] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5680] <... ftruncate resumed>) = 0 [pid 5679] <... open resumed>) = 5 [pid 5680] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5679] ftruncate(5, 33587195 [pid 5680] <... open resumed>) = 6 [pid 5680] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5679] <... ftruncate resumed>) = 0 [pid 5680] <... open resumed>) = 7 [pid 5679] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5680] sendfile(6, 7, NULL, 281474978811909 [pid 5679] <... open resumed>) = 6 [pid 5679] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5679] sendfile(6, 7, NULL, 281474978811909 [pid 4997] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./54/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 181.373446][ T5681] NILFS (loop2): trying rollback from an earlier position [pid 4997] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./54/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./54/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./54") = 0 [ 181.467086][ T5681] NILFS (loop2): recovery complete [pid 4997] mkdir("./55", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5681] <... mount resumed>) = 0 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5681] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5681] <... openat resumed>) = 3 [pid 4998] <... umount2 resumed>) = 0 [pid 5681] chdir("./file1") = 0 [pid 4997] close(3 [pid 5681] ioctl(4, LOOP_CLR_FD [pid 4998] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... close resumed>) = 0 [pid 5681] <... ioctl resumed>) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5681] close(4) = 0 [pid 5681] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5685 [pid 5681] <... open resumed>) = 4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5681] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] lstat("./54/file1", [pid 5681] <... open resumed>) = 5 ./strace-static-x86_64: Process 5685 attached [pid 5681] ftruncate(5, 33587195 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5685] chdir("./55" [pid 5681] <... ftruncate resumed>) = 0 [pid 5681] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4998] umount2("./54/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5685] <... chdir resumed>) = 0 [pid 5681] <... open resumed>) = 6 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5685] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5681] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4998] openat(AT_FDCWD, "./54/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5685] <... prctl resumed>) = 0 [pid 5681] <... open resumed>) = 7 [ 181.526877][ T5684] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5685] setpgid(0, 0 [pid 5681] sendfile(6, 7, NULL, 281474978811909 [pid 4998] <... openat resumed>) = 4 [pid 5685] <... setpgid resumed>) = 0 [pid 4998] fstat(4, [pid 5685] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5685] <... openat resumed>) = 3 [pid 4998] getdents64(4, [pid 5685] write(3, "1000", 4 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5685] <... write resumed>) = 4 [pid 4998] getdents64(4, [pid 5685] close(3 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5685] <... close resumed>) = 0 [pid 4998] close(4 [pid 5685] symlink("/dev/binderfs", "./binderfs" [pid 4998] <... close resumed>) = 0 [pid 5685] <... symlink resumed>) = 0 [pid 4998] rmdir("./54/file1" [pid 5685] memfd_create("syzkaller", 0) = 3 [pid 4998] <... rmdir resumed>) = 0 [pid 5685] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] getdents64(3, [pid 5685] <... mmap resumed>) = 0x7f18ca796000 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./54" [pid 5685] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] mkdir("./55", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5686 ./strace-static-x86_64: Process 5686 attached [pid 5686] chdir("./55") = 0 [pid 5686] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5686] setpgid(0, 0) = 0 [pid 5686] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5686] write(3, "1000", 4) = 4 [pid 5686] close(3) = 0 [pid 5686] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5686] memfd_create("syzkaller", 0) = 3 [pid 5686] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5685] <... write resumed>) = 2097152 [pid 5685] munmap(0x7f18ca796000, 2097152) = 0 [pid 5685] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5685] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5685] close(3) = 0 [pid 5685] mkdir("./file1", 0777) = 0 [pid 5685] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [ 181.793110][ T5685] loop0: detected capacity change from 0 to 4096 [pid 5686] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [ 181.869149][ T5685] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5686] munmap(0x7f18ca796000, 2097152) = 0 [pid 5686] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5686] ioctl(4, LOOP_SET_FD, 3 [pid 5677] <... sendfile resumed>) = 1048576 [pid 5677] exit_group(0) = ? [pid 5686] <... ioctl resumed>) = 0 [pid 5677] +++ exited with 0 +++ [pid 5686] close(3 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5677, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5686] <... close resumed>) = 0 [ 181.913338][ T5685] NILFS (loop0): trying rollback from an earlier position [ 181.937232][ T5686] loop1: detected capacity change from 0 to 4096 [pid 5686] mkdir("./file1", 0777) = 0 [pid 5686] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5001] umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./55/binderfs") = 0 [pid 5001] umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5685] <... mount resumed>) = 0 [pid 5685] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [ 181.984579][ T5685] NILFS (loop0): recovery complete [ 181.998927][ T5686] NILFS (loop1): invalid segment: Checksum error in segment payload [ 182.012692][ T5687] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5685] chdir("./file1") = 0 [pid 5685] ioctl(4, LOOP_CLR_FD) = 0 [pid 5685] close(4) = 0 [pid 5685] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5685] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5685] ftruncate(5, 33587195) = 0 [ 182.028771][ T5686] NILFS (loop1): trying rollback from an earlier position [pid 5685] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5686] <... mount resumed>) = 0 [pid 5685] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5686] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5685] <... open resumed>) = 7 [pid 5686] <... openat resumed>) = 3 [pid 5685] sendfile(6, 7, NULL, 281474978811909 [pid 5686] chdir("./file1") = 0 [pid 5686] ioctl(4, LOOP_CLR_FD) = 0 [pid 5686] close(4) = 0 [pid 5686] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5686] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [ 182.083885][ T5686] NILFS (loop1): recovery complete [ 182.101968][ T5688] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5686] ftruncate(5, 33587195) = 0 [pid 5686] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5686] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5686] sendfile(6, 7, NULL, 281474978811909 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./55/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./55/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./55/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./55") = 0 [pid 5001] mkdir("./56", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5689 ./strace-static-x86_64: Process 5689 attached [pid 5689] chdir("./56") = 0 [pid 5689] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5689] setpgid(0, 0) = 0 [pid 5689] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5689] write(3, "1000", 4) = 4 [pid 5689] close(3) = 0 [pid 5689] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5689] memfd_create("syzkaller", 0) = 3 [pid 5689] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5680] <... sendfile resumed>) = 1048576 [pid 5680] exit_group(0) = ? [pid 5680] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5680, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5002] umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./56/binderfs") = 0 [pid 5002] umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5689] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5679] <... sendfile resumed>) = 1048576 [pid 5679] exit_group(0) = ? [pid 5679] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5679, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5689] <... write resumed>) = 2097152 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5689] munmap(0x7f18ca796000, 2097152 [pid 5000] umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5689] <... munmap resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5689] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] lstat("./56/binderfs", [pid 5689] <... openat resumed>) = 4 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./56/binderfs" [pid 5689] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... unlink resumed>) = 0 [pid 5000] umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5689] <... ioctl resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5689] close(3) = 0 [pid 5689] mkdir("./file1", 0777) = 0 [ 182.607493][ T5689] loop4: detected capacity change from 0 to 4096 [pid 5689] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5002] umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5681] <... sendfile resumed>) = 1048576 [pid 5002] lstat("./56/file1", [pid 5681] exit_group(0) = ? [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5681] +++ exited with 0 +++ [pid 5002] umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5681, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5002] openat(AT_FDCWD, "./56/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... openat resumed>) = 4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 182.654059][ T5689] NILFS (loop4): invalid segment: Checksum error in segment payload [ 182.662698][ T5689] NILFS (loop4): trying rollback from an earlier position [pid 4999] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] fstat(4, [pid 4999] <... openat resumed>) = 3 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] fstat(3, [pid 5002] getdents64(4, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(3, [pid 5002] getdents64(4, [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] close(4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./56/file1" [pid 4999] lstat("./55/binderfs", [pid 5689] <... mount resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5689] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5002] getdents64(3, [pid 4999] unlink("./55/binderfs" [pid 5689] <... openat resumed>) = 3 [pid 5689] chdir("./file1") = 0 [pid 5689] ioctl(4, LOOP_CLR_FD) = 0 [pid 5689] close(4) = 0 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 5689] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5002] close(3 [pid 4999] umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5689] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5002] <... close resumed>) = 0 [pid 5689] ftruncate(5, 33587195) = 0 [pid 5002] rmdir("./56" [pid 5689] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5002] <... rmdir resumed>) = 0 [pid 5689] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 182.696435][ T5689] NILFS (loop4): recovery complete [ 182.715572][ T5690] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5689] sendfile(6, 7, NULL, 281474978811909 [pid 5002] mkdir("./57", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5691 [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./56/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5691 attached [pid 5000] umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5691] chdir("./57" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5691] <... chdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./56/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5691] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] <... openat resumed>) = 4 [pid 5691] <... prctl resumed>) = 0 [pid 5000] fstat(4, [pid 5691] setpgid(0, 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5691] <... setpgid resumed>) = 0 [pid 5000] getdents64(4, [pid 5691] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5691] <... openat resumed>) = 3 [pid 5000] getdents64(4, [pid 5691] write(3, "1000", 4 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5691] <... write resumed>) = 4 [pid 5000] close(4 [pid 5691] close(3 [pid 5000] <... close resumed>) = 0 [pid 5691] <... close resumed>) = 0 [pid 5000] rmdir("./56/file1" [pid 5691] symlink("/dev/binderfs", "./binderfs" [pid 5000] <... rmdir resumed>) = 0 [pid 5691] <... symlink resumed>) = 0 [pid 5000] getdents64(3, [pid 5691] memfd_create("syzkaller", 0 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5691] <... memfd_create resumed>) = 3 [pid 5000] close(3 [pid 5691] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] <... close resumed>) = 0 [pid 5691] <... mmap resumed>) = 0x7f18ca796000 [pid 5000] rmdir("./56") = 0 [pid 5000] mkdir("./57", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5692 ./strace-static-x86_64: Process 5692 attached [pid 5692] chdir("./57") = 0 [pid 5692] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5692] setpgid(0, 0) = 0 [pid 5692] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5692] write(3, "1000", 4) = 4 [pid 5692] close(3) = 0 [pid 5692] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5692] memfd_create("syzkaller", 0) = 3 [pid 5692] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5691] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./55/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./55/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./55/file1") = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./55" [pid 5692] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5691] <... write resumed>) = 2097152 [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./56", 0777 [pid 5691] munmap(0x7f18ca796000, 2097152 [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5693 attached , child_tidptr=0x555556f7b690) = 5693 [pid 5693] chdir("./56") = 0 [pid 5693] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5693] setpgid(0, 0) = 0 [pid 5693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5692] <... write resumed>) = 2097152 [pid 5691] <... munmap resumed>) = 0 [pid 5693] write(3, "1000", 4 [pid 5692] munmap(0x7f18ca796000, 2097152 [pid 5691] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5693] <... write resumed>) = 4 [pid 5692] <... munmap resumed>) = 0 [pid 5691] <... openat resumed>) = 4 [pid 5693] close(3 [pid 5692] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5691] ioctl(4, LOOP_SET_FD, 3 [pid 5693] <... close resumed>) = 0 [pid 5692] <... openat resumed>) = 4 [pid 5693] symlink("/dev/binderfs", "./binderfs" [pid 5692] ioctl(4, LOOP_SET_FD, 3 [pid 5693] <... symlink resumed>) = 0 [pid 5691] <... ioctl resumed>) = 0 [pid 5693] memfd_create("syzkaller", 0 [pid 5691] close(3 [pid 5693] <... memfd_create resumed>) = 3 [pid 5692] <... ioctl resumed>) = 0 [pid 5685] <... sendfile resumed>) = 1048576 [pid 5685] exit_group(0) = ? [pid 5693] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5685] +++ exited with 0 +++ [pid 5693] <... mmap resumed>) = 0x7f18ca796000 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5685, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 4997] umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./55/binderfs") = 0 [pid 4997] umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5693] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5692] close(3 [pid 5691] <... close resumed>) = 0 [pid 5692] <... close resumed>) = 0 [pid 5691] mkdir("./file1", 0777 [pid 5686] <... sendfile resumed>) = 1048576 [ 183.088199][ T5691] loop5: detected capacity change from 0 to 4096 [ 183.099284][ T5692] loop3: detected capacity change from 0 to 4096 [pid 5692] mkdir("./file1", 0777 [pid 5691] <... mkdir resumed>) = 0 [pid 5686] exit_group(0 [pid 5692] <... mkdir resumed>) = 0 [pid 5691] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5686] <... exit_group resumed>) = ? [pid 5692] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5686] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5686, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 4998] umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./55/binderfs") = 0 [ 183.160923][ T5691] NILFS (loop5): invalid segment: Checksum error in segment payload [ 183.183455][ T5691] NILFS (loop5): trying rollback from an earlier position [ 183.191258][ T5692] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 4998] umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5693] <... write resumed>) = 2097152 [pid 5693] munmap(0x7f18ca796000, 2097152) = 0 [pid 5693] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5693] ioctl(4, LOOP_SET_FD, 3) = 0 [ 183.231936][ T5691] NILFS (loop5): recovery complete [ 183.241128][ T5692] NILFS (loop3): trying rollback from an earlier position [ 183.263450][ T5693] loop2: detected capacity change from 0 to 4096 [pid 5693] close(3 [pid 5691] <... mount resumed>) = 0 [pid 4997] <... umount2 resumed>) = 0 [pid 5693] <... close resumed>) = 0 [pid 5691] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4997] umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5693] mkdir("./file1", 0777 [pid 5691] <... openat resumed>) = 3 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5693] <... mkdir resumed>) = 0 [pid 5691] chdir("./file1" [pid 4997] lstat("./55/file1", [pid 5693] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5691] <... chdir resumed>) = 0 [ 183.283078][ T5694] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.298900][ T5692] NILFS (loop3): recovery complete [pid 5691] ioctl(4, LOOP_CLR_FD [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5691] <... ioctl resumed>) = 0 [pid 4997] umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5691] close(4) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./55/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5691] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4997] <... openat resumed>) = 4 [pid 4997] fstat(4, [pid 5691] <... open resumed>) = 4 [pid 5691] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5692] <... mount resumed>) = 0 [pid 4998] <... umount2 resumed>) = 0 [ 183.328829][ T5693] NILFS (loop2): invalid segment: Checksum error in segment payload [ 183.346868][ T5695] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.357234][ T5693] NILFS (loop2): trying rollback from an earlier position [pid 5692] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5691] <... open resumed>) = 5 [pid 4998] umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] getdents64(4, [pid 5692] <... openat resumed>) = 3 [pid 5691] ftruncate(5, 33587195 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5692] chdir("./file1" [pid 5691] <... ftruncate resumed>) = 0 [pid 4998] lstat("./55/file1", [pid 4997] getdents64(4, [pid 5692] <... chdir resumed>) = 0 [pid 5691] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5692] ioctl(4, LOOP_CLR_FD [pid 5691] <... open resumed>) = 6 [pid 4998] umount2("./55/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] close(4 [pid 5692] <... ioctl resumed>) = 0 [pid 5691] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... close resumed>) = 0 [pid 5692] close(4 [pid 5691] <... open resumed>) = 7 [pid 4998] openat(AT_FDCWD, "./55/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] rmdir("./55/file1" [pid 5692] <... close resumed>) = 0 [pid 5691] sendfile(6, 7, NULL, 281474978811909 [pid 4998] <... openat resumed>) = 4 [pid 4997] <... rmdir resumed>) = 0 [pid 5692] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] fstat(4, [pid 4997] getdents64(3, [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] getdents64(4, [pid 4997] close(3 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5693] <... mount resumed>) = 0 [pid 5692] <... open resumed>) = 4 [pid 4998] close(4 [pid 4997] <... close resumed>) = 0 [pid 5693] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5692] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] <... close resumed>) = 0 [pid 4997] rmdir("./55" [pid 5692] <... open resumed>) = 5 [pid 5693] <... openat resumed>) = 3 [pid 5693] chdir("./file1" [pid 5692] ftruncate(5, 33587195 [pid 4998] rmdir("./55/file1" [pid 4997] <... rmdir resumed>) = 0 [pid 5693] <... chdir resumed>) = 0 [pid 5692] <... ftruncate resumed>) = 0 [ 183.374789][ T5693] NILFS (loop2): recovery complete [ 183.393350][ T5696] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5693] ioctl(4, LOOP_CLR_FD [pid 4998] <... rmdir resumed>) = 0 [pid 5693] <... ioctl resumed>) = 0 [pid 5692] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4997] mkdir("./56", 0777 [pid 5693] close(4 [pid 5692] <... open resumed>) = 6 [pid 4998] getdents64(3, [pid 5693] <... close resumed>) = 0 [pid 5692] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4997] <... mkdir resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5693] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5692] <... open resumed>) = 7 [pid 4998] close(3 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5693] <... open resumed>) = 4 [pid 5692] sendfile(6, 7, NULL, 281474978811909 [pid 4998] <... close resumed>) = 0 [pid 5693] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4997] <... openat resumed>) = 3 [pid 5693] <... open resumed>) = 5 [pid 4998] rmdir("./55" [pid 5693] ftruncate(5, 33587195 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5693] <... ftruncate resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5693] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4998] mkdir("./56", 0777 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5693] <... open resumed>) = 6 [pid 5693] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 4998] <... mkdir resumed>) = 0 [pid 4997] close(3 [pid 5693] sendfile(6, 7, NULL, 281474978811909 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4997] <... close resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5697 [pid 4998] <... close resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5697 attached , child_tidptr=0x555556f7b690) = 5698 [pid 5697] chdir("./56") = 0 [pid 5697] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5698 attached ) = 0 [pid 5698] chdir("./56" [pid 5697] setpgid(0, 0 [pid 5698] <... chdir resumed>) = 0 [pid 5697] <... setpgid resumed>) = 0 [pid 5698] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5697] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5698] setpgid(0, 0 [pid 5697] <... openat resumed>) = 3 [pid 5698] <... setpgid resumed>) = 0 [pid 5697] write(3, "1000", 4 [pid 5698] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5697] <... write resumed>) = 4 [pid 5698] <... openat resumed>) = 3 [pid 5697] close(3 [pid 5698] write(3, "1000", 4 [pid 5697] <... close resumed>) = 0 [pid 5698] <... write resumed>) = 4 [pid 5697] symlink("/dev/binderfs", "./binderfs" [pid 5698] close(3 [pid 5697] <... symlink resumed>) = 0 [pid 5698] <... close resumed>) = 0 [pid 5697] memfd_create("syzkaller", 0 [pid 5698] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5698] memfd_create("syzkaller", 0 [pid 5697] <... memfd_create resumed>) = 3 [pid 5698] <... memfd_create resumed>) = 3 [pid 5697] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5698] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5697] <... mmap resumed>) = 0x7f18ca796000 [pid 5698] <... mmap resumed>) = 0x7f18ca796000 [pid 5697] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5698] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5698] munmap(0x7f18ca796000, 2097152 [pid 5697] <... write resumed>) = 2097152 [pid 5698] <... munmap resumed>) = 0 [pid 5698] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5698] ioctl(4, LOOP_SET_FD, 3 [pid 5697] munmap(0x7f18ca796000, 2097152) = 0 [pid 5697] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5697] ioctl(4, LOOP_SET_FD, 3 [pid 5698] <... ioctl resumed>) = 0 [pid 5697] <... ioctl resumed>) = 0 [pid 5698] close(3) = 0 [ 183.692187][ T5698] loop1: detected capacity change from 0 to 4096 [ 183.710367][ T5697] loop0: detected capacity change from 0 to 4096 [pid 5697] close(3 [pid 5698] mkdir("./file1", 0777 [pid 5697] <... close resumed>) = 0 [pid 5698] <... mkdir resumed>) = 0 [pid 5697] mkdir("./file1", 0777 [pid 5698] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5697] <... mkdir resumed>) = 0 [ 183.753432][ T5698] NILFS (loop1): invalid segment: Checksum error in segment payload [ 183.765177][ T5697] NILFS (loop0): invalid segment: Checksum error in segment payload [ 183.768150][ T5698] NILFS (loop1): trying rollback from an earlier position [ 183.774056][ T5697] NILFS (loop0): trying rollback from an earlier position [pid 5697] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5689] <... sendfile resumed>) = 1048576 [pid 5689] exit_group(0) = ? [pid 5689] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5689, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- [ 183.801222][ T5697] NILFS (loop0): recovery complete [pid 5001] umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5697] <... mount resumed>) = 0 [pid 5001] getdents64(3, [pid 5697] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5697] <... openat resumed>) = 3 [pid 5001] umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5697] chdir("./file1" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5697] <... chdir resumed>) = 0 [pid 5001] lstat("./56/binderfs", [pid 5697] ioctl(4, LOOP_CLR_FD [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5697] <... ioctl resumed>) = 0 [pid 5001] unlink("./56/binderfs" [pid 5697] close(4 [pid 5001] <... unlink resumed>) = 0 [pid 5697] <... close resumed>) = 0 [pid 5001] umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5697] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5697] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5697] ftruncate(5, 33587195) = 0 [pid 5697] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5697] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 183.841134][ T5699] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.872389][ T5698] NILFS (loop1): recovery complete [pid 5697] sendfile(6, 7, NULL, 281474978811909 [pid 5698] <... mount resumed>) = 0 [pid 5698] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5698] chdir("./file1") = 0 [pid 5698] ioctl(4, LOOP_CLR_FD) = 0 [pid 5698] close(4) = 0 [pid 5698] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5698] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5698] ftruncate(5, 33587195) = 0 [pid 5698] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [ 183.941782][ T5700] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5698] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5698] sendfile(6, 7, NULL, 281474978811909 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./56/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./56/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./56/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./56") = 0 [pid 5001] mkdir("./57", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5701 ./strace-static-x86_64: Process 5701 attached [pid 5701] chdir("./57") = 0 [pid 5701] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5701] setpgid(0, 0) = 0 [pid 5701] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5701] write(3, "1000", 4) = 4 [pid 5701] close(3) = 0 [pid 5701] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5701] memfd_create("syzkaller", 0) = 3 [pid 5701] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5701] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5701] munmap(0x7f18ca796000, 2097152) = 0 [pid 5701] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5701] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5701] close(3) = 0 [pid 5701] mkdir("./file1", 0777) = 0 [ 184.363260][ T5701] loop4: detected capacity change from 0 to 4096 [ 184.413632][ T5701] NILFS (loop4): invalid segment: Checksum error in segment payload [ 184.421700][ T5701] NILFS (loop4): trying rollback from an earlier position [ 184.453741][ T5701] NILFS (loop4): recovery complete [pid 5701] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 5701] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5701] chdir("./file1") = 0 [pid 5701] ioctl(4, LOOP_CLR_FD [pid 5692] <... sendfile resumed>) = 1048576 [pid 5701] <... ioctl resumed>) = 0 [pid 5692] exit_group(0 [pid 5701] close(4 [pid 5692] <... exit_group resumed>) = ? [pid 5692] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5692, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5701] <... close resumed>) = 0 [pid 5701] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5000] umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5701] <... open resumed>) = 4 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 184.471414][ T5702] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] lstat("./57/binderfs", [pid 5701] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5701] ftruncate(5, 33587195) = 0 [pid 5701] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5701] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5701] <... open resumed>) = 7 [pid 5701] sendfile(6, 7, NULL, 281474978811909 [pid 5000] unlink("./57/binderfs") = 0 [pid 5000] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5691] <... sendfile resumed>) = 1048576 [pid 5693] <... sendfile resumed>) = 1048576 [pid 5691] exit_group(0) = ? [pid 5691] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5691, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5002] umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, [pid 5693] exit_group(0 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5693] <... exit_group resumed>) = ? [pid 5002] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./57/binderfs") = 0 [pid 5693] +++ exited with 0 +++ [pid 5002] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5693, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 4999] umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./56/binderfs") = 0 [pid 4999] umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./57/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./57/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./57/file1" [pid 5002] <... umount2 resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5000] getdents64(3, [pid 5002] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] close(3 [pid 5002] lstat("./57/file1", [pid 5000] <... close resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] rmdir("./57" [pid 5002] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./57/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] mkdir("./58", 0777 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, [pid 5000] <... mkdir resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5002] getdents64(4, [pid 5000] <... openat resumed>) = 3 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5002] close(4 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./57/file1") = 0 [pid 4999] umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] getdents64(3, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] lstat("./56/file1", [pid 5002] close(3 [pid 5000] close(3 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] rmdir("./57" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... rmdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./56/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] mkdir("./58", 0777 [pid 4999] <... openat resumed>) = 4 [pid 5002] <... mkdir resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] fstat(4, [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... openat resumed>) = 3 [pid 4999] getdents64(4, [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5703 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] getdents64(4, [pid 5002] close(3 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] <... close resumed>) = 0 [pid 4999] close(4 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./56/file1" [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5704 [pid 4999] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5703 attached [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5703] chdir("./58" [pid 4999] close(3) = 0 ./strace-static-x86_64: Process 5704 attached [pid 5703] <... chdir resumed>) = 0 [pid 4999] rmdir("./56" [pid 5704] chdir("./58" [pid 5703] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] <... rmdir resumed>) = 0 [pid 5704] <... chdir resumed>) = 0 [pid 5703] <... prctl resumed>) = 0 [pid 4999] mkdir("./57", 0777 [pid 5704] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5703] setpgid(0, 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5704] <... prctl resumed>) = 0 [pid 5703] <... setpgid resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5704] setpgid(0, 0 [pid 5703] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] <... openat resumed>) = 3 [pid 5704] <... setpgid resumed>) = 0 [pid 5703] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5704] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5703] write(3, "1000", 4 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5704] <... openat resumed>) = 3 [pid 5703] <... write resumed>) = 4 [pid 4999] close(3 [pid 5704] write(3, "1000", 4 [pid 5703] close(3 [pid 4999] <... close resumed>) = 0 [pid 5704] <... write resumed>) = 4 [pid 5703] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5704] close(3 [pid 5703] symlink("/dev/binderfs", "./binderfs" [pid 5704] <... close resumed>) = 0 [pid 5703] <... symlink resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5705 [pid 5704] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5704] memfd_create("syzkaller", 0) = 3 ./strace-static-x86_64: Process 5705 attached [pid 5704] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5705] chdir("./57" [pid 5704] <... mmap resumed>) = 0x7f18ca796000 [pid 5703] memfd_create("syzkaller", 0 [pid 5705] <... chdir resumed>) = 0 [pid 5703] <... memfd_create resumed>) = 3 [pid 5705] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5703] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5705] <... prctl resumed>) = 0 [pid 5703] <... mmap resumed>) = 0x7f18ca796000 [pid 5705] setpgid(0, 0) = 0 [pid 5705] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5705] write(3, "1000", 4) = 4 [pid 5705] close(3) = 0 [pid 5705] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5705] memfd_create("syzkaller", 0) = 3 [pid 5705] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5704] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5703] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5705] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5704] <... write resumed>) = 2097152 [pid 5704] munmap(0x7f18ca796000, 2097152 [pid 5703] <... write resumed>) = 2097152 [pid 5697] <... sendfile resumed>) = 1048576 [pid 5697] exit_group(0 [pid 5703] munmap(0x7f18ca796000, 2097152 [pid 5697] <... exit_group resumed>) = ? [pid 5703] <... munmap resumed>) = 0 [pid 5697] +++ exited with 0 +++ [pid 5703] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5697, si_uid=0, si_status=0, si_utime=0, si_stime=36 /* 0.36 s */} --- [pid 5705] <... write resumed>) = 2097152 [pid 5704] <... munmap resumed>) = 0 [pid 5703] <... openat resumed>) = 4 [pid 5704] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5703] ioctl(4, LOOP_SET_FD, 3 [pid 5704] <... openat resumed>) = 4 [pid 4997] umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5704] ioctl(4, LOOP_SET_FD, 3 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5705] munmap(0x7f18ca796000, 2097152 [pid 5703] <... ioctl resumed>) = 0 [pid 5698] <... sendfile resumed>) = 1048576 [pid 4997] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5703] close(3 [pid 5698] exit_group(0 [pid 4997] <... openat resumed>) = 3 [pid 5705] <... munmap resumed>) = 0 [pid 5703] <... close resumed>) = 0 [pid 5698] <... exit_group resumed>) = ? [pid 4997] fstat(3, [pid 5703] mkdir("./file1", 0777 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5698] +++ exited with 0 +++ [pid 4997] getdents64(3, [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5698, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5705] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5703] <... mkdir resumed>) = 0 [pid 4997] umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5705] <... openat resumed>) = 4 [pid 5703] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5705] ioctl(4, LOOP_SET_FD, 3 [pid 4998] umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] lstat("./56/binderfs", [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] unlink("./56/binderfs" [pid 4998] <... openat resumed>) = 3 [pid 4997] <... unlink resumed>) = 0 [pid 4998] fstat(3, [pid 4997] umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./56/binderfs") = 0 [pid 5705] <... ioctl resumed>) = 0 [ 185.115699][ T5703] loop3: detected capacity change from 0 to 4096 [ 185.117623][ T5704] loop5: detected capacity change from 0 to 4096 [ 185.144134][ T5705] loop2: detected capacity change from 0 to 4096 [ 185.153291][ T5703] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 4998] umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5704] <... ioctl resumed>) = 0 [pid 5704] close(3 [pid 5705] close(3) = 0 [pid 5705] mkdir("./file1", 0777 [pid 5704] <... close resumed>) = 0 [pid 5705] <... mkdir resumed>) = 0 [pid 5705] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5704] mkdir("./file1", 0777) = 0 [ 185.161367][ T5703] NILFS (loop3): trying rollback from an earlier position [ 185.185544][ T5705] NILFS (loop2): invalid segment: Checksum error in segment payload [ 185.197446][ T5705] NILFS (loop2): trying rollback from an earlier position [ 185.210859][ T5704] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5704] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./56/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./56/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [ 185.244020][ T5704] NILFS (loop5): trying rollback from an earlier position [ 185.255761][ T5703] NILFS (loop3): recovery complete [ 185.261791][ T5705] NILFS (loop2): recovery complete [pid 4997] rmdir("./56/file1" [pid 5703] <... mount resumed>) = 0 [pid 5703] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4997] <... rmdir resumed>) = 0 [pid 5703] <... openat resumed>) = 3 [pid 5703] chdir("./file1" [pid 4997] getdents64(3, [pid 5703] <... chdir resumed>) = 0 [pid 5703] ioctl(4, LOOP_CLR_FD [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5703] <... ioctl resumed>) = 0 [pid 4997] close(3 [pid 5703] close(4 [pid 4997] <... close resumed>) = 0 [pid 5705] <... mount resumed>) = 0 [pid 5703] <... close resumed>) = 0 [pid 4997] rmdir("./56" [pid 5705] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5703] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4997] <... rmdir resumed>) = 0 [pid 5705] <... openat resumed>) = 3 [pid 5703] <... open resumed>) = 4 [pid 4997] mkdir("./57", 0777 [pid 5705] chdir("./file1" [pid 5703] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4997] <... mkdir resumed>) = 0 [pid 5705] <... chdir resumed>) = 0 [pid 5703] <... open resumed>) = 5 [pid 4998] <... umount2 resumed>) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5705] ioctl(4, LOOP_CLR_FD [pid 5703] ftruncate(5, 33587195 [pid 4997] <... openat resumed>) = 3 [pid 5705] <... ioctl resumed>) = 0 [pid 5703] <... ftruncate resumed>) = 0 [ 185.295144][ T5706] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.308118][ T5707] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5705] close(4 [pid 5703] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5705] <... close resumed>) = 0 [pid 5704] <... mount resumed>) = 0 [pid 4998] lstat("./56/file1", [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5705] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./56/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./56/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./56/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./56") = 0 [pid 4998] mkdir("./57", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5704] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5703] <... open resumed>) = 6 [pid 4997] close(3 [pid 5705] <... open resumed>) = 4 [pid 5703] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5709 [pid 5705] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5704] <... openat resumed>) = 3 [pid 5703] <... open resumed>) = 7 [pid 4997] <... close resumed>) = 0 ./strace-static-x86_64: Process 5709 attached [pid 5705] <... open resumed>) = 5 [pid 5704] chdir("./file1" [pid 5703] sendfile(6, 7, NULL, 281474978811909 [pid 5709] chdir("./57" [pid 5705] ftruncate(5, 33587195 [pid 5704] <... chdir resumed>) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5709] <... chdir resumed>) = 0 [pid 5704] ioctl(4, LOOP_CLR_FD [pid 5709] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5709] setpgid(0, 0) = 0 [pid 5709] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5705] <... ftruncate resumed>) = 0 [pid 5704] <... ioctl resumed>) = 0 [pid 5709] write(3, "1000", 4) = 4 [pid 5709] close(3) = 0 [pid 5709] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5709] memfd_create("syzkaller", 0) = 3 [pid 5709] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 ./strace-static-x86_64: Process 5710 attached [pid 5705] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5704] close(4 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5710 [pid 5710] chdir("./57" [pid 5705] <... open resumed>) = 6 [pid 5704] <... close resumed>) = 0 [ 185.364724][ T5704] NILFS (loop5): recovery complete [ 185.384313][ T5708] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5710] <... chdir resumed>) = 0 [pid 5705] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5704] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5710] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5705] <... open resumed>) = 7 [pid 5710] <... prctl resumed>) = 0 [pid 5710] setpgid(0, 0 [pid 5705] sendfile(6, 7, NULL, 281474978811909 [pid 5710] <... setpgid resumed>) = 0 [pid 5710] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5704] <... open resumed>) = 4 [pid 5710] write(3, "1000", 4 [pid 5704] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5710] <... write resumed>) = 4 [pid 5710] close(3 [pid 5704] <... open resumed>) = 5 [pid 5710] <... close resumed>) = 0 [pid 5704] ftruncate(5, 33587195 [pid 5710] symlink("/dev/binderfs", "./binderfs" [pid 5704] <... ftruncate resumed>) = 0 [pid 5710] <... symlink resumed>) = 0 [pid 5704] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5710] memfd_create("syzkaller", 0 [pid 5704] <... open resumed>) = 6 [pid 5710] <... memfd_create resumed>) = 3 [pid 5704] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5710] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5704] <... open resumed>) = 7 [pid 5704] sendfile(6, 7, NULL, 281474978811909 [pid 5710] <... mmap resumed>) = 0x7f18ca796000 [pid 5709] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5710] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5701] <... sendfile resumed>) = 1048576 [pid 5701] exit_group(0) = ? [pid 5701] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5701, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5001] umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5709] <... write resumed>) = 2097152 [pid 5709] munmap(0x7f18ca796000, 2097152 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5709] <... munmap resumed>) = 0 [pid 5001] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5710] <... write resumed>) = 2097152 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5710] munmap(0x7f18ca796000, 2097152 [pid 5001] lstat("./57/binderfs", [pid 5709] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5709] ioctl(4, LOOP_SET_FD, 3 [pid 5710] <... munmap resumed>) = 0 [pid 5001] unlink("./57/binderfs" [pid 5710] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5001] <... unlink resumed>) = 0 [pid 5710] <... openat resumed>) = 4 [pid 5001] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5710] ioctl(4, LOOP_SET_FD, 3 [pid 5709] <... ioctl resumed>) = 0 [pid 5709] close(3) = 0 [pid 5709] mkdir("./file1", 0777) = 0 [pid 5709] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5710] <... ioctl resumed>) = 0 [pid 5710] close(3) = 0 [pid 5710] mkdir("./file1", 0777) = 0 [ 185.645975][ T5709] loop1: detected capacity change from 0 to 4096 [ 185.666382][ T5710] loop0: detected capacity change from 0 to 4096 [ 185.723261][ T5710] NILFS (loop0): invalid segment: Checksum error in segment payload [ 185.731187][ T5709] NILFS (loop1): invalid segment: Checksum error in segment payload [ 185.739727][ T5710] NILFS (loop0): trying rollback from an earlier position [ 185.750734][ T5709] NILFS (loop1): trying rollback from an earlier position [pid 5710] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./57/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./57/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5710] <... mount resumed>) = 0 [pid 5001] <... openat resumed>) = 4 [pid 5710] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [ 185.827267][ T5710] NILFS (loop0): recovery complete [ 185.864726][ T5711] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] fstat(4, [pid 5710] <... openat resumed>) = 3 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5710] chdir("./file1" [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5710] <... chdir resumed>) = 0 [pid 5710] ioctl(4, LOOP_CLR_FD [pid 5001] getdents64(4, [pid 5710] <... ioctl resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5710] close(4 [pid 5001] close(4 [pid 5710] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5710] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5001] rmdir("./57/file1") = 0 [pid 5710] <... open resumed>) = 4 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5710] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5001] close(3 [pid 5710] <... open resumed>) = 5 [pid 5001] <... close resumed>) = 0 [pid 5710] ftruncate(5, 33587195 [pid 5001] rmdir("./57") = 0 [pid 5710] <... ftruncate resumed>) = 0 [pid 5001] mkdir("./58", 0777 [pid 5710] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5001] <... mkdir resumed>) = 0 [ 185.884569][ T5709] NILFS (loop1): recovery complete [pid 5710] <... open resumed>) = 6 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5710] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5001] <... openat resumed>) = 3 [pid 5709] <... mount resumed>) = 0 [pid 5710] <... open resumed>) = 7 [pid 5709] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5710] sendfile(6, 7, NULL, 281474978811909 [pid 5709] <... openat resumed>) = 3 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5709] chdir("./file1" [pid 5001] close(3 [pid 5709] <... chdir resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5709] ioctl(4, LOOP_CLR_FD [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5709] <... ioctl resumed>) = 0 [pid 5709] close(4) = 0 [pid 5709] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5709] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5001] <... clone resumed>, child_tidptr=0x555556f7b690) = 5713 [pid 5709] <... open resumed>) = 5 [pid 5709] ftruncate(5, 33587195) = 0 [pid 5709] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000./strace-static-x86_64: Process 5713 attached ) = 6 [pid 5709] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5713] chdir("./58" [pid 5709] <... open resumed>) = 7 [pid 5709] sendfile(6, 7, NULL, 281474978811909 [pid 5713] <... chdir resumed>) = 0 [ 185.910669][ T5712] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5713] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5713] setpgid(0, 0) = 0 [pid 5713] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5713] write(3, "1000", 4) = 4 [pid 5713] close(3) = 0 [pid 5713] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5713] memfd_create("syzkaller", 0) = 3 [pid 5713] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5713] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5713] munmap(0x7f18ca796000, 2097152) = 0 [pid 5713] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5713] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5713] close(3) = 0 [ 186.191674][ T5713] loop4: detected capacity change from 0 to 4096 [pid 5713] mkdir("./file1", 0777) = 0 [ 186.297872][ T5713] NILFS (loop4): invalid segment: Checksum error in segment payload [ 186.353179][ T5713] NILFS (loop4): trying rollback from an earlier position [pid 5713] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5704] <... sendfile resumed>) = 1048576 [pid 5704] exit_group(0) = ? [pid 5704] +++ exited with 0 +++ [ 186.428846][ T5713] NILFS (loop4): recovery complete [pid 5713] <... mount resumed>) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5704, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5713] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5713] chdir("./file1") = 0 [pid 5713] ioctl(4, LOOP_CLR_FD) = 0 [pid 5713] close(4 [pid 5705] <... sendfile resumed>) = 1048576 [pid 5002] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5713] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5713] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5002] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5713] <... open resumed>) = 4 [pid 5705] exit_group(0 [pid 5002] <... openat resumed>) = 3 [pid 5713] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] fstat(3, [pid 5713] <... open resumed>) = 5 [pid 5705] <... exit_group resumed>) = ? [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5713] ftruncate(5, 33587195 [pid 5002] getdents64(3, [pid 5713] <... ftruncate resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5713] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5713] <... open resumed>) = 6 [pid 5705] +++ exited with 0 +++ [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 186.456170][ T5714] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5713] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5002] lstat("./58/binderfs", [pid 5713] <... open resumed>) = 7 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5705, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- [pid 5713] sendfile(6, 7, NULL, 281474978811909 [pid 5002] unlink("./58/binderfs" [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 5002] <... unlink resumed>) = 0 [pid 4999] <... restart_syscall resumed>) = 0 [pid 5002] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./57/binderfs" [pid 5703] <... sendfile resumed>) = 1048576 [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5703] exit_group(0) = ? [pid 5703] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5703, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5000] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./58/binderfs") = 0 [pid 5000] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./57/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./57/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./57/file1") = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./57") = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 5000] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] mkdir("./58", 0777 [pid 5002] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./58/file1", [pid 5002] lstat("./58/file1", [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5715 attached [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5715 [pid 5715] chdir("./58" [pid 5002] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5715] <... chdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./58/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5715] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] openat(AT_FDCWD, "./58/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... openat resumed>) = 4 [pid 5715] <... prctl resumed>) = 0 [pid 5002] <... openat resumed>) = 4 [pid 5000] fstat(4, [pid 5715] setpgid(0, 0 [pid 5002] fstat(4, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5715] <... setpgid resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, [pid 5715] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] getdents64(4, [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5715] <... openat resumed>) = 3 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, [pid 5715] write(3, "1000", 4 [pid 5002] getdents64(4, [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5715] <... write resumed>) = 4 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4 [pid 5715] close(3 [pid 5002] close(4 [pid 5000] <... close resumed>) = 0 [pid 5715] <... close resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5000] rmdir("./58/file1" [pid 5715] symlink("/dev/binderfs", "./binderfs" [pid 5002] rmdir("./58/file1" [pid 5000] <... rmdir resumed>) = 0 [pid 5715] <... symlink resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5000] getdents64(3, [pid 5715] memfd_create("syzkaller", 0 [pid 5002] getdents64(3, [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5715] <... memfd_create resumed>) = 3 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3 [pid 5715] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] close(3 [pid 5000] <... close resumed>) = 0 [pid 5715] <... mmap resumed>) = 0x7f18ca796000 [pid 5002] <... close resumed>) = 0 [pid 5000] rmdir("./58" [pid 5002] rmdir("./58" [pid 5000] <... rmdir resumed>) = 0 [pid 5710] <... sendfile resumed>) = 1048576 [pid 5002] <... rmdir resumed>) = 0 [pid 5000] mkdir("./59", 0777 [pid 5002] mkdir("./59", 0777 [pid 5000] <... mkdir resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5002] <... openat resumed>) = 3 [pid 5000] <... openat resumed>) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5710] exit_group(0 [pid 5002] close(3 [pid 5000] close(3 [pid 5710] <... exit_group resumed>) = ? [pid 5002] <... close resumed>) = 0 [pid 5715] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5716 [pid 5000] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5710] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5710, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5717 ./strace-static-x86_64: Process 5716 attached [pid 4997] umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5716] chdir("./59" [pid 4997] <... openat resumed>) = 3 [pid 5716] <... chdir resumed>) = 0 [pid 4997] fstat(3, [pid 5716] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5717 attached ) = 0 [pid 5715] <... write resumed>) = 2097152 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5716] setpgid(0, 0 [pid 4997] getdents64(3, [pid 5716] <... setpgid resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5716] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4997] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5716] <... openat resumed>) = 3 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5716] write(3, "1000", 4 [pid 4997] lstat("./57/binderfs", [pid 5716] <... write resumed>) = 4 [pid 5716] close(3 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5717] chdir("./59" [pid 5716] <... close resumed>) = 0 [pid 4997] unlink("./57/binderfs" [pid 5717] <... chdir resumed>) = 0 [pid 5716] symlink("/dev/binderfs", "./binderfs" [pid 5717] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5716] <... symlink resumed>) = 0 [pid 4997] <... unlink resumed>) = 0 [pid 5717] <... prctl resumed>) = 0 [pid 5716] memfd_create("syzkaller", 0 [pid 4997] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5717] setpgid(0, 0 [pid 5716] <... memfd_create resumed>) = 3 [pid 5717] <... setpgid resumed>) = 0 [pid 5716] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5717] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5717] write(3, "1000", 4) = 4 [pid 5717] close(3) = 0 [pid 5716] <... mmap resumed>) = 0x7f18ca796000 [pid 5717] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5717] memfd_create("syzkaller", 0) = 3 [pid 5717] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5715] munmap(0x7f18ca796000, 2097152) = 0 [pid 5715] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5715] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5715] close(3) = 0 [pid 5715] mkdir("./file1", 0777) = 0 [pid 5715] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5716] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 186.979730][ T5715] loop2: detected capacity change from 0 to 4096 [pid 5717] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5717] munmap(0x7f18ca796000, 2097152) = 0 [ 187.039287][ T5715] NILFS (loop2): invalid segment: Checksum error in segment payload [ 187.055651][ T5715] NILFS (loop2): trying rollback from an earlier position [pid 5717] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5717] ioctl(4, LOOP_SET_FD, 3 [pid 5716] <... write resumed>) = 2097152 [pid 4997] <... umount2 resumed>) = 0 [pid 5717] <... ioctl resumed>) = 0 [pid 5716] munmap(0x7f18ca796000, 2097152 [pid 4997] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5717] close(3 [pid 5716] <... munmap resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5717] <... close resumed>) = 0 [pid 5716] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4997] lstat("./57/file1", [pid 5717] mkdir("./file1", 0777 [pid 5716] <... openat resumed>) = 4 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5717] <... mkdir resumed>) = 0 [pid 5716] ioctl(4, LOOP_SET_FD, 3 [pid 4997] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5717] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5715] <... mount resumed>) = 0 [pid 5709] <... sendfile resumed>) = 1048576 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./57/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./57/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./57") = 0 [pid 4997] mkdir("./58", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5716] <... ioctl resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [pid 5716] close(3 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5716] <... close resumed>) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5716] mkdir("./file1", 0777 [pid 4997] close(3 [pid 5715] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5709] exit_group(0 [pid 5715] <... openat resumed>) = 3 [pid 5709] <... exit_group resumed>) = ? [pid 5715] chdir("./file1" [pid 5709] +++ exited with 0 +++ [pid 4997] <... close resumed>) = 0 [pid 5715] <... chdir resumed>) = 0 [pid 5715] ioctl(4, LOOP_CLR_FD) = 0 [pid 5715] close(4) = 0 [pid 5715] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5709, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=29 /* 0.29 s */} --- [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5715] <... open resumed>) = 4 [pid 4998] umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5715] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5715] <... open resumed>) = 5 [ 187.111892][ T5717] loop3: detected capacity change from 0 to 4096 [ 187.134626][ T5715] NILFS (loop2): recovery complete [ 187.135828][ T5716] loop5: detected capacity change from 0 to 4096 [ 187.143842][ T5718] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5715] ftruncate(5, 33587195) = 0 [pid 5715] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5715] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 ./strace-static-x86_64: Process 5719 attached [pid 5715] sendfile(6, 7, NULL, 281474978811909 [pid 5719] chdir("./58") = 0 [pid 5716] <... mkdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5719 [pid 5719] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5716] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] <... openat resumed>) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, [pid 5719] <... prctl resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5719] setpgid(0, 0 [pid 4998] umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5719] <... setpgid resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5719] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4998] lstat("./57/binderfs", [pid 5719] write(3, "1000", 4) = 4 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5719] close(3 [pid 4998] unlink("./57/binderfs" [pid 5719] <... close resumed>) = 0 [pid 5719] symlink("/dev/binderfs", "./binderfs" [ 187.175796][ T5717] NILFS (loop3): invalid segment: Checksum error in segment payload [ 187.215704][ T5716] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 4998] <... unlink resumed>) = 0 [pid 5719] <... symlink resumed>) = 0 [pid 5719] memfd_create("syzkaller", 0) = 3 [pid 5719] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4998] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 187.233530][ T5717] NILFS (loop3): trying rollback from an earlier position [ 187.254317][ T5716] NILFS (loop5): trying rollback from an earlier position [pid 5719] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5717] <... mount resumed>) = 0 [pid 5717] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5717] chdir("./file1") = 0 [pid 5717] ioctl(4, LOOP_CLR_FD) = 0 [pid 5717] close(4) = 0 [pid 5719] munmap(0x7f18ca796000, 2097152) = 0 [pid 5719] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 187.326726][ T5717] NILFS (loop3): recovery complete [ 187.345663][ T5716] NILFS (loop5): recovery complete [ 187.362954][ T5720] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5719] ioctl(4, LOOP_SET_FD, 3 [pid 5717] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] <... umount2 resumed>) = 0 [pid 5717] <... open resumed>) = 4 [pid 5717] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5717] ftruncate(5, 33587195) = 0 [pid 5717] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5716] <... mount resumed>) = 0 [pid 4998] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5717] <... open resumed>) = 6 [pid 5716] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5717] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5716] <... openat resumed>) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5717] <... open resumed>) = 7 [pid 5716] chdir("./file1" [pid 4998] lstat("./57/file1", [pid 5717] sendfile(6, 7, NULL, 281474978811909 [pid 5716] <... chdir resumed>) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5716] ioctl(4, LOOP_CLR_FD) = 0 [pid 5716] close(4) = 0 [pid 5716] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5719] <... ioctl resumed>) = 0 [pid 5719] close(3 [pid 5716] <... open resumed>) = 4 [pid 4998] umount2("./57/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5719] <... close resumed>) = 0 [pid 5716] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5719] mkdir("./file1", 0777 [pid 5716] <... open resumed>) = 5 [pid 4998] openat(AT_FDCWD, "./57/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5719] <... mkdir resumed>) = 0 [pid 5716] ftruncate(5, 33587195 [pid 4998] <... openat resumed>) = 4 [pid 5719] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5716] <... ftruncate resumed>) = 0 [ 187.392500][ T5719] loop0: detected capacity change from 0 to 4096 [ 187.415675][ T5721] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] fstat(4, [pid 5716] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5716] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4998] getdents64(4, [pid 5716] <... open resumed>) = 7 [pid 5716] sendfile(6, 7, NULL, 281474978811909 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5713] <... sendfile resumed>) = 1048576 [pid 5713] exit_group(0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./57/file1" [pid 5713] <... exit_group resumed>) = ? [pid 4998] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./57") = 0 [pid 4998] mkdir("./58", 0777 [pid 5713] +++ exited with 0 +++ [pid 4998] <... mkdir resumed>) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5713, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5001] <... restart_syscall resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [ 187.493881][ T5719] NILFS (loop0): invalid segment: Checksum error in segment payload [ 187.501944][ T5719] NILFS (loop0): trying rollback from an earlier position [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] close(3 [pid 5001] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... close resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5722 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./58/binderfs") = 0 [pid 5001] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5722 attached [ 187.589496][ T5719] NILFS (loop0): recovery complete [pid 5722] chdir("./58") = 0 [pid 5722] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5719] <... mount resumed>) = 0 [pid 5722] <... prctl resumed>) = 0 [pid 5719] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5722] setpgid(0, 0 [pid 5719] <... openat resumed>) = 3 [pid 5722] <... setpgid resumed>) = 0 [pid 5719] chdir("./file1" [pid 5722] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5719] <... chdir resumed>) = 0 [pid 5722] <... openat resumed>) = 3 [pid 5719] ioctl(4, LOOP_CLR_FD [pid 5722] write(3, "1000", 4 [pid 5719] <... ioctl resumed>) = 0 [pid 5722] <... write resumed>) = 4 [pid 5719] close(4 [pid 5722] close(3 [pid 5719] <... close resumed>) = 0 [pid 5722] <... close resumed>) = 0 [pid 5719] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5722] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5722] memfd_create("syzkaller", 0) = 3 [pid 5722] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5719] <... open resumed>) = 4 [pid 5719] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [ 187.610464][ T5723] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5719] ftruncate(5, 33587195) = 0 [pid 5719] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5719] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5719] sendfile(6, 7, NULL, 281474978811909 [pid 5722] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./58/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./58/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./58/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5722] <... write resumed>) = 2097152 [pid 5001] rmdir("./58" [pid 5722] munmap(0x7f18ca796000, 2097152 [pid 5001] <... rmdir resumed>) = 0 [pid 5722] <... munmap resumed>) = 0 [pid 5001] mkdir("./59", 0777 [pid 5722] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5001] <... mkdir resumed>) = 0 [pid 5722] <... openat resumed>) = 4 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5722] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... openat resumed>) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5724 ./strace-static-x86_64: Process 5724 attached [pid 5724] chdir("./59" [pid 5722] <... ioctl resumed>) = 0 [pid 5724] <... chdir resumed>) = 0 [pid 5722] close(3 [pid 5724] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5722] <... close resumed>) = 0 [pid 5724] <... prctl resumed>) = 0 [pid 5722] mkdir("./file1", 0777 [pid 5724] setpgid(0, 0 [pid 5722] <... mkdir resumed>) = 0 [pid 5724] <... setpgid resumed>) = 0 [pid 5724] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5722] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5724] <... openat resumed>) = 3 [ 187.818079][ T5722] loop1: detected capacity change from 0 to 4096 [pid 5724] write(3, "1000", 4) = 4 [pid 5724] close(3) = 0 [pid 5724] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5724] memfd_create("syzkaller", 0) = 3 [pid 5724] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 187.907096][ T5722] NILFS (loop1): invalid segment: Checksum error in segment payload [ 187.932459][ T5722] NILFS (loop1): trying rollback from an earlier position [pid 5724] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5722] <... mount resumed>) = 0 [pid 5724] munmap(0x7f18ca796000, 2097152 [pid 5722] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5724] <... munmap resumed>) = 0 [pid 5722] <... openat resumed>) = 3 [pid 5724] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5722] chdir("./file1" [pid 5724] <... openat resumed>) = 4 [pid 5722] <... chdir resumed>) = 0 [ 187.994145][ T5722] NILFS (loop1): recovery complete [ 188.013846][ T5725] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5724] ioctl(4, LOOP_SET_FD, 3 [pid 5722] ioctl(4, LOOP_CLR_FD) = 0 [pid 5722] close(4) = 0 [pid 5724] <... ioctl resumed>) = 0 [pid 5724] close(3) = 0 [pid 5724] mkdir("./file1", 0777) = 0 [pid 5724] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5722] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5722] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5722] ftruncate(5, 33587195) = 0 [pid 5722] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [ 188.042611][ T5724] loop4: detected capacity change from 0 to 4096 [pid 5722] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 188.090484][ T5724] NILFS (loop4): invalid segment: Checksum error in segment payload [ 188.148706][ T5724] NILFS (loop4): trying rollback from an earlier position [pid 5722] sendfile(6, 7, NULL, 281474978811909 [pid 5715] <... sendfile resumed>) = 1048576 [pid 5715] exit_group(0) = ? [pid 5715] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5715, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [ 188.224178][ T5724] NILFS (loop4): recovery complete [pid 5724] <... mount resumed>) = 0 [pid 5724] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4999] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5724] <... openat resumed>) = 3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5724] chdir("./file1" [pid 4999] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5724] <... chdir resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5724] ioctl(4, LOOP_CLR_FD [pid 4999] fstat(3, [pid 5724] <... ioctl resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5724] close(4 [pid 4999] getdents64(3, [pid 5724] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5724] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4999] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5724] <... open resumed>) = 4 [pid 4999] lstat("./58/binderfs", [pid 5724] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5724] <... open resumed>) = 5 [pid 4999] unlink("./58/binderfs" [pid 5724] ftruncate(5, 33587195 [pid 4999] <... unlink resumed>) = 0 [pid 5724] <... ftruncate resumed>) = 0 [pid 4999] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5724] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [ 188.275681][ T5726] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5724] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5724] sendfile(6, 7, NULL, 281474978811909 [pid 5716] <... sendfile resumed>) = 1048576 [pid 5716] exit_group(0) = ? [pid 5716] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5716, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 5002] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5717] <... sendfile resumed>) = 1048576 [pid 5002] unlink("./59/binderfs" [pid 4999] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5717] exit_group(0 [pid 5002] <... unlink resumed>) = 0 [pid 5002] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5717] <... exit_group resumed>) = ? [pid 5717] +++ exited with 0 +++ [pid 4999] lstat("./58/file1", [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5717, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] openat(AT_FDCWD, "./58/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... openat resumed>) = 3 [pid 4999] <... openat resumed>) = 4 [pid 5000] fstat(3, [pid 4999] fstat(4, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 4999] getdents64(4, [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] getdents64(4, [pid 5000] lstat("./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] unlink("./59/binderfs" [pid 4999] close(4 [pid 5000] <... unlink resumed>) = 0 [pid 5000] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./58/file1") = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./58") = 0 [pid 4999] mkdir("./59", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5727 ./strace-static-x86_64: Process 5727 attached [pid 5727] chdir("./59") = 0 [pid 5727] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5727] setpgid(0, 0) = 0 [pid 5727] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5727] write(3, "1000", 4) = 4 [pid 5002] <... umount2 resumed>) = 0 [pid 5727] close(3) = 0 [pid 5727] symlink("/dev/binderfs", "./binderfs" [pid 5719] <... sendfile resumed>) = 1048576 [pid 5727] <... symlink resumed>) = 0 [pid 5719] exit_group(0 [pid 5727] memfd_create("syzkaller", 0 [pid 5719] <... exit_group resumed>) = ? [pid 5000] <... umount2 resumed>) = 0 [pid 5002] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5719] +++ exited with 0 +++ [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] lstat("./59/file1", [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] lstat("./59/file1", [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5719, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5002] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] restart_syscall(<... resuming interrupted clone ...> [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... restart_syscall resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./59/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5727] <... memfd_create resumed>) = 3 [pid 5002] <... openat resumed>) = 4 [pid 5000] openat(AT_FDCWD, "./59/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5727] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] fstat(4, [pid 5000] <... openat resumed>) = 4 [pid 4997] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] fstat(4, [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] getdents64(4, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5727] <... mmap resumed>) = 0x7f18ca796000 [pid 4997] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, [pid 4997] <... openat resumed>) = 3 [pid 5002] getdents64(4, [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] fstat(3, [pid 5002] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] getdents64(4, [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] close(4 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] getdents64(3, [pid 5002] <... close resumed>) = 0 [pid 5000] close(4 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] rmdir("./59/file1" [pid 5000] <... close resumed>) = 0 [pid 4997] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... rmdir resumed>) = 0 [pid 5000] rmdir("./59/file1" [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] getdents64(3, [pid 5000] <... rmdir resumed>) = 0 [pid 4997] lstat("./58/binderfs", [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] getdents64(3, [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] close(3 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] unlink("./58/binderfs" [pid 5002] <... close resumed>) = 0 [pid 5000] close(3 [pid 4997] <... unlink resumed>) = 0 [pid 5002] rmdir("./59" [pid 5000] <... close resumed>) = 0 [pid 4997] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... rmdir resumed>) = 0 [pid 5000] rmdir("./59" [pid 5002] mkdir("./60", 0777 [pid 5000] <... rmdir resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 5000] mkdir("./60", 0777 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5000] <... mkdir resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5000] <... openat resumed>) = 3 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5002] close(3 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] <... close resumed>) = 0 [pid 5000] close(3 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5728 [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5729 ./strace-static-x86_64: Process 5728 attached [pid 5728] chdir("./60") = 0 [pid 5728] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5728] setpgid(0, 0) = 0 [pid 5728] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5728] write(3, "1000", 4) = 4 [pid 5728] close(3) = 0 [pid 5728] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5728] memfd_create("syzkaller", 0) = 3 [pid 5728] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5729 attached ) = 0x7f18ca796000 [pid 5729] chdir("./60") = 0 [pid 5729] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5729] setpgid(0, 0) = 0 [pid 5729] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5729] write(3, "1000", 4) = 4 [pid 5729] close(3) = 0 [pid 5729] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5729] memfd_create("syzkaller", 0) = 3 [pid 5729] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5727] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5728] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5729] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./58/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./58/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5728] <... write resumed>) = 2097152 [pid 4997] fstat(4, [pid 5728] munmap(0x7f18ca796000, 2097152 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, [pid 5728] <... munmap resumed>) = 0 [pid 5728] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5728] <... openat resumed>) = 4 [pid 5728] ioctl(4, LOOP_SET_FD, 3 [pid 4997] close(4) = 0 [pid 4997] rmdir("./58/file1" [pid 5727] <... write resumed>) = 2097152 [pid 4997] <... rmdir resumed>) = 0 [pid 5729] <... write resumed>) = 2097152 [pid 5728] <... ioctl resumed>) = 0 [pid 5727] munmap(0x7f18ca796000, 2097152 [pid 4997] getdents64(3, [pid 5729] munmap(0x7f18ca796000, 2097152 [pid 5728] close(3 [pid 5727] <... munmap resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5729] <... munmap resumed>) = 0 [pid 5728] <... close resumed>) = 0 [pid 5727] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4997] close(3 [pid 5729] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5728] mkdir("./file1", 0777 [pid 5727] <... openat resumed>) = 4 [pid 5729] <... openat resumed>) = 4 [pid 4997] <... close resumed>) = 0 [pid 5729] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5728] <... mkdir resumed>) = 0 [pid 4997] rmdir("./58" [pid 5728] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5727] ioctl(4, LOOP_SET_FD, 3 [pid 4997] <... rmdir resumed>) = 0 [pid 5729] close(3) = 0 [pid 5729] mkdir("./file1", 0777) = 0 [pid 5729] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4997] mkdir("./59", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 188.944561][ T5728] loop5: detected capacity change from 0 to 4096 [ 188.976379][ T5729] loop3: detected capacity change from 0 to 4096 [ 188.985161][ T5727] loop2: detected capacity change from 0 to 4096 [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5727] <... ioctl resumed>) = 0 [pid 5727] close(3) = 0 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5730 [pid 5727] mkdir("./file1", 0777) = 0 ./strace-static-x86_64: Process 5730 attached [pid 5730] chdir("./59") = 0 [pid 5730] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5730] setpgid(0, 0) = 0 [pid 5730] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5727] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5730] <... openat resumed>) = 3 [pid 5730] write(3, "1000", 4) = 4 [pid 5730] close(3) = 0 [pid 5730] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5730] memfd_create("syzkaller", 0) = 3 [pid 5730] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 189.020028][ T5728] NILFS (loop5): invalid segment: Checksum error in segment payload [ 189.036836][ T5729] NILFS (loop3): invalid segment: Checksum error in segment payload [ 189.039229][ T5728] NILFS (loop5): trying rollback from an earlier position [pid 5728] <... mount resumed>) = 0 [pid 5728] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5728] chdir("./file1") = 0 [pid 5728] ioctl(4, LOOP_CLR_FD) = 0 [pid 5728] close(4) = 0 [ 189.079488][ T5727] NILFS (loop2): invalid segment: Checksum error in segment payload [ 189.088902][ T5728] NILFS (loop5): recovery complete [ 189.093363][ T5729] NILFS (loop3): trying rollback from an earlier position [ 189.099819][ T5727] NILFS (loop2): trying rollback from an earlier position [ 189.108844][ T5731] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5730] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5728] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5728] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5728] ftruncate(5, 33587195) = 0 [pid 5728] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5728] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 189.176366][ T5727] NILFS (loop2): recovery complete [pid 5728] sendfile(6, 7, NULL, 281474978811909 [pid 5727] <... mount resumed>) = 0 [pid 5727] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5727] chdir("./file1") = 0 [pid 5727] ioctl(4, LOOP_CLR_FD) = 0 [pid 5727] close(4) = 0 [pid 5722] <... sendfile resumed>) = 1048576 [pid 5727] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5722] exit_group(0) = ? [pid 5722] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5722, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 4998] umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./58/binderfs" [pid 5727] <... open resumed>) = 4 [pid 4998] <... unlink resumed>) = 0 [pid 5727] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5727] <... open resumed>) = 5 [pid 5727] ftruncate(5, 33587195) = 0 [pid 5727] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5727] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 189.204618][ T5732] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.236213][ T5729] NILFS (loop3): recovery complete [pid 5727] sendfile(6, 7, NULL, 281474978811909 [pid 5730] <... write resumed>) = 2097152 [pid 5729] <... mount resumed>) = 0 [pid 5729] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5729] chdir("./file1" [pid 5730] munmap(0x7f18ca796000, 2097152 [pid 5729] <... chdir resumed>) = 0 [pid 5729] ioctl(4, LOOP_CLR_FD [pid 5730] <... munmap resumed>) = 0 [pid 5729] <... ioctl resumed>) = 0 [pid 5729] close(4) = 0 [pid 5730] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5730] ioctl(4, LOOP_SET_FD, 3 [pid 5729] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5729] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5729] ftruncate(5, 33587195) = 0 [pid 5729] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5729] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5729] sendfile(6, 7, NULL, 281474978811909 [pid 5730] <... ioctl resumed>) = 0 [ 189.292121][ T5733] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.331994][ T5730] loop0: detected capacity change from 0 to 4096 [pid 5730] close(3) = 0 [pid 5730] mkdir("./file1", 0777) = 0 [pid 5730] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5724] <... sendfile resumed>) = 1048576 [pid 5724] exit_group(0) = ? [pid 5724] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5724, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 189.426176][ T5730] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./58/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] umount2("./58/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] lstat("./59/binderfs", [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] openat(AT_FDCWD, "./58/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] unlink("./59/binderfs" [pid 4998] <... openat resumed>) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 189.487671][ T5730] NILFS (loop0): trying rollback from an earlier position [pid 4998] getdents64(4, [pid 5001] <... unlink resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./58/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./58") = 0 [pid 4998] mkdir("./59", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5734 [ 189.594901][ T5730] NILFS (loop0): recovery complete ./strace-static-x86_64: Process 5734 attached [pid 5730] <... mount resumed>) = 0 [pid 5730] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5734] chdir("./59") = 0 [pid 5730] <... openat resumed>) = 3 [pid 5734] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5730] chdir("./file1" [pid 5734] <... prctl resumed>) = 0 [pid 5730] <... chdir resumed>) = 0 [pid 5734] setpgid(0, 0 [pid 5730] ioctl(4, LOOP_CLR_FD [pid 5734] <... setpgid resumed>) = 0 [pid 5730] <... ioctl resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5734] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5730] close(4 [pid 5734] <... openat resumed>) = 3 [pid 5730] <... close resumed>) = 0 [pid 5730] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5734] write(3, "1000", 4 [pid 5730] <... open resumed>) = 4 [pid 5734] <... write resumed>) = 4 [ 189.629988][ T5735] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5730] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5734] close(3 [pid 5730] <... open resumed>) = 5 [pid 5734] <... close resumed>) = 0 [pid 5730] ftruncate(5, 33587195 [pid 5734] symlink("/dev/binderfs", "./binderfs" [pid 5730] <... ftruncate resumed>) = 0 [pid 5730] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5734] <... symlink resumed>) = 0 [pid 5734] memfd_create("syzkaller", 0 [pid 5730] <... open resumed>) = 6 [pid 5734] <... memfd_create resumed>) = 3 [pid 5730] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5734] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5730] <... open resumed>) = 7 [pid 5734] <... mmap resumed>) = 0x7f18ca796000 [pid 5730] sendfile(6, 7, NULL, 281474978811909 [pid 5001] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./59/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5734] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./59/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./59/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./59") = 0 [pid 5001] mkdir("./60", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5736 ./strace-static-x86_64: Process 5736 attached [pid 5736] chdir("./60") = 0 [pid 5736] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5736] setpgid(0, 0) = 0 [pid 5736] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5736] write(3, "1000", 4) = 4 [pid 5736] close(3) = 0 [pid 5736] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5734] <... write resumed>) = 2097152 [pid 5736] memfd_create("syzkaller", 0 [pid 5734] munmap(0x7f18ca796000, 2097152 [pid 5736] <... memfd_create resumed>) = 3 [pid 5736] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5734] <... munmap resumed>) = 0 [pid 5734] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5734] ioctl(4, LOOP_SET_FD, 3 [pid 5736] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5734] <... ioctl resumed>) = 0 [pid 5734] close(3) = 0 [ 189.871368][ T5734] loop1: detected capacity change from 0 to 4096 [pid 5734] mkdir("./file1", 0777) = 0 [pid 5734] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5736] <... write resumed>) = 2097152 [pid 5736] munmap(0x7f18ca796000, 2097152) = 0 [pid 5736] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 189.973232][ T5734] NILFS (loop1): invalid segment: Checksum error in segment payload [ 189.981596][ T5734] NILFS (loop1): trying rollback from an earlier position [pid 5736] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5736] close(3) = 0 [pid 5736] mkdir("./file1", 0777) = 0 [ 190.012860][ T5736] loop4: detected capacity change from 0 to 4096 [ 190.027894][ T5734] NILFS (loop1): recovery complete [pid 5736] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5734] <... mount resumed>) = 0 [pid 5734] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5734] chdir("./file1") = 0 [pid 5734] ioctl(4, LOOP_CLR_FD) = 0 [pid 5734] close(4) = 0 [pid 5734] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5734] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5734] ftruncate(5, 33587195) = 0 [ 190.069502][ T5737] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.098019][ T5736] NILFS (loop4): invalid segment: Checksum error in segment payload [ 190.106926][ T5736] NILFS (loop4): trying rollback from an earlier position [pid 5734] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5734] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 190.173599][ T5736] NILFS (loop4): recovery complete [pid 5734] sendfile(6, 7, NULL, 281474978811909 [pid 5736] <... mount resumed>) = 0 [pid 5736] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5728] <... sendfile resumed>) = 1048576 [pid 5736] chdir("./file1" [pid 5728] exit_group(0) = ? [pid 5736] <... chdir resumed>) = 0 [pid 5728] +++ exited with 0 +++ [pid 5736] ioctl(4, LOOP_CLR_FD [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5728, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [pid 5736] <... ioctl resumed>) = 0 [pid 5736] close(4) = 0 [pid 5002] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5736] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5736] <... open resumed>) = 4 [pid 5002] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5736] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] <... openat resumed>) = 3 [pid 5736] <... open resumed>) = 5 [pid 5002] fstat(3, [pid 5736] ftruncate(5, 33587195 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 190.218016][ T5738] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5736] <... ftruncate resumed>) = 0 [pid 5002] getdents64(3, [pid 5736] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5736] <... open resumed>) = 6 [pid 5002] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5736] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5736] <... open resumed>) = 7 [pid 5002] lstat("./60/binderfs", [pid 5736] sendfile(6, 7, NULL, 281474978811909 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./60/binderfs") = 0 [pid 5002] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5727] <... sendfile resumed>) = 1048576 [pid 5727] exit_group(0) = ? [pid 5727] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5727, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=22 /* 0.22 s */} --- [pid 4999] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5729] <... sendfile resumed>) = 1048576 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5729] exit_group(0 [pid 4999] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5729] <... exit_group resumed>) = ? [pid 5729] +++ exited with 0 +++ [pid 4999] <... openat resumed>) = 3 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5729, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(3, [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... openat resumed>) = 3 [pid 5000] fstat(3, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./59/binderfs", [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] unlink("./59/binderfs" [pid 5000] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... unlink resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./60/binderfs", [pid 4999] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./60/binderfs") = 0 [pid 5000] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./60/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./60/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./60/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./60") = 0 [pid 5002] mkdir("./61", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5739 ./strace-static-x86_64: Process 5739 attached [pid 5739] chdir("./61") = 0 [pid 5739] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5739] setpgid(0, 0) = 0 [pid 5739] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5739] write(3, "1000", 4) = 4 [pid 5739] close(3) = 0 [pid 5739] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5739] memfd_create("syzkaller", 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5739] <... memfd_create resumed>) = 3 [pid 5739] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4999] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./59/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./59/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./59/file1" [pid 5000] <... umount2 resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./59") = 0 [pid 4999] mkdir("./60", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5000] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 5000] lstat("./60/file1", [pid 4999] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5740 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5739] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] openat(AT_FDCWD, "./60/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, ./strace-static-x86_64: Process 5740 attached [pid 5740] chdir("./60" [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, [pid 5740] <... chdir resumed>) = 0 [pid 5740] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5740] <... prctl resumed>) = 0 [pid 5000] close(4 [pid 5740] setpgid(0, 0 [pid 5000] <... close resumed>) = 0 [pid 5740] <... setpgid resumed>) = 0 [pid 5000] rmdir("./60/file1" [pid 5740] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] <... rmdir resumed>) = 0 [pid 5740] <... openat resumed>) = 3 [pid 5000] getdents64(3, [pid 5740] write(3, "1000", 4) = 4 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5740] close(3 [pid 5000] close(3 [pid 5740] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5740] symlink("/dev/binderfs", "./binderfs" [pid 5000] rmdir("./60" [pid 5740] <... symlink resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5740] memfd_create("syzkaller", 0) = 3 [pid 5000] mkdir("./61", 0777 [pid 5740] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] <... mkdir resumed>) = 0 [pid 5740] <... mmap resumed>) = 0x7f18ca796000 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 5739] <... write resumed>) = 2097152 [pid 5739] munmap(0x7f18ca796000, 2097152) = 0 [pid 5739] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5000] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5739] ioctl(4, LOOP_SET_FD, 3 [pid 5740] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5741 ./strace-static-x86_64: Process 5741 attached [pid 5741] chdir("./61") = 0 [pid 5741] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5741] setpgid(0, 0) = 0 [pid 5741] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5741] write(3, "1000", 4) = 4 [pid 5741] close(3) = 0 [pid 5741] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5741] memfd_create("syzkaller", 0) = 3 [pid 5741] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5739] <... ioctl resumed>) = 0 [pid 5741] <... mmap resumed>) = 0x7f18ca796000 [pid 5739] close(3) = 0 [pid 5739] mkdir("./file1", 0777) = 0 [ 190.794900][ T5739] loop5: detected capacity change from 0 to 4096 [pid 5739] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5730] <... sendfile resumed>) = 1048576 [pid 5730] exit_group(0) = ? [pid 5730] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5730, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- [pid 4997] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./59/binderfs", [pid 5741] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./59/binderfs") = 0 [pid 4997] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5740] <... write resumed>) = 2097152 [ 190.858215][ T5739] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5740] munmap(0x7f18ca796000, 2097152) = 0 [pid 5740] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5740] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5740] close(3) = 0 [pid 5740] mkdir("./file1", 0777) = 0 [pid 5740] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5741] <... write resumed>) = 2097152 [ 190.935296][ T5740] loop2: detected capacity change from 0 to 4096 [ 190.943712][ T5739] NILFS (loop5): trying rollback from an earlier position [pid 5741] munmap(0x7f18ca796000, 2097152) = 0 [pid 5741] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5741] ioctl(4, LOOP_SET_FD, 3) = 0 [ 190.996995][ T5740] NILFS (loop2): invalid segment: Checksum error in segment payload [ 191.011981][ T5739] NILFS (loop5): recovery complete [ 191.018571][ T5741] loop3: detected capacity change from 0 to 4096 [ 191.028520][ T5740] NILFS (loop2): trying rollback from an earlier position [pid 5741] close(3) = 0 [pid 5739] <... mount resumed>) = 0 [pid 5741] mkdir("./file1", 0777 [pid 5739] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5741] <... mkdir resumed>) = 0 [pid 5739] <... openat resumed>) = 3 [pid 5741] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5739] chdir("./file1") = 0 [pid 5739] ioctl(4, LOOP_CLR_FD) = 0 [pid 5739] close(4) = 0 [pid 5739] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5739] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5739] ftruncate(5, 33587195) = 0 [pid 5739] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5739] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5739] sendfile(6, 7, NULL, 281474978811909 [pid 4997] <... umount2 resumed>) = 0 [ 191.039359][ T5742] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.058245][ T5741] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 4997] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./59/file1", [pid 5734] <... sendfile resumed>) = 1048576 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./59/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5734] exit_group(0 [pid 4997] close(4 [pid 5734] <... exit_group resumed>) = ? [pid 4997] <... close resumed>) = 0 [pid 4997] rmdir("./59/file1" [pid 5734] +++ exited with 0 +++ [pid 4997] <... rmdir resumed>) = 0 [pid 4997] getdents64(3, [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5734, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 4997] close(3 [pid 4998] <... restart_syscall resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 4997] rmdir("./59") = 0 [pid 4998] umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] mkdir("./60", 0777 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... mkdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4998] <... openat resumed>) = 3 [pid 4997] <... openat resumed>) = 3 [pid 4998] fstat(3, [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] getdents64(3, [pid 4997] close(3 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] <... close resumed>) = 0 [pid 4998] umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./59/binderfs", [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5744 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./59/binderfs") = 0 [pid 4998] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5744 attached [pid 5744] chdir("./60") = 0 [pid 5744] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5744] setpgid(0, 0) = 0 [pid 5744] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5744] write(3, "1000", 4) = 4 [pid 5744] close(3) = 0 [pid 5744] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5744] memfd_create("syzkaller", 0 [pid 5740] <... mount resumed>) = 0 [pid 5744] <... memfd_create resumed>) = 3 [pid 5740] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5744] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5740] <... openat resumed>) = 3 [pid 5744] <... mmap resumed>) = 0x7f18ca796000 [pid 5740] chdir("./file1") = 0 [ 191.111592][ T5741] NILFS (loop3): trying rollback from an earlier position [ 191.133413][ T5740] NILFS (loop2): recovery complete [ 191.150539][ T5743] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5740] ioctl(4, LOOP_CLR_FD) = 0 [pid 5740] close(4) = 0 [pid 5740] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5740] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5740] ftruncate(5, 33587195) = 0 [pid 5740] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5740] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5740] sendfile(6, 7, NULL, 281474978811909 [pid 5741] <... mount resumed>) = 0 [pid 5741] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5741] chdir("./file1") = 0 [pid 5741] ioctl(4, LOOP_CLR_FD [pid 5744] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5741] <... ioctl resumed>) = 0 [pid 5741] close(4) = 0 [pid 5741] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5741] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5736] <... sendfile resumed>) = 1048576 [pid 5741] ftruncate(5, 33587195 [ 191.227397][ T5741] NILFS (loop3): recovery complete [ 191.243437][ T5745] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5736] exit_group(0 [pid 5741] <... ftruncate resumed>) = 0 [pid 5736] <... exit_group resumed>) = ? [pid 5741] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5736] +++ exited with 0 +++ [pid 5741] <... open resumed>) = 6 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5736, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- [pid 5741] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5741] sendfile(6, 7, NULL, 281474978811909 [pid 5001] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5744] <... write resumed>) = 2097152 [pid 5001] <... openat resumed>) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./60/binderfs") = 0 [pid 5001] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5744] munmap(0x7f18ca796000, 2097152) = 0 [pid 5744] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5744] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5744] close(3) = 0 [pid 5744] mkdir("./file1", 0777) = 0 [ 191.376699][ T5744] loop0: detected capacity change from 0 to 4096 [ 191.401312][ T5744] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5744] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./59/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./59/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./59/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./59/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./59") = 0 [pid 4998] mkdir("./60", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [ 191.446817][ T5744] NILFS (loop0): trying rollback from an earlier position [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5746 [pid 5001] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5746 attached [pid 5746] chdir("./60") = 0 [pid 5001] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5746] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./60/file1", [pid 5746] <... prctl resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5746] setpgid(0, 0) = 0 [pid 5001] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5746] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5746] write(3, "1000", 4) = 4 [pid 5744] <... mount resumed>) = 0 [pid 5746] close(3 [pid 5744] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5746] <... close resumed>) = 0 [pid 5744] <... openat resumed>) = 3 [pid 5746] symlink("/dev/binderfs", "./binderfs" [pid 5744] chdir("./file1" [pid 5001] openat(AT_FDCWD, "./60/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5746] <... symlink resumed>) = 0 [pid 5746] memfd_create("syzkaller", 0 [pid 5744] <... chdir resumed>) = 0 [pid 5001] <... openat resumed>) = 4 [pid 5746] <... memfd_create resumed>) = 3 [pid 5746] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5744] ioctl(4, LOOP_CLR_FD [pid 5001] fstat(4, [pid 5746] <... mmap resumed>) = 0x7f18ca796000 [pid 5744] <... ioctl resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./60/file1" [pid 5744] close(4 [pid 5001] <... rmdir resumed>) = 0 [ 191.534869][ T5744] NILFS (loop0): recovery complete [ 191.542028][ T5747] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] getdents64(3, [pid 5746] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5744] <... close resumed>) = 0 [pid 5744] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5744] <... open resumed>) = 4 [pid 5001] close(3 [pid 5744] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5001] <... close resumed>) = 0 [pid 5744] <... open resumed>) = 5 [pid 5001] rmdir("./60" [pid 5746] <... write resumed>) = 2097152 [pid 5744] ftruncate(5, 33587195 [pid 5001] <... rmdir resumed>) = 0 [pid 5744] <... ftruncate resumed>) = 0 [pid 5001] mkdir("./61", 0777 [pid 5744] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5001] <... mkdir resumed>) = 0 [pid 5744] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5744] <... open resumed>) = 7 [pid 5001] <... openat resumed>) = 3 [pid 5744] sendfile(6, 7, NULL, 281474978811909 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5748 ./strace-static-x86_64: Process 5748 attached [pid 5748] chdir("./61" [pid 5746] munmap(0x7f18ca796000, 2097152 [pid 5748] <... chdir resumed>) = 0 [pid 5748] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5746] <... munmap resumed>) = 0 [pid 5748] <... prctl resumed>) = 0 [pid 5746] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5746] ioctl(4, LOOP_SET_FD, 3 [pid 5748] setpgid(0, 0) = 0 [pid 5748] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5748] write(3, "1000", 4) = 4 [pid 5748] close(3) = 0 [pid 5748] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5748] memfd_create("syzkaller", 0) = 3 [pid 5748] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5746] <... ioctl resumed>) = 0 [pid 5746] close(3) = 0 [pid 5746] mkdir("./file1", 0777) = 0 [ 191.709761][ T5746] loop1: detected capacity change from 0 to 4096 [pid 5746] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5748] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5748] munmap(0x7f18ca796000, 2097152) = 0 [ 191.798254][ T5746] NILFS (loop1): invalid segment: Checksum error in segment payload [ 191.828183][ T5746] NILFS (loop1): trying rollback from an earlier position [pid 5748] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5748] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5748] close(3) = 0 [pid 5748] mkdir("./file1", 0777) = 0 [ 191.885731][ T5748] loop4: detected capacity change from 0 to 4096 [pid 5748] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5746] <... mount resumed>) = 0 [pid 5746] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5746] chdir("./file1") = 0 [pid 5746] ioctl(4, LOOP_CLR_FD) = 0 [ 191.933084][ T5746] NILFS (loop1): recovery complete [ 191.950945][ T5749] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.965186][ T5748] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5746] close(4) = 0 [pid 5746] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5746] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5746] ftruncate(5, 33587195) = 0 [pid 5746] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5746] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 191.981727][ T5748] NILFS (loop4): trying rollback from an earlier position [ 192.082772][ T5748] NILFS (loop4): recovery complete [pid 5746] sendfile(6, 7, NULL, 281474978811909 [pid 5748] <... mount resumed>) = 0 [pid 5748] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5748] chdir("./file1") = 0 [ 192.113083][ T5750] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5748] ioctl(4, LOOP_CLR_FD) = 0 [pid 5748] close(4) = 0 [pid 5748] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5748] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5748] ftruncate(5, 33587195) = 0 [pid 5748] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5748] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5748] sendfile(6, 7, NULL, 281474978811909 [pid 5741] <... sendfile resumed>) = 1048576 [pid 5741] exit_group(0) = ? [pid 5741] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5741, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./61/binderfs") = 0 [pid 5000] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5739] <... sendfile resumed>) = 1048576 [pid 5739] exit_group(0) = ? [pid 5739] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5739, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5002] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./61/binderfs") = 0 [pid 5002] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5740] <... sendfile resumed>) = 1048576 [pid 5740] exit_group(0) = ? [pid 5740] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5740, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 4999] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./60/binderfs") = 0 [pid 4999] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./61/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./61/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./61/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./61") = 0 [pid 5000] mkdir("./62", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] lstat("./60/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5751 [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./61/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] openat(AT_FDCWD, "./60/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... openat resumed>) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, ./strace-static-x86_64: Process 5751 attached 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5751] chdir("./62" [pid 4999] close(4 [pid 5751] <... chdir resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5751] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] rmdir("./60/file1" [pid 5751] <... prctl resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... rmdir resumed>) = 0 [pid 5751] setpgid(0, 0 [pid 5002] openat(AT_FDCWD, "./61/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] getdents64(3, [pid 5751] <... setpgid resumed>) = 0 [pid 5002] <... openat resumed>) = 4 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5751] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] fstat(4, [pid 4999] close(3 [pid 5751] <... openat resumed>) = 3 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... close resumed>) = 0 [pid 5751] write(3, "1000", 4 [pid 4999] rmdir("./60" [pid 5751] <... write resumed>) = 4 [pid 5002] getdents64(4, [pid 4999] <... rmdir resumed>) = 0 [pid 5751] close(3 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] mkdir("./61", 0777 [pid 5751] <... close resumed>) = 0 [pid 5002] getdents64(4, [pid 4999] <... mkdir resumed>) = 0 [pid 5751] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5751] <... symlink resumed>) = 0 [pid 5744] <... sendfile resumed>) = 1048576 [pid 5002] close(4 [pid 4999] <... openat resumed>) = 3 [pid 5751] memfd_create("syzkaller", 0 [pid 5744] exit_group(0 [pid 5002] <... close resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5751] <... memfd_create resumed>) = 3 [pid 5744] <... exit_group resumed>) = ? [pid 5002] rmdir("./61/file1" [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5751] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] close(3 [pid 5751] <... mmap resumed>) = 0x7f18ca796000 [pid 5744] +++ exited with 0 +++ [pid 5002] <... rmdir resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5002] getdents64(3, [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5744, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] restart_syscall(<... resuming interrupted clone ...> [pid 5002] close(3 [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5752 [pid 4997] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 5752 attached [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./61" [pid 4997] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... rmdir resumed>) = 0 [pid 5002] mkdir("./62", 0777 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5752] chdir("./61" [pid 5002] <... mkdir resumed>) = 0 [pid 4997] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5752] <... chdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4997] <... openat resumed>) = 3 [pid 5752] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... openat resumed>) = 3 [pid 4997] fstat(3, [pid 5752] <... prctl resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5752] setpgid(0, 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] getdents64(3, [pid 5752] <... setpgid resumed>) = 0 [pid 5002] close(3 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5752] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] <... close resumed>) = 0 [pid 4997] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5752] <... openat resumed>) = 3 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5752] write(3, "1000", 4 [pid 4997] lstat("./60/binderfs", [pid 5752] <... write resumed>) = 4 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5752] close(3 [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5753 [pid 4997] unlink("./60/binderfs" [pid 5752] <... close resumed>) = 0 [pid 4997] <... unlink resumed>) = 0 [pid 5752] symlink("/dev/binderfs", "./binderfs" [pid 5751] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4997] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5753 attached [pid 5752] <... symlink resumed>) = 0 [pid 5752] memfd_create("syzkaller", 0) = 3 [pid 5752] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5753] chdir("./62") = 0 [pid 5753] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5753] setpgid(0, 0) = 0 [pid 5753] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5753] write(3, "1000", 4) = 4 [pid 5752] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5753] close(3) = 0 [pid 5753] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5753] memfd_create("syzkaller", 0) = 3 [pid 5753] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5751] <... write resumed>) = 2097152 [pid 5753] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5751] munmap(0x7f18ca796000, 2097152) = 0 [pid 5751] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5751] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5751] close(3 [pid 5752] <... write resumed>) = 2097152 [pid 5751] <... close resumed>) = 0 [pid 5751] mkdir("./file1", 0777 [pid 5752] munmap(0x7f18ca796000, 2097152 [pid 5751] <... mkdir resumed>) = 0 [pid 5752] <... munmap resumed>) = 0 [pid 5752] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5752] ioctl(4, LOOP_SET_FD, 3 [ 192.833379][ T5751] loop3: detected capacity change from 0 to 4096 [pid 5751] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./60/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5752] <... ioctl resumed>) = 0 [pid 4997] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5753] <... write resumed>) = 2097152 [pid 5752] close(3 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5753] munmap(0x7f18ca796000, 2097152 [pid 5752] <... close resumed>) = 0 [pid 4997] openat(AT_FDCWD, "./60/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5753] <... munmap resumed>) = 0 [pid 5752] mkdir("./file1", 0777 [pid 4997] <... openat resumed>) = 4 [pid 5753] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4997] fstat(4, [pid 5753] <... openat resumed>) = 4 [pid 5752] <... mkdir resumed>) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5753] ioctl(4, LOOP_SET_FD, 3 [ 192.880656][ T5752] loop2: detected capacity change from 0 to 4096 [ 192.913275][ T5751] NILFS (loop3): invalid segment: Checksum error in segment payload [ 192.921519][ T5751] NILFS (loop3): trying rollback from an earlier position [pid 5752] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./60/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./60") = 0 [pid 4997] mkdir("./61", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5754 ./strace-static-x86_64: Process 5754 attached [pid 5754] chdir("./61") = 0 [pid 5754] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5754] setpgid(0, 0 [pid 5753] <... ioctl resumed>) = 0 [pid 5754] <... setpgid resumed>) = 0 [pid 5754] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5753] close(3 [pid 5754] write(3, "1000", 4) = 4 [pid 5753] <... close resumed>) = 0 [ 192.946964][ T5753] loop5: detected capacity change from 0 to 4096 [ 192.959286][ T5752] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5754] close(3 [pid 5753] mkdir("./file1", 0777 [pid 5754] <... close resumed>) = 0 [pid 5754] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5754] memfd_create("syzkaller", 0) = 3 [pid 5754] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5753] <... mkdir resumed>) = 0 [ 193.003079][ T5752] NILFS (loop2): trying rollback from an earlier position [pid 5753] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5748] <... sendfile resumed>) = 1048576 [pid 5754] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5752] <... mount resumed>) = 0 [pid 5748] exit_group(0) = ? [pid 5752] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5748] +++ exited with 0 +++ [pid 5752] <... openat resumed>) = 3 [pid 5752] chdir("./file1" [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5748, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5752] <... chdir resumed>) = 0 [ 193.053067][ T5753] NILFS (loop5): invalid segment: Checksum error in segment payload [ 193.055311][ T5751] NILFS (loop3): recovery complete [ 193.065261][ T5752] NILFS (loop2): recovery complete [ 193.071795][ T5753] NILFS (loop5): trying rollback from an earlier position [ 193.081487][ T5755] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5752] ioctl(4, LOOP_CLR_FD [pid 5001] <... restart_syscall resumed>) = 0 [pid 5753] <... mount resumed>) = 0 [pid 5752] <... ioctl resumed>) = 0 [pid 5752] close(4 [pid 5753] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5752] <... close resumed>) = 0 [pid 5746] <... sendfile resumed>) = 1048576 [pid 5746] exit_group(0) = ? [pid 5753] <... openat resumed>) = 3 [pid 5752] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5001] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5753] chdir("./file1" [pid 5752] <... open resumed>) = 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5753] <... chdir resumed>) = 0 [pid 5752] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5001] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5753] ioctl(4, LOOP_CLR_FD) = 0 [pid 5752] <... open resumed>) = 5 [pid 5001] <... openat resumed>) = 3 [pid 5753] close(4 [pid 5752] ftruncate(5, 33587195 [ 193.107468][ T5753] NILFS (loop5): recovery complete [ 193.115201][ T5756] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] fstat(3, [pid 5754] <... write resumed>) = 2097152 [pid 5753] <... close resumed>) = 0 [pid 5752] <... ftruncate resumed>) = 0 [pid 5751] <... mount resumed>) = 0 [pid 5746] +++ exited with 0 +++ [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5753] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5752] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5751] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5001] getdents64(3, [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5746, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- [pid 5753] <... open resumed>) = 4 [pid 5752] <... open resumed>) = 6 [pid 5751] <... openat resumed>) = 3 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5753] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5752] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5751] chdir("./file1" [pid 5001] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... restart_syscall resumed>) = 0 [pid 5753] <... open resumed>) = 5 [pid 5752] <... open resumed>) = 7 [pid 5751] <... chdir resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5753] ftruncate(5, 33587195 [pid 5752] sendfile(6, 7, NULL, 281474978811909 [pid 5751] ioctl(4, LOOP_CLR_FD [pid 5001] lstat("./61/binderfs", [pid 5753] <... ftruncate resumed>) = 0 [pid 5751] <... ioctl resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5751] close(4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5751] <... close resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5751] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] <... openat resumed>) = 3 [pid 5753] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5751] <... open resumed>) = 4 [pid 5001] unlink("./61/binderfs" [pid 4998] fstat(3, [pid 5753] <... open resumed>) = 6 [pid 5751] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5001] <... unlink resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5754] munmap(0x7f18ca796000, 2097152 [pid 5753] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5751] <... open resumed>) = 5 [pid 5001] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(3, [pid 5754] <... munmap resumed>) = 0 [pid 5753] <... open resumed>) = 7 [pid 5751] ftruncate(5, 33587195 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5754] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5753] sendfile(6, 7, NULL, 281474978811909 [pid 5751] <... ftruncate resumed>) = 0 [pid 4998] umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5754] <... openat resumed>) = 4 [pid 5751] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 193.153622][ T5757] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5754] ioctl(4, LOOP_SET_FD, 3 [pid 5751] <... open resumed>) = 6 [pid 4998] lstat("./60/binderfs", [pid 5751] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5751] <... open resumed>) = 7 [pid 4998] unlink("./60/binderfs" [pid 5751] sendfile(6, 7, NULL, 281474978811909 [pid 4998] <... unlink resumed>) = 0 [pid 4998] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5754] <... ioctl resumed>) = 0 [pid 5754] close(3) = 0 [pid 5754] mkdir("./file1", 0777) = 0 [ 193.197808][ T5754] loop0: detected capacity change from 0 to 4096 [ 193.296517][ T5754] NILFS (loop0): invalid segment: Checksum error in segment payload [ 193.332536][ T5754] NILFS (loop0): trying rollback from an earlier position [pid 5754] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./60/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./60/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = 0 [pid 4998] openat(AT_FDCWD, "./60/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, [pid 5001] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] getdents64(4, [pid 5001] lstat("./61/file1", [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 5001] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] close(4 [pid 5001] openat(AT_FDCWD, "./61/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] <... close resumed>) = 0 [pid 5001] <... openat resumed>) = 4 [pid 4998] rmdir("./60/file1" [pid 5001] fstat(4, [pid 4998] <... rmdir resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, [pid 5001] getdents64(4, [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] close(3) = 0 [pid 4998] rmdir("./60" [pid 5001] getdents64(4, [pid 4998] <... rmdir resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] mkdir("./61", 0777 [pid 5001] close(4 [pid 4998] <... mkdir resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5001] rmdir("./61/file1" [pid 4998] <... openat resumed>) = 3 [pid 5001] <... rmdir resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5001] getdents64(3, [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3 [pid 5001] close(3 [pid 4998] <... close resumed>) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./61" [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5758 [pid 5001] <... rmdir resumed>) = 0 [pid 5001] mkdir("./62", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5758 attached ) = -1 ENXIO (No such device or address) [pid 5758] chdir("./61" [ 193.473491][ T5754] NILFS (loop0): recovery complete [pid 5001] close(3 [pid 5758] <... chdir resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5758] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5758] <... prctl resumed>) = 0 [pid 5758] setpgid(0, 0) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x555556f7b690) = 5760 [pid 5758] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5758] write(3, "1000", 4) = 4 [pid 5758] close(3) = 0 [pid 5758] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5758] memfd_create("syzkaller", 0) = 3 [pid 5758] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5754] <... mount resumed>) = 0 [pid 5754] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5754] chdir("./file1") = 0 ./strace-static-x86_64: Process 5760 attached [pid 5754] ioctl(4, LOOP_CLR_FD) = 0 [pid 5760] chdir("./62" [pid 5754] close(4 [pid 5760] <... chdir resumed>) = 0 [pid 5754] <... close resumed>) = 0 [pid 5760] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5754] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5760] <... prctl resumed>) = 0 [pid 5754] <... open resumed>) = 4 [pid 5760] setpgid(0, 0 [pid 5754] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5760] <... setpgid resumed>) = 0 [pid 5754] <... open resumed>) = 5 [pid 5754] ftruncate(5, 33587195) = 0 [pid 5760] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5754] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5760] <... openat resumed>) = 3 [pid 5754] <... open resumed>) = 6 [pid 5760] write(3, "1000", 4 [pid 5754] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5760] <... write resumed>) = 4 [pid 5754] sendfile(6, 7, NULL, 281474978811909 [pid 5760] close(3) = 0 [ 193.527013][ T5759] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5760] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5758] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5760] memfd_create("syzkaller", 0) = 3 [pid 5760] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5758] <... write resumed>) = 2097152 [pid 5758] munmap(0x7f18ca796000, 2097152) = 0 [pid 5758] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5760] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5758] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5758] close(3) = 0 [pid 5758] mkdir("./file1", 0777) = 0 [ 193.671386][ T5758] loop1: detected capacity change from 0 to 4096 [ 193.746070][ T5758] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5758] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5760] <... write resumed>) = 2097152 [pid 5760] munmap(0x7f18ca796000, 2097152) = 0 [pid 5760] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5760] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5760] close(3) = 0 [ 193.793538][ T5758] NILFS (loop1): trying rollback from an earlier position [ 193.819263][ T5760] loop4: detected capacity change from 0 to 4096 [pid 5760] mkdir("./file1", 0777) = 0 [pid 5760] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5758] <... mount resumed>) = 0 [pid 5758] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5758] chdir("./file1") = 0 [ 193.875029][ T5758] NILFS (loop1): recovery complete [ 193.896090][ T5761] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5758] ioctl(4, LOOP_CLR_FD) = 0 [pid 5758] close(4) = 0 [pid 5758] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [ 193.921243][ T5760] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5758] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5758] ftruncate(5, 33587195) = 0 [pid 5758] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5758] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 193.965325][ T5760] NILFS (loop4): trying rollback from an earlier position [ 194.088839][ T5760] NILFS (loop4): recovery complete [pid 5758] sendfile(6, 7, NULL, 281474978811909 [pid 5760] <... mount resumed>) = 0 [pid 5760] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5760] chdir("./file1") = 0 [pid 5760] ioctl(4, LOOP_CLR_FD) = 0 [pid 5760] close(4) = 0 [ 194.144093][ T5762] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5760] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5760] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5760] ftruncate(5, 33587195) = 0 [pid 5760] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5760] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5760] sendfile(6, 7, NULL, 281474978811909 [pid 5751] <... sendfile resumed>) = 1048576 [pid 5751] exit_group(0 [pid 5753] <... sendfile resumed>) = 1048576 [pid 5751] <... exit_group resumed>) = ? [pid 5753] exit_group(0 [pid 5751] +++ exited with 0 +++ [pid 5753] <... exit_group resumed>) = ? [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5751, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 5000] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5753] +++ exited with 0 +++ [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5753, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5000] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 5000] <... openat resumed>) = 3 [pid 5002] <... restart_syscall resumed>) = 0 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 5002] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... openat resumed>) = 3 [pid 5000] lstat("./62/binderfs", [pid 5002] fstat(3, [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] unlink("./62/binderfs" [pid 5002] getdents64(3, [pid 5000] <... unlink resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./62/binderfs") = 0 [pid 5002] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5752] <... sendfile resumed>) = 1048576 [pid 5752] exit_group(0) = ? [pid 5752] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5752, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 4999] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./61/binderfs") = 0 [pid 4999] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5754] <... sendfile resumed>) = 1048576 [pid 5754] exit_group(0) = ? [pid 5754] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5754, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 4997] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./61/binderfs") = 0 [pid 4997] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./62/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./62/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./62/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./62" [pid 5002] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... rmdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] mkdir("./63", 0777 [pid 5002] lstat("./62/file1", [pid 5000] <... mkdir resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5002] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... openat resumed>) = 3 [pid 4999] <... umount2 resumed>) = 0 [pid 4997] <... umount2 resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4997] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] openat(AT_FDCWD, "./62/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... openat resumed>) = 4 [pid 5000] close(3 [pid 4997] lstat("./61/file1", [pid 5002] fstat(4, [pid 5000] <... close resumed>) = 0 [pid 4999] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] getdents64(4, [pid 4997] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] getdents64(4, [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5763 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./61/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] <... openat resumed>) = 4 [pid 4999] lstat("./61/file1", [pid 5002] close(4 [pid 4997] fstat(4, [pid 5002] <... close resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] rmdir("./62/file1" [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 4997] getdents64(4, [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] close(3 [pid 4997] getdents64(4, ./strace-static-x86_64: Process 5763 attached [pid 5763] chdir("./63") = 0 [pid 5763] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5002] <... close resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5763] setpgid(0, 0 [pid 5002] rmdir("./62" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] close(4 [pid 5002] <... rmdir resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 5002] mkdir("./63", 0777 [pid 4997] rmdir("./61/file1" [pid 5763] <... setpgid resumed>) = 0 [pid 5763] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4997] <... rmdir resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "./61/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] getdents64(3, [pid 5763] <... openat resumed>) = 3 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5763] write(3, "1000", 4 [pid 5002] <... openat resumed>) = 3 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 4999] <... openat resumed>) = 4 [pid 4997] close(3 [pid 5763] <... write resumed>) = 4 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] fstat(4, [pid 4997] <... close resumed>) = 0 [pid 5763] close(3) = 0 [pid 5002] close(3 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] rmdir("./61" [pid 5763] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5002] <... close resumed>) = 0 [pid 4999] getdents64(4, [pid 4997] <... rmdir resumed>) = 0 [pid 5763] memfd_create("syzkaller", 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] mkdir("./62", 0777 [pid 5763] <... memfd_create resumed>) = 3 [pid 5763] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4999] getdents64(4, [pid 4997] <... mkdir resumed>) = 0 [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5764 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4999] close(4) = 0 [pid 4999] rmdir("./61/file1" [pid 4997] <... openat resumed>) = 3 [pid 4999] <... rmdir resumed>) = 0 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 4999] getdents64(3, [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3 [pid 4997] close(3 [pid 4999] <... close resumed>) = 0 [pid 4997] <... close resumed>) = 0 ./strace-static-x86_64: Process 5764 attached [pid 4999] rmdir("./61" [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./62", 0777 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5765 [pid 5764] chdir("./63" [pid 4999] <... mkdir resumed>) = 0 [pid 5764] <... chdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5764] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] <... openat resumed>) = 3 [pid 5764] <... prctl resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5764] setpgid(0, 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5764] <... setpgid resumed>) = 0 [pid 4999] close(3 [pid 5764] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4999] <... close resumed>) = 0 [pid 5764] write(3, "1000", 4) = 4 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5765 attached [pid 5765] chdir("./62" [pid 5764] close(3 [pid 5765] <... chdir resumed>) = 0 [pid 5765] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5764] <... close resumed>) = 0 [pid 5765] <... prctl resumed>) = 0 [pid 5765] setpgid(0, 0 [pid 5764] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5766 [pid 5765] <... setpgid resumed>) = 0 [pid 5765] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5764] <... symlink resumed>) = 0 [pid 5765] <... openat resumed>) = 3 [pid 5764] memfd_create("syzkaller", 0 [pid 5765] write(3, "1000", 4 [pid 5764] <... memfd_create resumed>) = 3 [pid 5763] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5765] <... write resumed>) = 4 [pid 5764] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5765] close(3) = 0 [pid 5764] <... mmap resumed>) = 0x7f18ca796000 [pid 5765] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5765] memfd_create("syzkaller", 0) = 3 [pid 5765] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 ./strace-static-x86_64: Process 5766 attached [pid 5766] chdir("./62") = 0 [pid 5766] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5766] setpgid(0, 0) = 0 [pid 5765] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5766] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5766] write(3, "1000", 4) = 4 [pid 5766] close(3) = 0 [pid 5764] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5763] <... write resumed>) = 2097152 [pid 5766] symlink("/dev/binderfs", "./binderfs" [pid 5763] munmap(0x7f18ca796000, 2097152 [pid 5766] <... symlink resumed>) = 0 [pid 5763] <... munmap resumed>) = 0 [pid 5766] memfd_create("syzkaller", 0 [pid 5763] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5766] <... memfd_create resumed>) = 3 [pid 5763] <... openat resumed>) = 4 [pid 5766] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5763] ioctl(4, LOOP_SET_FD, 3 [pid 5766] <... mmap resumed>) = 0x7f18ca796000 [pid 5763] <... ioctl resumed>) = 0 [pid 5763] close(3) = 0 [pid 5763] mkdir("./file1", 0777) = 0 [ 194.867166][ T5763] loop3: detected capacity change from 0 to 4096 [pid 5763] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5766] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5764] <... write resumed>) = 2097152 [pid 5764] munmap(0x7f18ca796000, 2097152) = 0 [pid 5765] <... write resumed>) = 2097152 [pid 5764] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5764] ioctl(4, LOOP_SET_FD, 3 [ 194.923374][ T5763] NILFS (loop3): invalid segment: Checksum error in segment payload [ 194.939912][ T5763] NILFS (loop3): trying rollback from an earlier position [pid 5765] munmap(0x7f18ca796000, 2097152) = 0 [pid 5765] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5764] <... ioctl resumed>) = 0 [pid 5765] ioctl(4, LOOP_SET_FD, 3 [pid 5764] close(3 [pid 5758] <... sendfile resumed>) = 1048576 [pid 5758] exit_group(0) = ? [pid 5764] <... close resumed>) = 0 [pid 5764] mkdir("./file1", 0777) = 0 [pid 5758] +++ exited with 0 +++ [pid 5766] <... write resumed>) = 2097152 [pid 5765] <... ioctl resumed>) = 0 [ 194.976349][ T5764] loop5: detected capacity change from 0 to 4096 [ 194.989505][ T5765] loop0: detected capacity change from 0 to 4096 [ 194.993896][ T5763] NILFS (loop3): recovery complete [ 195.013189][ T5764] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5764] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5766] munmap(0x7f18ca796000, 2097152 [pid 5765] close(3 [pid 5763] <... mount resumed>) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5758, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 4998] umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5766] <... munmap resumed>) = 0 [pid 5765] <... close resumed>) = 0 [pid 5763] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4998] getdents64(3, [pid 5766] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5765] mkdir("./file1", 0777 [pid 5763] <... openat resumed>) = 3 [pid 5766] <... openat resumed>) = 4 [pid 5765] <... mkdir resumed>) = 0 [pid 5763] chdir("./file1" [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5766] ioctl(4, LOOP_SET_FD, 3 [pid 5765] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5763] <... chdir resumed>) = 0 [pid 4998] umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5763] ioctl(4, LOOP_CLR_FD [pid 5766] <... ioctl resumed>) = 0 [pid 5763] <... ioctl resumed>) = 0 [pid 5766] close(3 [pid 5763] close(4 [pid 5766] <... close resumed>) = 0 [pid 5763] <... close resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5766] mkdir("./file1", 0777 [ 195.019317][ T5767] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 195.023177][ T5764] NILFS (loop5): trying rollback from an earlier position [ 195.051056][ T5766] loop2: detected capacity change from 0 to 4096 [ 195.063953][ T5765] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5763] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] lstat("./61/binderfs", [pid 5766] <... mkdir resumed>) = 0 [pid 5763] <... open resumed>) = 4 [pid 5766] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5763] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5763] ftruncate(5, 33587195) = 0 [pid 5763] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5763] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5763] sendfile(6, 7, NULL, 281474978811909 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./61/binderfs") = 0 [pid 5764] <... mount resumed>) = 0 [ 195.085337][ T5764] NILFS (loop5): recovery complete [ 195.092353][ T5765] NILFS (loop0): trying rollback from an earlier position [ 195.111456][ T5768] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 195.124336][ T5766] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5764] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4998] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5764] <... openat resumed>) = 3 [pid 5764] chdir("./file1") = 0 [pid 5764] ioctl(4, LOOP_CLR_FD) = 0 [pid 5764] close(4) = 0 [pid 5764] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5764] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5764] ftruncate(5, 33587195) = 0 [pid 5764] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5764] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 195.132378][ T5766] NILFS (loop2): trying rollback from an earlier position [pid 5764] sendfile(6, 7, NULL, 281474978811909 [pid 5765] <... mount resumed>) = 0 [pid 5765] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [ 195.198186][ T5765] NILFS (loop0): recovery complete [pid 5765] chdir("./file1") = 0 [pid 5765] ioctl(4, LOOP_CLR_FD [pid 5760] <... sendfile resumed>) = 1048576 [pid 4998] <... umount2 resumed>) = 0 [pid 5765] <... ioctl resumed>) = 0 [pid 5760] exit_group(0 [pid 4998] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5765] close(4 [pid 5760] <... exit_group resumed>) = ? [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 195.235831][ T5769] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5765] <... close resumed>) = 0 [pid 5760] +++ exited with 0 +++ [pid 4998] lstat("./61/file1", [pid 5765] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5760, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5765] <... open resumed>) = 4 [pid 5001] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] umount2("./61/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5765] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5765] <... open resumed>) = 5 [pid 5001] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] openat(AT_FDCWD, "./61/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5765] ftruncate(5, 33587195 [pid 5001] <... openat resumed>) = 3 [pid 4998] <... openat resumed>) = 4 [pid 5765] <... ftruncate resumed>) = 0 [pid 5001] fstat(3, [pid 4998] fstat(4, [pid 5765] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5765] <... open resumed>) = 6 [pid 5001] getdents64(3, [pid 4998] getdents64(4, [ 195.281306][ T5766] NILFS (loop2): recovery complete [pid 5765] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5766] <... mount resumed>) = 0 [pid 5765] <... open resumed>) = 7 [pid 5001] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(4, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] lstat("./62/binderfs", [pid 4998] close(4 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] <... close resumed>) = 0 [pid 5001] unlink("./62/binderfs" [pid 4998] rmdir("./61/file1" [pid 5766] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5765] sendfile(6, 7, NULL, 281474978811909 [pid 5001] <... unlink resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5766] <... openat resumed>) = 3 [pid 5001] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] getdents64(3, [ 195.312783][ T5770] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5766] chdir("./file1" [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5766] <... chdir resumed>) = 0 [pid 4998] close(3 [pid 5766] ioctl(4, LOOP_CLR_FD) = 0 [pid 5766] close(4) = 0 [pid 4998] <... close resumed>) = 0 [pid 5766] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] rmdir("./61") = 0 [pid 4998] mkdir("./62", 0777) = 0 [pid 5766] <... open resumed>) = 4 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5766] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] <... openat resumed>) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5771 ./strace-static-x86_64: Process 5771 attached [pid 5766] <... open resumed>) = 5 [pid 5766] ftruncate(5, 33587195) = 0 [pid 5766] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5766] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5766] sendfile(6, 7, NULL, 281474978811909 [pid 5771] chdir("./62") = 0 [pid 5771] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5771] setpgid(0, 0) = 0 [pid 5771] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5771] write(3, "1000", 4) = 4 [pid 5771] close(3) = 0 [pid 5771] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5771] memfd_create("syzkaller", 0) = 3 [pid 5771] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5771] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./62/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./62/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./62/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./62") = 0 [pid 5001] mkdir("./63", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5772 ./strace-static-x86_64: Process 5772 attached [pid 5772] chdir("./63" [pid 5771] <... write resumed>) = 2097152 [pid 5772] <... chdir resumed>) = 0 [pid 5772] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5771] munmap(0x7f18ca796000, 2097152 [pid 5772] setpgid(0, 0 [pid 5771] <... munmap resumed>) = 0 [pid 5772] <... setpgid resumed>) = 0 [pid 5772] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5771] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5772] write(3, "1000", 4 [pid 5771] <... openat resumed>) = 4 [pid 5772] <... write resumed>) = 4 [pid 5771] ioctl(4, LOOP_SET_FD, 3 [pid 5772] close(3) = 0 [pid 5772] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5772] memfd_create("syzkaller", 0) = 3 [pid 5772] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5771] <... ioctl resumed>) = 0 [pid 5771] close(3) = 0 [pid 5771] mkdir("./file1", 0777) = 0 [ 195.657919][ T5771] loop1: detected capacity change from 0 to 4096 [pid 5771] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [ 195.722100][ T5771] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5772] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [ 195.776358][ T5771] NILFS (loop1): trying rollback from an earlier position [pid 5772] munmap(0x7f18ca796000, 2097152) = 0 [pid 5772] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5772] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5772] close(3) = 0 [pid 5772] mkdir("./file1", 0777) = 0 [ 195.861643][ T5772] loop4: detected capacity change from 0 to 4096 [ 195.880057][ T5771] NILFS (loop1): recovery complete [pid 5772] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5771] <... mount resumed>) = 0 [pid 5771] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5771] chdir("./file1") = 0 [pid 5771] ioctl(4, LOOP_CLR_FD) = 0 [pid 5771] close(4) = 0 [pid 5771] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5771] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5771] ftruncate(5, 33587195) = 0 [pid 5771] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5771] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 195.918835][ T5772] NILFS (loop4): invalid segment: Checksum error in segment payload [ 195.933344][ T5773] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 195.980467][ T5772] NILFS (loop4): trying rollback from an earlier position [pid 5771] sendfile(6, 7, NULL, 281474978811909 [pid 5763] <... sendfile resumed>) = 1048576 [pid 5763] exit_group(0) = ? [pid 5763] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5763, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5000] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 196.103589][ T5772] NILFS (loop4): recovery complete [pid 5000] lstat("./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./63/binderfs") = 0 [pid 5000] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5772] <... mount resumed>) = 0 [pid 5772] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5772] chdir("./file1") = 0 [pid 5772] ioctl(4, LOOP_CLR_FD) = 0 [pid 5772] close(4) = 0 [pid 5772] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5772] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [ 196.145082][ T5774] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5772] ftruncate(5, 33587195) = 0 [pid 5772] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5772] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5772] sendfile(6, 7, NULL, 281474978811909 [pid 5764] <... sendfile resumed>) = 1048576 [pid 5764] exit_group(0) = ? [pid 5764] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5764, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] getdents64(3, [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] lstat("./63/file1", [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] lstat("./63/binderfs", [pid 5000] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] unlink("./63/binderfs" [pid 5000] openat(AT_FDCWD, "./63/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... unlink resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 5002] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./63/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./63") = 0 [pid 5765] <... sendfile resumed>) = 1048576 [pid 5000] mkdir("./64", 0777 [pid 5765] exit_group(0 [pid 5000] <... mkdir resumed>) = 0 [pid 5765] <... exit_group resumed>) = ? [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5765] +++ exited with 0 +++ [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5765, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- [pid 5000] close(3 [pid 4997] restart_syscall(<... resuming interrupted clone ...> [pid 5000] <... close resumed>) = 0 [pid 4997] <... restart_syscall resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5775 [pid 4997] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./62/binderfs") = 0 [pid 4997] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5775 attached [pid 5775] chdir("./64") = 0 [pid 5775] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5775] setpgid(0, 0) = 0 [pid 5775] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5775] write(3, "1000", 4) = 4 [pid 5775] close(3) = 0 [pid 5775] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5775] memfd_create("syzkaller", 0) = 3 [pid 5775] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5775] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] <... umount2 resumed>) = 0 [pid 5766] <... sendfile resumed>) = 1048576 [pid 5766] exit_group(0) = ? [pid 5002] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5766] +++ exited with 0 +++ [pid 5002] lstat("./63/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5766, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./63/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] fstat(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] <... openat resumed>) = 3 [pid 4997] <... umount2 resumed>) = 0 [pid 5002] getdents64(4, [pid 4999] fstat(3, [pid 5002] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./63/file1" [pid 4999] getdents64(3, [pid 5002] <... rmdir resumed>) = 0 [pid 5002] getdents64(3, [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] close(3) = 0 [pid 4999] lstat("./62/binderfs", [pid 5002] rmdir("./63" [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 4999] unlink("./62/binderfs" [pid 4997] lstat("./62/file1", [pid 5002] mkdir("./64", 0777 [pid 4999] <... unlink resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 4999] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 4997] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] close(3 [pid 4997] openat(AT_FDCWD, "./62/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] <... close resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] <... openat resumed>) = 4 [pid 4997] fstat(4, [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5776 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5775] <... write resumed>) = 2097152 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5776 attached [pid 4997] getdents64(4, [pid 5776] chdir("./64" [pid 5775] munmap(0x7f18ca796000, 2097152 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4 [pid 5776] <... chdir resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 5776] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5775] <... munmap resumed>) = 0 [pid 4997] rmdir("./62/file1" [pid 5776] <... prctl resumed>) = 0 [pid 5775] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5775] ioctl(4, LOOP_SET_FD, 3 [pid 4997] <... rmdir resumed>) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./62") = 0 [pid 4997] mkdir("./63", 0777 [pid 5776] setpgid(0, 0 [pid 4997] <... mkdir resumed>) = 0 [pid 5776] <... setpgid resumed>) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5776] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5775] <... ioctl resumed>) = 0 [pid 5776] <... openat resumed>) = 3 [pid 5775] close(3 [pid 4997] <... openat resumed>) = 3 [pid 5776] write(3, "1000", 4 [pid 5775] <... close resumed>) = 0 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5776] <... write resumed>) = 4 [pid 5775] mkdir("./file1", 0777 [pid 4999] <... umount2 resumed>) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5776] close(3 [pid 5775] <... mkdir resumed>) = 0 [pid 4999] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] close(3 [pid 5776] <... close resumed>) = 0 [pid 5775] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... close resumed>) = 0 [pid 5776] symlink("/dev/binderfs", "./binderfs") = 0 [ 196.678533][ T5775] loop3: detected capacity change from 0 to 4096 [pid 4999] lstat("./62/file1", [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5776] memfd_create("syzkaller", 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5776] <... memfd_create resumed>) = 3 [pid 5776] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4999] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./62/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5777 [pid 4999] <... openat resumed>) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, ./strace-static-x86_64: Process 5777 attached 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5777] chdir("./63" [pid 4999] close(4) = 0 [pid 4999] rmdir("./62/file1" [pid 5777] <... chdir resumed>) = 0 [ 196.739556][ T5775] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5777] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] <... rmdir resumed>) = 0 [pid 5777] <... prctl resumed>) = 0 [pid 5776] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5777] setpgid(0, 0 [pid 4999] getdents64(3, [pid 5777] <... setpgid resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5777] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] close(3 [pid 5777] <... openat resumed>) = 3 [pid 4999] <... close resumed>) = 0 [pid 5777] write(3, "1000", 4 [pid 4999] rmdir("./62" [pid 5777] <... write resumed>) = 4 [pid 5777] close(3 [pid 4999] <... rmdir resumed>) = 0 [pid 5777] <... close resumed>) = 0 [pid 4999] mkdir("./63", 0777 [pid 5777] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... mkdir resumed>) = 0 [pid 5777] <... symlink resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5777] memfd_create("syzkaller", 0) = 3 [pid 4999] <... openat resumed>) = 3 [pid 5777] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5777] <... mmap resumed>) = 0x7f18ca796000 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5778 [ 196.785158][ T5775] NILFS (loop3): trying rollback from an earlier position ./strace-static-x86_64: Process 5778 attached [pid 5778] chdir("./63") = 0 [pid 5776] <... write resumed>) = 2097152 [pid 5778] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5778] setpgid(0, 0) = 0 [pid 5778] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5778] write(3, "1000", 4) = 4 [pid 5778] close(3) = 0 [pid 5778] symlink("/dev/binderfs", "./binderfs" [pid 5776] munmap(0x7f18ca796000, 2097152 [pid 5778] <... symlink resumed>) = 0 [ 196.864919][ T5775] NILFS (loop3): recovery complete [pid 5777] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5776] <... munmap resumed>) = 0 [pid 5778] memfd_create("syzkaller", 0) = 3 [pid 5776] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5778] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5776] <... openat resumed>) = 4 [pid 5778] <... mmap resumed>) = 0x7f18ca796000 [pid 5776] ioctl(4, LOOP_SET_FD, 3 [pid 5775] <... mount resumed>) = 0 [pid 5776] <... ioctl resumed>) = 0 [pid 5775] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5777] <... write resumed>) = 2097152 [pid 5776] close(3 [pid 5775] <... openat resumed>) = 3 [pid 5778] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5777] munmap(0x7f18ca796000, 2097152 [pid 5776] <... close resumed>) = 0 [pid 5775] chdir("./file1" [pid 5777] <... munmap resumed>) = 0 [pid 5776] mkdir("./file1", 0777 [pid 5775] <... chdir resumed>) = 0 [pid 5776] <... mkdir resumed>) = 0 [pid 5777] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5775] ioctl(4, LOOP_CLR_FD [pid 5776] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5777] <... openat resumed>) = 4 [pid 5775] <... ioctl resumed>) = 0 [pid 5777] ioctl(4, LOOP_SET_FD, 3 [ 196.891300][ T5779] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 196.914183][ T5776] loop5: detected capacity change from 0 to 4096 [pid 5775] close(4) = 0 [pid 5778] <... write resumed>) = 2097152 [pid 5777] <... ioctl resumed>) = 0 [pid 5775] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5778] munmap(0x7f18ca796000, 2097152 [pid 5777] close(3) = 0 [pid 5777] mkdir("./file1", 0777) = 0 [pid 5778] <... munmap resumed>) = 0 [pid 5777] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5778] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5775] <... open resumed>) = 4 [pid 5778] <... openat resumed>) = 4 [pid 5778] ioctl(4, LOOP_SET_FD, 3 [pid 5775] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [ 196.968164][ T5777] loop0: detected capacity change from 0 to 4096 [ 196.985239][ T5776] NILFS (loop5): invalid segment: Checksum error in segment payload [ 197.006790][ T5778] loop2: detected capacity change from 0 to 4096 [pid 5775] ftruncate(5, 33587195 [pid 5778] <... ioctl resumed>) = 0 [pid 5778] close(3) = 0 [pid 5778] mkdir("./file1", 0777 [pid 5775] <... ftruncate resumed>) = 0 [pid 5775] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5775] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5775] sendfile(6, 7, NULL, 281474978811909 [pid 5778] <... mkdir resumed>) = 0 [ 197.014626][ T5777] NILFS (loop0): invalid segment: Checksum error in segment payload [ 197.022758][ T5777] NILFS (loop0): trying rollback from an earlier position [pid 5778] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5771] <... sendfile resumed>) = 1048576 [pid 5771] exit_group(0) = ? [pid 5771] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5771, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 197.063410][ T5776] NILFS (loop5): trying rollback from an earlier position [ 197.088563][ T5776] NILFS (loop5): recovery complete [ 197.089198][ T5778] NILFS (loop2): invalid segment: Checksum error in segment payload [ 197.106222][ T5777] NILFS (loop0): recovery complete [pid 4998] umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5776] <... mount resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5776] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4998] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5776] <... openat resumed>) = 3 [pid 5776] chdir("./file1") = 0 [pid 5777] <... mount resumed>) = 0 [pid 5776] ioctl(4, LOOP_CLR_FD [pid 4998] <... openat resumed>) = 3 [pid 5777] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5777] chdir("./file1" [pid 5776] <... ioctl resumed>) = 0 [pid 5777] <... chdir resumed>) = 0 [pid 5776] close(4 [pid 4998] fstat(3, [pid 5777] ioctl(4, LOOP_CLR_FD) = 0 [pid 5777] close(4) = 0 [pid 5776] <... close resumed>) = 0 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5776] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] getdents64(3, [pid 5777] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [ 197.118866][ T5780] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 197.134263][ T5781] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 197.140252][ T5778] NILFS (loop2): trying rollback from an earlier position [pid 4998] umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5776] <... open resumed>) = 4 [pid 4998] unlink("./62/binderfs" [pid 5777] <... open resumed>) = 4 [pid 5776] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] <... unlink resumed>) = 0 [pid 5777] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5776] <... open resumed>) = 5 [pid 4998] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5777] <... open resumed>) = 5 [pid 5776] ftruncate(5, 33587195 [pid 5772] <... sendfile resumed>) = 1048576 [pid 5776] <... ftruncate resumed>) = 0 [pid 5777] ftruncate(5, 33587195 [pid 5776] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5772] exit_group(0) = ? [pid 5772] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5772, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5776] <... open resumed>) = 6 [pid 5777] <... ftruncate resumed>) = 0 [ 197.165746][ T5778] NILFS (loop2): recovery complete [pid 5776] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5778] <... mount resumed>) = 0 [pid 5777] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5776] <... open resumed>) = 7 [pid 5778] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5777] <... open resumed>) = 6 [pid 5776] sendfile(6, 7, NULL, 281474978811909 [pid 5778] <... openat resumed>) = 3 [pid 5777] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5001] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5778] chdir("./file1" [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5778] <... chdir resumed>) = 0 [pid 5777] <... open resumed>) = 7 [pid 5001] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5778] ioctl(4, LOOP_CLR_FD [pid 5777] sendfile(6, 7, NULL, 281474978811909 [pid 5001] <... openat resumed>) = 3 [pid 5778] <... ioctl resumed>) = 0 [pid 5001] fstat(3, [pid 5778] close(4 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5778] <... close resumed>) = 0 [pid 5001] getdents64(3, [pid 5778] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5778] <... open resumed>) = 4 [pid 5001] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [ 197.194222][ T5782] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5778] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5778] <... open resumed>) = 5 [pid 5001] lstat("./63/binderfs", [pid 5778] ftruncate(5, 33587195 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5778] <... ftruncate resumed>) = 0 [pid 5001] unlink("./63/binderfs" [pid 5778] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5001] <... unlink resumed>) = 0 [pid 5778] <... open resumed>) = 6 [pid 5001] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5778] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5778] sendfile(6, 7, NULL, 281474978811909 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./62/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./62/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./62/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./62/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./62") = 0 [pid 4998] mkdir("./63", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5783 [pid 5001] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5783 attached [pid 5783] chdir("./63") = 0 [pid 5783] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5783] setpgid(0, 0) = 0 [pid 5001] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./63/file1", [pid 5783] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5783] <... openat resumed>) = 3 [pid 5001] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5783] write(3, "1000", 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5783] <... write resumed>) = 4 [pid 5783] close(3 [pid 5001] openat(AT_FDCWD, "./63/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, [pid 5783] <... close resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5783] symlink("/dev/binderfs", "./binderfs" [pid 5001] getdents64(4, [pid 5783] <... symlink resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5783] memfd_create("syzkaller", 0 [pid 5001] getdents64(4, [pid 5783] <... memfd_create resumed>) = 3 [pid 5001] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5783] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] close(4 [pid 5783] <... mmap resumed>) = 0x7f18ca796000 [pid 5001] <... close resumed>) = 0 [pid 5001] rmdir("./63/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./63") = 0 [pid 5001] mkdir("./64", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5784 ./strace-static-x86_64: Process 5784 attached [pid 5784] chdir("./64") = 0 [pid 5784] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5784] setpgid(0, 0) = 0 [pid 5784] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5783] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5784] write(3, "1000", 4) = 4 [pid 5784] close(3) = 0 [pid 5784] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5784] memfd_create("syzkaller", 0) = 3 [pid 5784] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5784] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5783] <... write resumed>) = 2097152 [pid 5783] munmap(0x7f18ca796000, 2097152) = 0 [pid 5783] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5783] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5783] close(3 [pid 5784] <... write resumed>) = 2097152 [pid 5783] <... close resumed>) = 0 [pid 5783] mkdir("./file1", 0777) = 0 [ 197.742536][ T5783] loop1: detected capacity change from 0 to 4096 [pid 5783] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5784] munmap(0x7f18ca796000, 2097152) = 0 [pid 5784] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5784] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5784] close(3) = 0 [pid 5784] mkdir("./file1", 0777) = 0 [ 197.792794][ T5783] NILFS (loop1): invalid segment: Checksum error in segment payload [ 197.810580][ T5784] loop4: detected capacity change from 0 to 4096 [ 197.854801][ T5783] NILFS (loop1): trying rollback from an earlier position [ 197.869096][ T5784] NILFS (loop4): invalid segment: Checksum error in segment payload [ 197.916401][ T5784] NILFS (loop4): trying rollback from an earlier position [ 197.933231][ T5783] NILFS (loop1): recovery complete [pid 5784] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5783] <... mount resumed>) = 0 [pid 5783] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5783] chdir("./file1") = 0 [pid 5783] ioctl(4, LOOP_CLR_FD) = 0 [pid 5783] close(4) = 0 [pid 5783] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5783] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5783] ftruncate(5, 33587195) = 0 [pid 5783] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [ 197.959442][ T5785] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 197.980297][ T5784] NILFS (loop4): recovery complete [pid 5783] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5783] sendfile(6, 7, NULL, 281474978811909 [pid 5784] <... mount resumed>) = 0 [pid 5784] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5784] chdir("./file1") = 0 [pid 5784] ioctl(4, LOOP_CLR_FD) = 0 [pid 5784] close(4) = 0 [pid 5784] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5784] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5784] ftruncate(5, 33587195) = 0 [pid 5784] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5784] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 198.063651][ T5786] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5784] sendfile(6, 7, NULL, 281474978811909 [pid 5775] <... sendfile resumed>) = 1048576 [pid 5775] exit_group(0) = ? [pid 5775] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5775, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5000] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./64/binderfs") = 0 [pid 5000] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5000] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./64/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./64/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5777] <... sendfile resumed>) = 1048576 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./64/file1") = 0 [pid 5000] getdents64(3, [pid 5777] exit_group(0 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5777] <... exit_group resumed>) = ? [pid 5000] close(3) = 0 [pid 5000] rmdir("./64" [pid 5777] +++ exited with 0 +++ [pid 5000] <... rmdir resumed>) = 0 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5777, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5000] mkdir("./65", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 4997] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5776] <... sendfile resumed>) = 1048576 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 4997] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5776] exit_group(0 [pid 5000] <... close resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [pid 5776] <... exit_group resumed>) = ? [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] fstat(3, [pid 5776] +++ exited with 0 +++ [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5776, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5787 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5787 attached [pid 5002] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] lstat("./63/binderfs", [pid 5787] chdir("./65" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5787] <... chdir resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 4997] unlink("./63/binderfs" [pid 5787] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5787] setpgid(0, 0) = 0 [pid 5787] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] fstat(3, [pid 4997] <... unlink resumed>) = 0 [pid 5787] <... openat resumed>) = 3 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5787] write(3, "1000", 4 [pid 5002] getdents64(3, [pid 5787] <... write resumed>) = 4 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5787] close(3) = 0 [pid 5002] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5787] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5787] memfd_create("syzkaller", 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5787] <... memfd_create resumed>) = 3 [pid 5002] lstat("./64/binderfs", [pid 5787] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5787] <... mmap resumed>) = 0x7f18ca796000 [pid 5002] unlink("./64/binderfs") = 0 [pid 5002] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5778] <... sendfile resumed>) = 1048576 [pid 5778] exit_group(0) = ? [pid 5778] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5778, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [pid 4999] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./63/binderfs") = 0 [pid 4999] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5787] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./63/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./63/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, [pid 5787] <... write resumed>) = 2097152 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./63/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./63") = 0 [pid 5787] munmap(0x7f18ca796000, 2097152) = 0 [pid 4997] mkdir("./64", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5787] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 4997] <... openat resumed>) = 3 [pid 5787] ioctl(4, LOOP_SET_FD, 3 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5787] <... ioctl resumed>) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] close(3 [pid 4999] lstat("./63/file1", [pid 5002] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./64/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] openat(AT_FDCWD, "./64/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... openat resumed>) = 4 [pid 5002] fstat(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] openat(AT_FDCWD, "./63/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5002] getdents64(4, [pid 4999] <... openat resumed>) = 4 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5788 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] fstat(4, [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./64/file1") = 0 [pid 4999] getdents64(4, [pid 5002] getdents64(3, [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] getdents64(4, [pid 5787] close(3 [pid 5002] close(3 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5787] <... close resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 4999] close(4./strace-static-x86_64: Process 5788 attached [pid 5787] mkdir("./file1", 0777 [pid 5002] rmdir("./64" [pid 4999] <... close resumed>) = 0 [pid 5787] <... mkdir resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 4999] rmdir("./63/file1" [pid 5788] chdir("./64" [pid 5787] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5002] mkdir("./65", 0777 [pid 5788] <... chdir resumed>) = 0 [pid 5002] <... mkdir resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5788] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4999] getdents64(3, [pid 5788] <... prctl resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5788] setpgid(0, 0 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 4999] close(3 [pid 5788] <... setpgid resumed>) = 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... close resumed>) = 0 [pid 5788] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] close(3 [pid 4999] rmdir("./63" [pid 5788] <... openat resumed>) = 3 [pid 5002] <... close resumed>) = 0 [ 198.676372][ T5787] loop3: detected capacity change from 0 to 4096 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5789 ./strace-static-x86_64: Process 5789 attached [pid 5788] write(3, "1000", 4 [pid 4999] <... rmdir resumed>) = 0 [pid 5789] chdir("./65" [pid 5788] <... write resumed>) = 4 [pid 4999] mkdir("./64", 0777 [pid 5789] <... chdir resumed>) = 0 [pid 5788] close(3 [pid 4999] <... mkdir resumed>) = 0 [pid 5789] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5788] <... close resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5789] <... prctl resumed>) = 0 [pid 5788] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... openat resumed>) = 3 [pid 5789] setpgid(0, 0 [pid 5788] <... symlink resumed>) = 0 [pid 5789] <... setpgid resumed>) = 0 [pid 5788] memfd_create("syzkaller", 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5789] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5788] <... memfd_create resumed>) = 3 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5789] <... openat resumed>) = 3 [pid 5788] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] close(3 [pid 5789] write(3, "1000", 4 [pid 5788] <... mmap resumed>) = 0x7f18ca796000 [pid 4999] <... close resumed>) = 0 [pid 5789] <... write resumed>) = 4 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5789] close(3) = 0 [pid 5789] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5791 [pid 5789] <... symlink resumed>) = 0 [ 198.748313][ T5787] NILFS (loop3): invalid segment: Checksum error in segment payload [ 198.756826][ T5787] NILFS (loop3): trying rollback from an earlier position [ 198.786546][ T5787] NILFS (loop3): recovery complete [pid 5789] memfd_create("syzkaller", 0 [pid 5787] <... mount resumed>) = 0 [pid 5787] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5789] <... memfd_create resumed>) = 3 [pid 5787] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5791 attached [pid 5789] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5787] chdir("./file1" [pid 5791] chdir("./64" [pid 5789] <... mmap resumed>) = 0x7f18ca796000 [pid 5787] <... chdir resumed>) = 0 [pid 5791] <... chdir resumed>) = 0 [pid 5787] ioctl(4, LOOP_CLR_FD) = 0 [pid 5787] close(4) = 0 [pid 5787] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5791] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5787] <... open resumed>) = 4 [pid 5787] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5787] ftruncate(5, 33587195) = 0 [pid 5787] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5791] <... prctl resumed>) = 0 [pid 5791] setpgid(0, 0 [pid 5787] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5791] <... setpgid resumed>) = 0 [pid 5787] <... open resumed>) = 7 [pid 5791] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 198.801856][ T5790] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5787] sendfile(6, 7, NULL, 281474978811909 [pid 5791] <... openat resumed>) = 3 [pid 5789] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5791] write(3, "1000", 4) = 4 [pid 5791] close(3) = 0 [pid 5791] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5788] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5791] memfd_create("syzkaller", 0) = 3 [pid 5791] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5791] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5783] <... sendfile resumed>) = 1048576 [pid 5783] exit_group(0) = ? [pid 5788] <... write resumed>) = 2097152 [pid 5783] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5783, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- [pid 5788] munmap(0x7f18ca796000, 2097152 [pid 4998] umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5788] <... munmap resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5788] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4998] <... openat resumed>) = 3 [pid 5788] <... openat resumed>) = 4 [pid 4998] fstat(3, [pid 5788] ioctl(4, LOOP_SET_FD, 3 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5789] <... write resumed>) = 2097152 [pid 5791] <... write resumed>) = 2097152 [pid 5789] munmap(0x7f18ca796000, 2097152 [pid 5788] <... ioctl resumed>) = 0 [pid 4998] getdents64(3, [pid 5791] munmap(0x7f18ca796000, 2097152 [pid 5789] <... munmap resumed>) = 0 [pid 5788] close(3 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5791] <... munmap resumed>) = 0 [pid 5789] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5788] <... close resumed>) = 0 [pid 4998] umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5791] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5789] <... openat resumed>) = 4 [pid 5788] mkdir("./file1", 0777 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5791] <... openat resumed>) = 4 [pid 5789] ioctl(4, LOOP_SET_FD, 3 [pid 5788] <... mkdir resumed>) = 0 [pid 4998] lstat("./63/binderfs", [pid 5791] ioctl(4, LOOP_SET_FD, 3 [pid 5789] <... ioctl resumed>) = 0 [pid 5788] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 198.983677][ T5788] loop0: detected capacity change from 0 to 4096 [ 199.005582][ T5789] loop5: detected capacity change from 0 to 4096 [ 199.013583][ T5791] loop2: detected capacity change from 0 to 4096 [pid 5791] <... ioctl resumed>) = 0 [pid 5789] close(3 [pid 4998] unlink("./63/binderfs" [pid 5789] <... close resumed>) = 0 [pid 4998] <... unlink resumed>) = 0 [pid 5789] mkdir("./file1", 0777 [pid 4998] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5789] <... mkdir resumed>) = 0 [pid 5789] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5791] close(3) = 0 [pid 5791] mkdir("./file1", 0777) = 0 [ 199.026696][ T5788] NILFS (loop0): invalid segment: Checksum error in segment payload [ 199.047685][ T5789] NILFS (loop5): invalid segment: Checksum error in segment payload [ 199.060558][ T5788] NILFS (loop0): trying rollback from an earlier position [ 199.083821][ T5791] NILFS (loop2): invalid segment: Checksum error in segment payload [ 199.093011][ T5789] NILFS (loop5): trying rollback from an earlier position [ 199.118632][ T5791] NILFS (loop2): trying rollback from an earlier position [pid 5791] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5788] <... mount resumed>) = 0 [pid 5788] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5788] chdir("./file1" [pid 4998] <... umount2 resumed>) = 0 [pid 5788] <... chdir resumed>) = 0 [pid 5788] ioctl(4, LOOP_CLR_FD) = 0 [pid 5788] close(4) = 0 [pid 5788] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [ 199.137242][ T5788] NILFS (loop0): recovery complete [ 199.156304][ T5789] NILFS (loop5): recovery complete [ 199.171999][ T5792] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5788] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5788] ftruncate(5, 33587195) = 0 [pid 5788] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5788] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5788] sendfile(6, 7, NULL, 281474978811909 [pid 5789] <... mount resumed>) = 0 [pid 5789] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5789] chdir("./file1") = 0 [pid 5789] ioctl(4, LOOP_CLR_FD) = 0 [pid 5789] close(4) = 0 [pid 5789] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./63/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./63/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./63/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [ 199.200462][ T5791] NILFS (loop2): recovery complete [ 199.220349][ T5793] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] close(4 [pid 5791] <... mount resumed>) = 0 [pid 5789] <... open resumed>) = 4 [pid 5791] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5789] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5791] <... openat resumed>) = 3 [pid 5789] <... open resumed>) = 5 [pid 5791] chdir("./file1" [pid 5789] ftruncate(5, 33587195) = 0 [pid 5791] <... chdir resumed>) = 0 [pid 5789] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5791] ioctl(4, LOOP_CLR_FD [pid 5789] <... open resumed>) = 6 [pid 5789] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5789] sendfile(6, 7, NULL, 281474978811909 [pid 5791] <... ioctl resumed>) = 0 [pid 5791] close(4 [pid 4998] <... close resumed>) = 0 [pid 4998] rmdir("./63/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./63" [pid 5791] <... close resumed>) = 0 [pid 5791] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5784] <... sendfile resumed>) = 1048576 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] mkdir("./64", 0777 [pid 5791] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] <... mkdir resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5795 ./strace-static-x86_64: Process 5795 attached [pid 5791] <... open resumed>) = 5 [pid 5791] ftruncate(5, 33587195) = 0 [pid 5791] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5791] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 199.250320][ T5794] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5795] chdir("./64" [pid 5791] sendfile(6, 7, NULL, 281474978811909 [pid 5795] <... chdir resumed>) = 0 [pid 5795] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5795] setpgid(0, 0) = 0 [pid 5795] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5795] write(3, "1000", 4) = 4 [pid 5795] close(3) = 0 [pid 5795] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5795] memfd_create("syzkaller", 0) = 3 [pid 5795] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5784] exit_group(0) = ? [pid 5784] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5784, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5001] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5795] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... openat resumed>) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./64/binderfs") = 0 [pid 5001] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5795] <... write resumed>) = 2097152 [pid 5795] munmap(0x7f18ca796000, 2097152) = 0 [pid 5795] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5795] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5795] close(3) = 0 [pid 5795] mkdir("./file1", 0777) = 0 [ 199.471586][ T5795] loop1: detected capacity change from 0 to 4096 [ 199.534503][ T5795] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5795] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./64/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 199.584771][ T5795] NILFS (loop1): trying rollback from an earlier position [pid 5001] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./64/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [ 199.629387][ T5795] NILFS (loop1): recovery complete [pid 5001] rmdir("./64/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./64") = 0 [pid 5795] <... mount resumed>) = 0 [pid 5795] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5795] chdir("./file1") = 0 [pid 5795] ioctl(4, LOOP_CLR_FD) = 0 [pid 5795] close(4) = 0 [pid 5795] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5001] mkdir("./65", 0777 [pid 5795] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5795] ftruncate(5, 33587195) = 0 [pid 5795] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5001] <... mkdir resumed>) = 0 [pid 5795] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5795] <... open resumed>) = 7 [pid 5001] <... openat resumed>) = 3 [pid 5795] sendfile(6, 7, NULL, 281474978811909 [ 199.693614][ T5796] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5797 ./strace-static-x86_64: Process 5797 attached [pid 5797] chdir("./65") = 0 [pid 5797] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5797] setpgid(0, 0) = 0 [pid 5797] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5797] write(3, "1000", 4) = 4 [pid 5797] close(3) = 0 [pid 5797] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5797] memfd_create("syzkaller", 0) = 3 [pid 5797] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5797] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5797] munmap(0x7f18ca796000, 2097152) = 0 [pid 5797] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5797] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5797] close(3) = 0 [pid 5797] mkdir("./file1", 0777) = 0 [ 200.002046][ T5797] loop4: detected capacity change from 0 to 4096 [ 200.064638][ T5797] NILFS (loop4): invalid segment: Checksum error in segment payload [ 200.072817][ T5797] NILFS (loop4): trying rollback from an earlier position [pid 5797] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5787] <... sendfile resumed>) = 1048576 [pid 5787] exit_group(0) = ? [pid 5787] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5787, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5788] <... sendfile resumed>) = 1048576 [pid 5000] unlink("./65/binderfs" [ 200.123175][ T5797] NILFS (loop4): recovery complete [pid 5788] exit_group(0 [pid 5000] <... unlink resumed>) = 0 [pid 5788] <... exit_group resumed>) = ? [pid 5000] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5788] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5788, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5797] <... mount resumed>) = 0 [pid 4997] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5797] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5797] <... openat resumed>) = 3 [pid 4997] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5797] chdir("./file1" [pid 4997] <... openat resumed>) = 3 [pid 5797] <... chdir resumed>) = 0 [pid 4997] fstat(3, [pid 5797] ioctl(4, LOOP_CLR_FD [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5797] <... ioctl resumed>) = 0 [pid 4997] getdents64(3, [pid 5797] close(4 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5797] <... close resumed>) = 0 [pid 4997] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5797] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./64/binderfs" [pid 5797] <... open resumed>) = 4 [pid 4997] <... unlink resumed>) = 0 [pid 5797] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4997] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5797] <... open resumed>) = 5 [ 200.163653][ T5798] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5797] ftruncate(5, 33587195) = 0 [pid 5797] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5797] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5797] sendfile(6, 7, NULL, 281474978811909 [pid 5000] <... umount2 resumed>) = 0 [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./64/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./64/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./64/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./64") = 0 [pid 4997] mkdir("./65", 0777 [pid 5000] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./65/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./65/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] <... mkdir resumed>) = 0 [pid 5000] fstat(4, [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... openat resumed>) = 3 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(3 [pid 5000] close(4) = 0 [pid 5000] rmdir("./65/file1" [pid 4997] <... close resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5000] getdents64(3, [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5789] <... sendfile resumed>) = 1048576 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5789] exit_group(0) = ? [pid 5789] +++ exited with 0 +++ [pid 5000] close(3 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5799 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5789, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [pid 5000] <... close resumed>) = 0 ./strace-static-x86_64: Process 5799 attached [pid 5799] chdir("./65") = 0 [pid 5799] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5799] setpgid(0, 0) = 0 [pid 5000] rmdir("./65" [pid 5002] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] <... rmdir resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] mkdir("./66", 0777 [pid 5002] <... openat resumed>) = 3 [pid 5799] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] <... mkdir resumed>) = 0 [pid 5002] fstat(3, [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5002] getdents64(3, [pid 5799] <... openat resumed>) = 3 [pid 5799] write(3, "1000", 4) = 4 [pid 5799] close(3) = 0 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] lstat("./65/binderfs", [pid 5000] close(3 [pid 5799] symlink("/dev/binderfs", "./binderfs" [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./65/binderfs" [pid 5000] <... close resumed>) = 0 [pid 5002] <... unlink resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5002] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5800 [pid 5799] <... symlink resumed>) = 0 [pid 5799] memfd_create("syzkaller", 0) = 3 [pid 5799] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5800 attached ) = 0x7f18ca796000 [pid 5800] chdir("./66") = 0 [pid 5800] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5800] setpgid(0, 0) = 0 [pid 5800] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5800] write(3, "1000", 4) = 4 [pid 5800] close(3) = 0 [pid 5800] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5800] memfd_create("syzkaller", 0) = 3 [pid 5800] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5791] <... sendfile resumed>) = 1048576 [pid 5800] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5799] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5791] exit_group(0) = ? [pid 5791] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5791, si_uid=0, si_status=0, si_utime=0, si_stime=33 /* 0.33 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./64/binderfs") = 0 [pid 4999] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... umount2 resumed>) = 0 [pid 5799] <... write resumed>) = 2097152 [pid 5799] munmap(0x7f18ca796000, 2097152 [pid 5002] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5799] <... munmap resumed>) = 0 [pid 5799] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5799] ioctl(4, LOOP_SET_FD, 3 [pid 5800] <... write resumed>) = 2097152 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./65/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./65/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5800] munmap(0x7f18ca796000, 2097152 [pid 5799] <... ioctl resumed>) = 0 [pid 5002] fstat(4, [pid 5800] <... munmap resumed>) = 0 [pid 5799] close(3 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5800] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5799] <... close resumed>) = 0 [pid 5002] getdents64(4, [pid 5800] <... openat resumed>) = 4 [pid 5799] mkdir("./file1", 0777 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5799] <... mkdir resumed>) = 0 [pid 5800] ioctl(4, LOOP_SET_FD, 3 [pid 5799] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [ 200.628359][ T5799] loop0: detected capacity change from 0 to 4096 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./65/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./65") = 0 [pid 5002] mkdir("./66", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5800] <... ioctl resumed>) = 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3 [pid 5800] close(3 [pid 5002] <... close resumed>) = 0 [pid 5800] <... close resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5800] mkdir("./file1", 0777) = 0 [pid 5800] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, ""./strace-static-x86_64: Process 5801 attached [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5801 [pid 5801] chdir("./66") = 0 [pid 5801] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5801] setpgid(0, 0) = 0 [pid 5801] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 200.676889][ T5800] loop3: detected capacity change from 0 to 4096 [ 200.705584][ T5799] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5801] write(3, "1000", 4) = 4 [pid 4999] <... umount2 resumed>) = 0 [pid 5801] close(3 [pid 4999] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5801] <... close resumed>) = 0 [pid 5801] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./64/file1", [pid 5801] <... symlink resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5801] memfd_create("syzkaller", 0) = 3 [pid 4999] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5801] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5801] <... mmap resumed>) = 0x7f18ca796000 [pid 4999] openat(AT_FDCWD, "./64/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5801] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5799] <... mount resumed>) = 0 [pid 5799] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5799] chdir("./file1" [pid 4999] <... openat resumed>) = 4 [pid 5799] <... chdir resumed>) = 0 [pid 5799] ioctl(4, LOOP_CLR_FD) = 0 [pid 5799] close(4 [pid 4999] fstat(4, [pid 5799] <... close resumed>) = 0 [pid 5799] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5799] <... open resumed>) = 4 [pid 4999] getdents64(4, [pid 5799] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5799] <... open resumed>) = 5 [pid 4999] getdents64(4, [pid 5799] ftruncate(5, 33587195 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5799] <... ftruncate resumed>) = 0 [pid 4999] close(4 [pid 5799] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4999] <... close resumed>) = 0 [ 200.749891][ T5799] NILFS (loop0): trying rollback from an earlier position [ 200.760675][ T5800] NILFS (loop3): invalid segment: Checksum error in segment payload [ 200.777490][ T5799] NILFS (loop0): recovery complete [ 200.788796][ T5800] NILFS (loop3): trying rollback from an earlier position [pid 5801] <... write resumed>) = 2097152 [pid 5799] <... open resumed>) = 6 [pid 4999] rmdir("./64/file1" [pid 5799] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5799] sendfile(6, 7, NULL, 281474978811909 [pid 4999] <... rmdir resumed>) = 0 [pid 5801] munmap(0x7f18ca796000, 2097152 [pid 4999] getdents64(3, [pid 5801] <... munmap resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5801] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5795] <... sendfile resumed>) = 1048576 [pid 4999] close(3) = 0 [pid 4999] rmdir("./64" [pid 5801] <... openat resumed>) = 4 [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./65", 0777 [pid 5795] exit_group(0 [pid 4999] <... mkdir resumed>) = 0 [ 200.824043][ T5802] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 200.840957][ T5800] NILFS (loop3): recovery complete [pid 5801] ioctl(4, LOOP_SET_FD, 3 [pid 5800] <... mount resumed>) = 0 [pid 5795] <... exit_group resumed>) = ? [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5800] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5795] +++ exited with 0 +++ [pid 4999] <... openat resumed>) = 3 [pid 5801] <... ioctl resumed>) = 0 [pid 5800] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5801] close(3 [pid 5800] chdir("./file1" [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5795, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5801] <... close resumed>) = 0 [pid 5800] <... chdir resumed>) = 0 [pid 4999] close(3 [pid 4998] umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5801] mkdir("./file1", 0777 [pid 5800] ioctl(4, LOOP_CLR_FD [pid 4999] <... close resumed>) = 0 [pid 5801] <... mkdir resumed>) = 0 [pid 5800] <... ioctl resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5801] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5800] close(4 [pid 4998] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5800] <... close resumed>) = 0 [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5804 [ 200.870419][ T5803] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 200.889096][ T5801] loop5: detected capacity change from 0 to 4096 [pid 5800] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] <... openat resumed>) = 3 [pid 4998] fstat(3, [pid 5800] <... open resumed>) = 4 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5804 attached [pid 5800] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] getdents64(3, [pid 5804] chdir("./65" [pid 5800] <... open resumed>) = 5 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5804] <... chdir resumed>) = 0 [pid 5800] ftruncate(5, 33587195 [pid 4998] umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5804] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5800] <... ftruncate resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5804] <... prctl resumed>) = 0 [pid 5800] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5804] setpgid(0, 0) = 0 [pid 5804] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5804] write(3, "1000", 4) = 4 [pid 4998] lstat("./64/binderfs", [pid 5800] <... open resumed>) = 6 [pid 5804] close(3 [pid 5800] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5804] <... close resumed>) = 0 [pid 5800] <... open resumed>) = 7 [pid 4998] unlink("./64/binderfs" [pid 5804] symlink("/dev/binderfs", "./binderfs" [pid 5800] sendfile(6, 7, NULL, 281474978811909 [pid 4998] <... unlink resumed>) = 0 [pid 5804] <... symlink resumed>) = 0 [pid 4998] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5804] memfd_create("syzkaller", 0) = 3 [pid 5804] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 200.938932][ T5801] NILFS (loop5): invalid segment: Checksum error in segment payload [ 200.984655][ T5801] NILFS (loop5): trying rollback from an earlier position [pid 5804] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [ 201.086232][ T5801] NILFS (loop5): recovery complete [pid 5804] munmap(0x7f18ca796000, 2097152 [pid 5801] <... mount resumed>) = 0 [pid 5801] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5801] chdir("./file1") = 0 [pid 5801] ioctl(4, LOOP_CLR_FD) = 0 [pid 5801] close(4) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5804] <... munmap resumed>) = 0 [pid 5801] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5801] <... open resumed>) = 4 [pid 5801] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5801] <... open resumed>) = 5 [pid 4998] lstat("./64/file1", [pid 5804] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5801] ftruncate(5, 33587195 [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5804] <... openat resumed>) = 4 [pid 5801] <... ftruncate resumed>) = 0 [pid 4998] umount2("./64/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5804] ioctl(4, LOOP_SET_FD, 3 [pid 5801] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5801] <... open resumed>) = 6 [pid 4998] openat(AT_FDCWD, "./64/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5801] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4998] <... openat resumed>) = 4 [pid 5801] <... open resumed>) = 7 [pid 4998] fstat(4, [pid 5801] sendfile(6, 7, NULL, 281474978811909 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 5804] <... ioctl resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5804] close(3 [pid 4998] getdents64(4, [pid 5804] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5804] mkdir("./file1", 0777 [pid 4998] close(4 [pid 5804] <... mkdir resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5804] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] rmdir("./64/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [ 201.132939][ T5805] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.161141][ T5804] loop2: detected capacity change from 0 to 4096 [pid 4998] close(3) = 0 [pid 4998] rmdir("./64") = 0 [pid 4998] mkdir("./65", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5806 [ 201.213844][ T5804] NILFS (loop2): invalid segment: Checksum error in segment payload [ 201.221911][ T5804] NILFS (loop2): trying rollback from an earlier position ./strace-static-x86_64: Process 5806 attached [pid 5806] chdir("./65") = 0 [pid 5806] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5806] setpgid(0, 0) = 0 [pid 5806] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5806] write(3, "1000", 4) = 4 [pid 5806] close(3) = 0 [pid 5806] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5806] memfd_create("syzkaller", 0) = 3 [pid 5806] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5797] <... sendfile resumed>) = 1048576 [pid 5797] exit_group(0) = ? [pid 5806] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5797] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5797, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5001] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./65/binderfs") = 0 [pid 5001] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5806] <... write resumed>) = 2097152 [pid 5804] <... mount resumed>) = 0 [pid 5806] munmap(0x7f18ca796000, 2097152 [pid 5804] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5806] <... munmap resumed>) = 0 [pid 5804] <... openat resumed>) = 3 [pid 5806] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5804] chdir("./file1" [pid 5806] <... openat resumed>) = 4 [pid 5804] <... chdir resumed>) = 0 [ 201.324655][ T5804] NILFS (loop2): recovery complete [ 201.339693][ T5807] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5806] ioctl(4, LOOP_SET_FD, 3 [pid 5804] ioctl(4, LOOP_CLR_FD) = 0 [pid 5806] <... ioctl resumed>) = 0 [pid 5806] close(3) = 0 [pid 5806] mkdir("./file1", 0777) = 0 [pid 5804] close(4 [pid 5806] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5804] <... close resumed>) = 0 [pid 5804] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5804] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5804] ftruncate(5, 33587195) = 0 [pid 5804] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [ 201.387715][ T5806] loop1: detected capacity change from 0 to 4096 [pid 5804] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 201.431729][ T5806] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5804] sendfile(6, 7, NULL, 281474978811909 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./65/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./65/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./65/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [ 201.533189][ T5806] NILFS (loop1): trying rollback from an earlier position [pid 5001] rmdir("./65") = 0 [pid 5001] mkdir("./66", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5809 [ 201.586631][ T5806] NILFS (loop1): recovery complete ./strace-static-x86_64: Process 5809 attached [pid 5806] <... mount resumed>) = 0 [pid 5806] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5809] chdir("./66" [pid 5806] chdir("./file1" [pid 5809] <... chdir resumed>) = 0 [pid 5806] <... chdir resumed>) = 0 [pid 5809] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5806] ioctl(4, LOOP_CLR_FD [pid 5809] <... prctl resumed>) = 0 [pid 5806] <... ioctl resumed>) = 0 [pid 5809] setpgid(0, 0 [pid 5806] close(4 [pid 5809] <... setpgid resumed>) = 0 [pid 5806] <... close resumed>) = 0 [pid 5809] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5806] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5809] <... openat resumed>) = 3 [pid 5806] <... open resumed>) = 4 [pid 5809] write(3, "1000", 4 [pid 5806] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5809] <... write resumed>) = 4 [pid 5806] <... open resumed>) = 5 [pid 5809] close(3 [pid 5806] ftruncate(5, 33587195 [pid 5809] <... close resumed>) = 0 [pid 5806] <... ftruncate resumed>) = 0 [ 201.634222][ T5808] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5809] symlink("/dev/binderfs", "./binderfs" [pid 5806] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5809] <... symlink resumed>) = 0 [pid 5806] <... open resumed>) = 6 [pid 5809] memfd_create("syzkaller", 0 [pid 5806] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5809] <... memfd_create resumed>) = 3 [pid 5806] <... open resumed>) = 7 [pid 5809] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5806] sendfile(6, 7, NULL, 281474978811909 [pid 5809] <... mmap resumed>) = 0x7f18ca796000 [pid 5809] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5809] munmap(0x7f18ca796000, 2097152) = 0 [pid 5799] <... sendfile resumed>) = 1048576 [pid 5799] exit_group(0) = ? [pid 5809] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5799] +++ exited with 0 +++ [pid 5809] ioctl(4, LOOP_SET_FD, 3 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5799, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 4997] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5800] <... sendfile resumed>) = 1048576 [pid 4997] unlink("./65/binderfs") = 0 [pid 5800] exit_group(0 [pid 4997] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5800] <... exit_group resumed>) = ? [pid 5809] <... ioctl resumed>) = 0 [pid 5809] close(3) = 0 [pid 5809] mkdir("./file1", 0777) = 0 [pid 5800] +++ exited with 0 +++ [pid 5809] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5800, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- [ 201.918249][ T5809] loop4: detected capacity change from 0 to 4096 [pid 5000] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./66/binderfs") = 0 [ 201.972170][ T5809] NILFS (loop4): invalid segment: Checksum error in segment payload [ 202.030414][ T5809] NILFS (loop4): trying rollback from an earlier position [pid 5000] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./65/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./65/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./65/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3 [pid 5000] <... umount2 resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 5000] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] rmdir("./65" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... rmdir resumed>) = 0 [pid 5000] lstat("./66/file1", [pid 4997] mkdir("./66", 0777 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... mkdir resumed>) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5000] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 202.149982][ T5809] NILFS (loop4): recovery complete [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] openat(AT_FDCWD, "./66/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] close(3 [pid 5000] <... openat resumed>) = 4 [pid 4997] <... close resumed>) = 0 [pid 5000] fstat(4, [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5811 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./66/file1" [pid 5809] <... mount resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./66") = 0 [pid 5000] mkdir("./67", 0777 [pid 5809] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5000] <... mkdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5809] <... openat resumed>) = 3 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5809] chdir("./file1" [pid 5000] close(3 [pid 5809] <... chdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5809] ioctl(4, LOOP_CLR_FD) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5812 ./strace-static-x86_64: Process 5812 attached [pid 5809] close(4) = 0 [pid 5809] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5812] chdir("./67") = 0 [pid 5809] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5812] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5812] setpgid(0, 0) = 0 [pid 5812] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5809] <... open resumed>) = 5 [pid 5812] write(3, "1000", 4) = 4 [pid 5809] ftruncate(5, 33587195 [pid 5812] close(3) = 0 [pid 5812] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5809] <... ftruncate resumed>) = 0 [pid 5812] memfd_create("syzkaller", 0) = 3 [pid 5809] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5812] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5809] <... open resumed>) = 6 [ 202.209169][ T5810] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds ./strace-static-x86_64: Process 5811 attached [pid 5809] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5811] chdir("./66" [pid 5809] <... open resumed>) = 7 [pid 5811] <... chdir resumed>) = 0 [pid 5809] sendfile(6, 7, NULL, 281474978811909 [pid 5811] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5811] setpgid(0, 0 [pid 5812] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5811] <... setpgid resumed>) = 0 [pid 5811] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5811] write(3, "1000", 4) = 4 [pid 5811] close(3) = 0 [pid 5811] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5811] memfd_create("syzkaller", 0) = 3 [pid 5811] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5811] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5801] <... sendfile resumed>) = 1048576 [pid 5801] exit_group(0) = ? [pid 5801] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5801, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5812] <... write resumed>) = 2097152 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5812] munmap(0x7f18ca796000, 2097152 [pid 5002] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5812] <... munmap resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./66/binderfs", [pid 5812] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5811] <... write resumed>) = 2097152 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5812] <... openat resumed>) = 4 [pid 5812] ioctl(4, LOOP_SET_FD, 3 [pid 5002] unlink("./66/binderfs" [pid 5811] munmap(0x7f18ca796000, 2097152 [pid 5002] <... unlink resumed>) = 0 [pid 5811] <... munmap resumed>) = 0 [pid 5002] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5811] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5811] ioctl(4, LOOP_SET_FD, 3 [pid 5812] <... ioctl resumed>) = 0 [pid 5812] close(3) = 0 [pid 5812] mkdir("./file1", 0777) = 0 [pid 5811] <... ioctl resumed>) = 0 [pid 5811] close(3) = 0 [pid 5811] mkdir("./file1", 0777) = 0 [pid 5812] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [ 202.409133][ T5812] loop3: detected capacity change from 0 to 4096 [ 202.428740][ T5811] loop0: detected capacity change from 0 to 4096 [ 202.472424][ T5812] NILFS (loop3): invalid segment: Checksum error in segment payload [ 202.481453][ T5811] NILFS (loop0): invalid segment: Checksum error in segment payload [ 202.490364][ T5812] NILFS (loop3): trying rollback from an earlier position [ 202.510884][ T5811] NILFS (loop0): trying rollback from an earlier position [pid 5811] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5804] <... sendfile resumed>) = 1048576 [pid 5811] <... mount resumed>) = 0 [pid 5804] exit_group(0 [pid 5811] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5002] <... umount2 resumed>) = 0 [pid 5811] <... openat resumed>) = 3 [pid 5804] <... exit_group resumed>) = ? [pid 5812] <... mount resumed>) = 0 [pid 5811] chdir("./file1" [pid 5812] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5811] <... chdir resumed>) = 0 [pid 5804] +++ exited with 0 +++ [pid 5812] chdir("./file1" [pid 5811] ioctl(4, LOOP_CLR_FD [pid 5002] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5811] <... ioctl resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5811] close(4 [pid 5002] lstat("./66/file1", [pid 5812] <... chdir resumed>) = 0 [pid 5811] <... close resumed>) = 0 [pid 5811] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5812] ioctl(4, LOOP_CLR_FD [pid 5002] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5804, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./66/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, [pid 5812] <... ioctl resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 5812] close(4 [pid 5811] <... open resumed>) = 4 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./66/file1" [pid 5812] <... close resumed>) = 0 [pid 5811] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] <... rmdir resumed>) = 0 [pid 4999] <... restart_syscall resumed>) = 0 [pid 5812] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [ 202.595744][ T5812] NILFS (loop3): recovery complete [ 202.603290][ T5811] NILFS (loop0): recovery complete [ 202.616386][ T5813] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 202.628829][ T5814] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5811] <... open resumed>) = 5 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5812] <... open resumed>) = 4 [pid 5811] ftruncate(5, 33587195 [pid 5002] close(3 [pid 5812] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5811] <... ftruncate resumed>) = 0 [pid 4999] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5812] <... open resumed>) = 5 [pid 5811] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5812] ftruncate(5, 33587195 [pid 5811] <... open resumed>) = 6 [pid 4999] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5812] <... ftruncate resumed>) = 0 [pid 5811] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4999] <... openat resumed>) = 3 [pid 5812] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5811] <... open resumed>) = 7 [pid 5002] <... close resumed>) = 0 [pid 4999] fstat(3, [pid 5812] <... open resumed>) = 6 [pid 5811] sendfile(6, 7, NULL, 281474978811909 [pid 5002] rmdir("./66" [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5812] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5002] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, [pid 5812] <... open resumed>) = 7 [pid 5002] mkdir("./67", 0777 [pid 5812] sendfile(6, 7, NULL, 281474978811909 [pid 5002] <... mkdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4999] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5002] <... openat resumed>) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] lstat("./65/binderfs", [pid 5002] close(3) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] unlink("./65/binderfs" [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5815 [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5815 attached [pid 5815] chdir("./67") = 0 [pid 5815] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5815] setpgid(0, 0) = 0 [pid 5815] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5815] write(3, "1000", 4) = 4 [pid 5815] close(3) = 0 [pid 5815] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5815] memfd_create("syzkaller", 0) = 3 [pid 5806] <... sendfile resumed>) = 1048576 [pid 5815] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5806] exit_group(0 [pid 4999] <... umount2 resumed>) = 0 [pid 5815] <... mmap resumed>) = 0x7f18ca796000 [pid 5806] <... exit_group resumed>) = ? [pid 4999] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5806] +++ exited with 0 +++ [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5806, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 4998] umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./65/file1", [pid 4998] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... openat resumed>) = 3 [pid 4999] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4998] fstat(3, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] openat(AT_FDCWD, "./65/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4998] getdents64(3, [pid 4999] <... openat resumed>) = 4 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] fstat(4, [pid 4998] umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] getdents64(4, [pid 4998] unlink("./65/binderfs" [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] <... unlink resumed>) = 0 [pid 4999] getdents64(4, [pid 4998] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5815] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] close(4) = 0 [pid 4999] rmdir("./65/file1") = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./65") = 0 [pid 4999] mkdir("./66", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5816 ./strace-static-x86_64: Process 5816 attached [pid 5816] chdir("./66") = 0 [pid 5815] <... write resumed>) = 2097152 [pid 5816] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5815] munmap(0x7f18ca796000, 2097152 [pid 5816] <... prctl resumed>) = 0 [pid 5816] setpgid(0, 0) = 0 [pid 5815] <... munmap resumed>) = 0 [pid 5816] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5816] write(3, "1000", 4) = 4 [pid 5816] close(3) = 0 [pid 5816] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5816] memfd_create("syzkaller", 0) = 3 [pid 5816] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5815] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5815] ioctl(4, LOOP_SET_FD, 3 [pid 4998] <... umount2 resumed>) = 0 [pid 5815] <... ioctl resumed>) = 0 [pid 5815] close(3) = 0 [pid 4998] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5815] mkdir("./file1", 0777) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./65/file1", [pid 5815] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./65/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./65/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5816] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] <... openat resumed>) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./65/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [ 203.050086][ T5815] loop5: detected capacity change from 0 to 4096 [pid 4998] close(3) = 0 [pid 4998] rmdir("./65") = 0 [pid 4998] mkdir("./66", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5817 ./strace-static-x86_64: Process 5817 attached [pid 5817] chdir("./66") = 0 [pid 5817] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5817] setpgid(0, 0) = 0 [pid 5817] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5817] write(3, "1000", 4) = 4 [pid 5817] close(3) = 0 [ 203.112515][ T5815] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5817] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5817] memfd_create("syzkaller", 0) = 3 [pid 5817] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5816] <... write resumed>) = 2097152 [pid 5816] munmap(0x7f18ca796000, 2097152) = 0 [pid 5816] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 203.164336][ T5815] NILFS (loop5): trying rollback from an earlier position [pid 5816] ioctl(4, LOOP_SET_FD, 3 [pid 5817] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5816] <... ioctl resumed>) = 0 [pid 5816] close(3) = 0 [pid 5816] mkdir("./file1", 0777) = 0 [ 203.209306][ T5816] loop2: detected capacity change from 0 to 4096 [ 203.243146][ T5815] NILFS (loop5): recovery complete [pid 5816] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5817] <... write resumed>) = 2097152 [pid 5815] <... mount resumed>) = 0 [pid 5815] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5815] chdir("./file1") = 0 [pid 5815] ioctl(4, LOOP_CLR_FD) = 0 [pid 5815] close(4) = 0 [pid 5815] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5815] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [ 203.273808][ T5816] NILFS (loop2): invalid segment: Checksum error in segment payload [ 203.293215][ T5816] NILFS (loop2): trying rollback from an earlier position [ 203.300741][ T5818] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5815] ftruncate(5, 33587195) = 0 [pid 5815] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5815] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5815] sendfile(6, 7, NULL, 281474978811909 [pid 5817] munmap(0x7f18ca796000, 2097152) = 0 [pid 5817] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 203.339621][ T5816] NILFS (loop2): recovery complete [pid 5817] ioctl(4, LOOP_SET_FD, 3 [pid 5816] <... mount resumed>) = 0 [pid 5816] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5816] chdir("./file1") = 0 [pid 5816] ioctl(4, LOOP_CLR_FD) = 0 [pid 5816] close(4) = 0 [pid 5817] <... ioctl resumed>) = 0 [pid 5817] close(3) = 0 [pid 5817] mkdir("./file1", 0777) = 0 [pid 5817] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [ 203.380863][ T5817] loop1: detected capacity change from 0 to 4096 [ 203.393348][ T5819] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5816] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5816] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5816] ftruncate(5, 33587195) = 0 [pid 5816] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5816] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5816] sendfile(6, 7, NULL, 281474978811909 [pid 5809] <... sendfile resumed>) = 1048576 [pid 5809] exit_group(0) = ? [pid 5809] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5809, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5001] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 203.481748][ T5817] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5001] lstat("./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./66/binderfs") = 0 [ 203.548309][ T5817] NILFS (loop1): trying rollback from an earlier position [ 203.644071][ T5817] NILFS (loop1): recovery complete [pid 5001] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5811] <... sendfile resumed>) = 1048576 [pid 5811] exit_group(0) = ? [pid 5811] +++ exited with 0 +++ [pid 5817] <... mount resumed>) = 0 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5811, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 5817] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4997] restart_syscall(<... resuming interrupted clone ...> [pid 5817] <... openat resumed>) = 3 [pid 4997] <... restart_syscall resumed>) = 0 [pid 5817] chdir("./file1") = 0 [pid 5817] ioctl(4, LOOP_CLR_FD [pid 4997] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5817] <... ioctl resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5817] close(4 [pid 4997] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5817] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 4997] <... openat resumed>) = 3 [pid 5817] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4997] fstat(3, [pid 5817] <... open resumed>) = 4 [pid 5001] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5817] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4997] getdents64(3, [pid 5817] <... open resumed>) = 5 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5817] ftruncate(5, 33587195 [pid 4997] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5817] <... ftruncate resumed>) = 0 [pid 5812] <... sendfile resumed>) = 1048576 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5817] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5812] exit_group(0 [pid 5001] lstat("./66/file1", [pid 4997] lstat("./66/binderfs", [pid 5817] <... open resumed>) = 6 [pid 5812] <... exit_group resumed>) = ? [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5817] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4997] unlink("./66/binderfs" [pid 5817] <... open resumed>) = 7 [pid 5812] +++ exited with 0 +++ [ 203.704815][ T5820] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... unlink resumed>) = 0 [pid 5817] sendfile(6, 7, NULL, 281474978811909 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5812, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 4997] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] openat(AT_FDCWD, "./66/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 5001] <... openat resumed>) = 4 [pid 5000] <... restart_syscall resumed>) = 0 [pid 5001] fstat(4, [pid 5000] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./67/binderfs") = 0 [pid 5000] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./66/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./66") = 0 [pid 5001] mkdir("./67", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5821 ./strace-static-x86_64: Process 5821 attached [pid 5821] chdir("./67") = 0 [pid 5821] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5821] setpgid(0, 0) = 0 [pid 5821] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5821] write(3, "1000", 4) = 4 [pid 5821] close(3) = 0 [pid 5821] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5821] memfd_create("syzkaller", 0) = 3 [pid 5821] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5000] <... umount2 resumed>) = 0 [pid 4997] <... umount2 resumed>) = 0 [pid 5000] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5821] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] lstat("./67/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./67/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... openat resumed>) = 4 [pid 5000] fstat(4, [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, [pid 4997] lstat("./66/file1", [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4 [pid 4997] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... close resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] rmdir("./67/file1" [pid 4997] openat(AT_FDCWD, "./66/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... rmdir resumed>) = 0 [pid 4997] <... openat resumed>) = 4 [pid 5000] getdents64(3, [pid 4997] fstat(4, [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] close(3 [pid 4997] getdents64(4, [pid 5000] <... close resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] rmdir("./67" [pid 4997] getdents64(4, [pid 5000] <... rmdir resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] mkdir("./68", 0777 [pid 4997] close(4 [pid 5000] <... mkdir resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4997] rmdir("./66/file1" [pid 5000] <... openat resumed>) = 3 [pid 4997] <... rmdir resumed>) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4997] getdents64(3, [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3 [pid 4997] close(3 [pid 5000] <... close resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] rmdir("./66") = 0 [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5822 [pid 4997] mkdir("./67", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5822 attached [pid 5822] chdir("./68" [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5823 [pid 5822] <... chdir resumed>) = 0 [pid 5822] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5822] setpgid(0, 0) = 0 [pid 5822] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 5823 attached [pid 5822] write(3, "1000", 4 [pid 5823] chdir("./67" [pid 5822] <... write resumed>) = 4 [pid 5823] <... chdir resumed>) = 0 [pid 5822] close(3 [pid 5823] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5822] <... close resumed>) = 0 [pid 5821] <... write resumed>) = 2097152 [pid 5823] <... prctl resumed>) = 0 [pid 5822] symlink("/dev/binderfs", "./binderfs" [pid 5823] setpgid(0, 0 [pid 5822] <... symlink resumed>) = 0 [pid 5823] <... setpgid resumed>) = 0 [pid 5822] memfd_create("syzkaller", 0 [pid 5823] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5822] <... memfd_create resumed>) = 3 [pid 5823] <... openat resumed>) = 3 [pid 5822] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5823] write(3, "1000", 4 [pid 5822] <... mmap resumed>) = 0x7f18ca796000 [pid 5823] <... write resumed>) = 4 [pid 5821] munmap(0x7f18ca796000, 2097152 [pid 5823] close(3) = 0 [pid 5823] symlink("/dev/binderfs", "./binderfs" [pid 5821] <... munmap resumed>) = 0 [pid 5823] <... symlink resumed>) = 0 [pid 5823] memfd_create("syzkaller", 0 [pid 5821] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5823] <... memfd_create resumed>) = 3 [pid 5821] <... openat resumed>) = 4 [pid 5823] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5821] ioctl(4, LOOP_SET_FD, 3 [pid 5823] <... mmap resumed>) = 0x7f18ca796000 [pid 5821] <... ioctl resumed>) = 0 [pid 5821] close(3) = 0 [pid 5821] mkdir("./file1", 0777) = 0 [pid 5821] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5823] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 204.131331][ T5821] loop4: detected capacity change from 0 to 4096 [ 204.197937][ T5821] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5822] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5822] munmap(0x7f18ca796000, 2097152) = 0 [pid 5822] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5823] <... write resumed>) = 2097152 [pid 5822] ioctl(4, LOOP_SET_FD, 3 [pid 5823] munmap(0x7f18ca796000, 2097152) = 0 [pid 5823] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 204.247337][ T5821] NILFS (loop4): trying rollback from an earlier position [ 204.277985][ T5822] loop3: detected capacity change from 0 to 4096 [pid 5823] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5822] <... ioctl resumed>) = 0 [pid 5822] close(3) = 0 [pid 5822] mkdir("./file1", 0777) = 0 [pid 5822] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5823] close(3) = 0 [pid 5823] mkdir("./file1", 0777) = 0 [ 204.304119][ T5823] loop0: detected capacity change from 0 to 4096 [ 204.311584][ T5821] NILFS (loop4): recovery complete [ 204.336161][ T5822] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5823] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5821] <... mount resumed>) = 0 [pid 5821] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5816] <... sendfile resumed>) = 1048576 [pid 5815] <... sendfile resumed>) = 1048576 [pid 5815] exit_group(0 [pid 5821] <... openat resumed>) = 3 [pid 5816] exit_group(0 [pid 5815] <... exit_group resumed>) = ? [pid 5821] chdir("./file1" [pid 5816] <... exit_group resumed>) = ? [pid 5815] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5815, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5821] <... chdir resumed>) = 0 [pid 5816] +++ exited with 0 +++ [ 204.361054][ T5823] NILFS (loop0): invalid segment: Checksum error in segment payload [ 204.366732][ T5824] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.383878][ T5822] NILFS (loop3): trying rollback from an earlier position [ 204.399158][ T5823] NILFS (loop0): trying rollback from an earlier position [ 204.404677][ T5822] NILFS (loop3): recovery complete [pid 5821] ioctl(4, LOOP_CLR_FD [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5816, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=23 /* 0.23 s */} --- [pid 5821] <... ioctl resumed>) = 0 [pid 5002] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5821] close(4) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5821] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4999] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./66/binderfs" [pid 5821] <... open resumed>) = 4 [pid 5002] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... unlink resumed>) = 0 [pid 5821] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] <... openat resumed>) = 3 [pid 4999] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5822] <... mount resumed>) = 0 [pid 5821] <... open resumed>) = 5 [pid 5002] fstat(3, [pid 5823] <... mount resumed>) = 0 [pid 5822] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5821] ftruncate(5, 33587195 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5823] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5822] <... openat resumed>) = 3 [pid 5821] <... ftruncate resumed>) = 0 [pid 5002] getdents64(3, [pid 5823] <... openat resumed>) = 3 [pid 5822] chdir("./file1" [pid 5821] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5823] chdir("./file1" [pid 5822] <... chdir resumed>) = 0 [pid 5821] <... open resumed>) = 6 [pid 5002] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5823] <... chdir resumed>) = 0 [pid 5822] ioctl(4, LOOP_CLR_FD [pid 5821] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] ioctl(4, LOOP_CLR_FD [pid 5822] <... ioctl resumed>) = 0 [pid 5821] <... open resumed>) = 7 [pid 5002] lstat("./67/binderfs", [pid 5823] <... ioctl resumed>) = 0 [pid 5822] close(4 [pid 5821] sendfile(6, 7, NULL, 281474978811909 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5823] close(4 [pid 5822] <... close resumed>) = 0 [ 204.425698][ T5823] NILFS (loop0): recovery complete [ 204.437854][ T5825] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.450642][ T5826] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] unlink("./67/binderfs" [pid 5823] <... close resumed>) = 0 [pid 5822] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5002] <... unlink resumed>) = 0 [pid 5823] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5822] <... open resumed>) = 4 [pid 5002] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5823] <... open resumed>) = 4 [pid 5822] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5823] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5822] <... open resumed>) = 5 [pid 5823] <... open resumed>) = 5 [pid 5822] ftruncate(5, 33587195 [pid 5823] ftruncate(5, 33587195 [pid 5822] <... ftruncate resumed>) = 0 [pid 5823] <... ftruncate resumed>) = 0 [pid 5822] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5823] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5822] <... open resumed>) = 6 [pid 5823] <... open resumed>) = 6 [pid 5822] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5823] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5822] <... open resumed>) = 7 [pid 5823] <... open resumed>) = 7 [pid 5822] sendfile(6, 7, NULL, 281474978811909 [pid 5823] sendfile(6, 7, NULL, 281474978811909 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./66/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./66/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./66/file1") = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./66") = 0 [pid 4999] mkdir("./67", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5827 ./strace-static-x86_64: Process 5827 attached [pid 5827] chdir("./67") = 0 [pid 5827] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... umount2 resumed>) = 0 [pid 5827] <... prctl resumed>) = 0 [pid 5827] setpgid(0, 0) = 0 [pid 5827] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5827] <... openat resumed>) = 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] write(3, "1000", 4) = 4 [pid 5002] lstat("./67/file1", [pid 5827] close(3 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5827] <... close resumed>) = 0 [pid 5827] symlink("/dev/binderfs", "./binderfs" [pid 5002] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5827] <... symlink resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5827] memfd_create("syzkaller", 0 [pid 5002] openat(AT_FDCWD, "./67/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5827] <... memfd_create resumed>) = 3 [pid 5002] <... openat resumed>) = 4 [pid 5827] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] fstat(4, [pid 5827] <... mmap resumed>) = 0x7f18ca796000 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./67/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./67") = 0 [pid 5002] mkdir("./68", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5828 [pid 5827] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5817] <... sendfile resumed>) = 1048576 [pid 5817] exit_group(0./strace-static-x86_64: Process 5828 attached ) = ? [pid 5828] chdir("./68" [pid 5817] +++ exited with 0 +++ [pid 5828] <... chdir resumed>) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5817, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5828] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5828] setpgid(0, 0 [pid 4998] umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5828] <... setpgid resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5828] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] <... openat resumed>) = 3 [pid 5828] <... openat resumed>) = 3 [pid 4998] fstat(3, [pid 5828] write(3, "1000", 4 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5828] <... write resumed>) = 4 [pid 4998] getdents64(3, [pid 5828] close(3 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5828] <... close resumed>) = 0 [pid 4998] umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5828] symlink("/dev/binderfs", "./binderfs" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5828] <... symlink resumed>) = 0 [pid 4998] lstat("./66/binderfs", [pid 5828] memfd_create("syzkaller", 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5828] <... memfd_create resumed>) = 3 [pid 4998] unlink("./66/binderfs" [pid 5828] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4998] <... unlink resumed>) = 0 [pid 5828] <... mmap resumed>) = 0x7f18ca796000 [pid 4998] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5827] <... write resumed>) = 2097152 [pid 5828] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5827] munmap(0x7f18ca796000, 2097152) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5827] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5827] close(3) = 0 [pid 5827] mkdir("./file1", 0777) = 0 [ 204.998253][ T5827] loop2: detected capacity change from 0 to 4096 [pid 5827] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5828] <... write resumed>) = 2097152 [ 205.048500][ T5827] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5828] munmap(0x7f18ca796000, 2097152) = 0 [pid 5828] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5828] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5828] close(3) = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 5828] mkdir("./file1", 0777) = 0 [pid 4998] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5828] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] lstat("./66/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 205.091817][ T5827] NILFS (loop2): trying rollback from an earlier position [ 205.113971][ T5828] loop5: detected capacity change from 0 to 4096 [pid 4998] umount2("./66/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./66/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./66/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./66") = 0 [pid 4998] mkdir("./67", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5829 ./strace-static-x86_64: Process 5829 attached [pid 5829] chdir("./67") = 0 [ 205.186948][ T5828] NILFS (loop5): invalid segment: Checksum error in segment payload [ 205.195817][ T5827] NILFS (loop2): recovery complete [pid 5829] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5829] setpgid(0, 0) = 0 [pid 5829] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5829] write(3, "1000", 4) = 4 [pid 5829] close(3) = 0 [pid 5829] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5829] memfd_create("syzkaller", 0) = 3 [pid 5829] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5827] <... mount resumed>) = 0 [pid 5829] <... mmap resumed>) = 0x7f18ca796000 [pid 5827] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5827] chdir("./file1") = 0 [pid 5827] ioctl(4, LOOP_CLR_FD) = 0 [pid 5827] close(4) = 0 [ 205.229341][ T5828] NILFS (loop5): trying rollback from an earlier position [ 205.254549][ T5830] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5827] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5827] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5827] ftruncate(5, 33587195) = 0 [pid 5827] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5827] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 205.325663][ T5828] NILFS (loop5): recovery complete [pid 5827] sendfile(6, 7, NULL, 281474978811909 [pid 5829] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5828] <... mount resumed>) = 0 [pid 5828] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5828] chdir("./file1") = 0 [pid 5828] ioctl(4, LOOP_CLR_FD) = 0 [pid 5828] close(4) = 0 [pid 5828] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5828] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5828] ftruncate(5, 33587195) = 0 [pid 5828] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5828] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 205.360032][ T5831] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5828] sendfile(6, 7, NULL, 281474978811909 [pid 5829] <... write resumed>) = 2097152 [pid 5829] munmap(0x7f18ca796000, 2097152) = 0 [pid 5829] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5829] ioctl(4, LOOP_SET_FD, 3 [pid 5821] <... sendfile resumed>) = 1048576 [pid 5829] <... ioctl resumed>) = 0 [pid 5821] exit_group(0 [pid 5829] close(3 [pid 5821] <... exit_group resumed>) = ? [pid 5829] <... close resumed>) = 0 [pid 5829] mkdir("./file1", 0777 [pid 5821] +++ exited with 0 +++ [pid 5829] <... mkdir resumed>) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5821, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [ 205.554565][ T5829] loop1: detected capacity change from 0 to 4096 [pid 5829] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5001] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./67/binderfs") = 0 [ 205.645878][ T5829] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5001] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5823] <... sendfile resumed>) = 1048576 [pid 5823] exit_group(0) = ? [pid 5823] +++ exited with 0 +++ [pid 5822] <... sendfile resumed>) = 1048576 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5823, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5822] exit_group(0) = ? [pid 5822] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5822, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5000] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... openat resumed>) = 3 [pid 4997] <... openat resumed>) = 3 [pid 5000] fstat(3, [pid 4997] fstat(3, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 4997] getdents64(3, [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./68/binderfs", [pid 4997] lstat("./67/binderfs", [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./68/binderfs" [pid 4997] unlink("./67/binderfs" [pid 5000] <... unlink resumed>) = 0 [pid 4997] <... unlink resumed>) = 0 [pid 5000] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 205.687631][ T5829] NILFS (loop1): trying rollback from an earlier position [ 205.711863][ T5829] NILFS (loop1): recovery complete [pid 4997] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5829] <... mount resumed>) = 0 [pid 5829] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5829] chdir("./file1") = 0 [pid 5829] ioctl(4, LOOP_CLR_FD) = 0 [pid 5829] close(4) = 0 [pid 5829] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5829] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5829] ftruncate(5, 33587195) = 0 [pid 5829] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5829] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 205.770460][ T5832] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5829] sendfile(6, 7, NULL, 281474978811909 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./67/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./67/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./67/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./67") = 0 [pid 5001] mkdir("./68", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5833 ./strace-static-x86_64: Process 5833 attached [pid 5833] chdir("./68") = 0 [pid 5833] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5833] setpgid(0, 0) = 0 [pid 5833] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5833] write(3, "1000", 4) = 4 [pid 5833] close(3 [pid 5000] <... umount2 resumed>) = 0 [pid 5833] <... close resumed>) = 0 [pid 5833] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5833] memfd_create("syzkaller", 0) = 3 [pid 5833] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5000] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./68/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./68/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./68/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./68") = 0 [pid 5000] mkdir("./69", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5834 ./strace-static-x86_64: Process 5834 attached [pid 5834] chdir("./69") = 0 [pid 5834] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4997] <... umount2 resumed>) = 0 [pid 5834] <... prctl resumed>) = 0 [pid 5834] setpgid(0, 0) = 0 [pid 5833] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5834] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5834] write(3, "1000", 4) = 4 [pid 5834] close(3) = 0 [pid 5834] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5834] memfd_create("syzkaller", 0 [pid 4997] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5834] <... memfd_create resumed>) = 3 [pid 5834] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./67/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./67/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./67/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./67") = 0 [pid 4997] mkdir("./68", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3 [pid 5834] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4997] <... close resumed>) = 0 [pid 5833] <... write resumed>) = 2097152 [pid 5833] munmap(0x7f18ca796000, 2097152 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5835 [pid 5833] <... munmap resumed>) = 0 [pid 5833] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5833] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5835 attached [pid 5835] chdir("./68") = 0 [pid 5835] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5835] setpgid(0, 0) = 0 [pid 5835] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5835] write(3, "1000", 4) = 4 [pid 5835] close(3) = 0 [pid 5835] symlink("/dev/binderfs", "./binderfs" [pid 5833] <... ioctl resumed>) = 0 [pid 5835] <... symlink resumed>) = 0 [pid 5833] close(3) = 0 [pid 5835] memfd_create("syzkaller", 0 [pid 5833] mkdir("./file1", 0777 [pid 5835] <... memfd_create resumed>) = 3 [pid 5833] <... mkdir resumed>) = 0 [pid 5835] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5833] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5835] <... mmap resumed>) = 0x7f18ca796000 [ 206.177233][ T5833] loop4: detected capacity change from 0 to 4096 [pid 5834] <... write resumed>) = 2097152 [pid 5834] munmap(0x7f18ca796000, 2097152) = 0 [pid 5834] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5834] ioctl(4, LOOP_SET_FD, 3 [pid 5835] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5834] <... ioctl resumed>) = 0 [ 206.254549][ T5833] NILFS (loop4): invalid segment: Checksum error in segment payload [ 206.262616][ T5833] NILFS (loop4): trying rollback from an earlier position [ 206.287962][ T5834] loop3: detected capacity change from 0 to 4096 [pid 5834] close(3) = 0 [pid 5834] mkdir("./file1", 0777) = 0 [pid 5834] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5835] <... write resumed>) = 2097152 [pid 5835] munmap(0x7f18ca796000, 2097152) = 0 [pid 5835] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 206.376379][ T5834] NILFS (loop3): invalid segment: Checksum error in segment payload [ 206.386290][ T5833] NILFS (loop4): recovery complete [pid 5835] ioctl(4, LOOP_SET_FD, 3 [pid 5833] <... mount resumed>) = 0 [pid 5833] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5833] chdir("./file1") = 0 [pid 5833] ioctl(4, LOOP_CLR_FD) = 0 [pid 5835] <... ioctl resumed>) = 0 [pid 5833] close(4 [pid 5835] close(3 [pid 5833] <... close resumed>) = 0 [pid 5835] <... close resumed>) = 0 [pid 5835] mkdir("./file1", 0777) = 0 [ 206.428306][ T5835] loop0: detected capacity change from 0 to 4096 [ 206.434788][ T5834] NILFS (loop3): trying rollback from an earlier position [ 206.443585][ T5836] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5835] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5833] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5827] <... sendfile resumed>) = 1048576 [pid 5827] exit_group(0) = ? [pid 5834] <... mount resumed>) = 0 [pid 5833] <... open resumed>) = 4 [pid 5827] +++ exited with 0 +++ [pid 5834] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5827, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5834] chdir("./file1" [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 5834] <... chdir resumed>) = 0 [pid 4999] <... restart_syscall resumed>) = 0 [pid 5834] ioctl(4, LOOP_CLR_FD) = 0 [pid 5834] close(4 [pid 4999] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5834] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4999] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5834] <... open resumed>) = 4 [pid 4999] <... openat resumed>) = 3 [pid 5834] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4999] fstat(3, [pid 5834] <... open resumed>) = 5 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5834] ftruncate(5, 33587195 [pid 5833] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4999] getdents64(3, [pid 5834] <... ftruncate resumed>) = 0 [pid 5833] <... open resumed>) = 5 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5834] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5833] ftruncate(5, 33587195 [pid 4999] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5834] <... open resumed>) = 6 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5834] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4999] lstat("./67/binderfs", [pid 5834] <... open resumed>) = 7 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5834] sendfile(6, 7, NULL, 281474978811909 [pid 4999] unlink("./67/binderfs" [pid 5833] <... ftruncate resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5833] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [ 206.478499][ T5835] NILFS (loop0): invalid segment: Checksum error in segment payload [ 206.486610][ T5834] NILFS (loop3): recovery complete [ 206.506695][ T5837] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5833] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 206.559954][ T5835] NILFS (loop0): trying rollback from an earlier position [pid 5833] sendfile(6, 7, NULL, 281474978811909 [pid 5828] <... sendfile resumed>) = 1048576 [pid 5828] exit_group(0) = ? [pid 5828] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5828, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- [pid 5002] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./68/binderfs") = 0 [ 206.683642][ T5835] NILFS (loop0): recovery complete [pid 5002] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5835] <... mount resumed>) = 0 [pid 5835] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5835] chdir("./file1") = 0 [pid 5835] ioctl(4, LOOP_CLR_FD) = 0 [pid 5835] close(4) = 0 [pid 5835] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5835] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5835] ftruncate(5, 33587195) = 0 [pid 5835] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5835] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5835] sendfile(6, 7, NULL, 281474978811909 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./67/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 206.711171][ T5838] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] openat(AT_FDCWD, "./67/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./67/file1") = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./67") = 0 [pid 4999] mkdir("./68", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5839 attached , child_tidptr=0x555556f7b690) = 5839 [pid 5839] chdir("./68") = 0 [pid 5839] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5839] setpgid(0, 0) = 0 [pid 5839] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5839] write(3, "1000", 4) = 4 [pid 5839] close(3) = 0 [pid 5839] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5839] memfd_create("syzkaller", 0) = 3 [pid 5839] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./68/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5839] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./68/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./68/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./68") = 0 [pid 5002] mkdir("./69", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5839] <... write resumed>) = 2097152 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5839] munmap(0x7f18ca796000, 2097152 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5839] <... munmap resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5840 [pid 5839] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5839] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5840 attached [pid 5840] chdir("./69") = 0 [pid 5840] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5840] setpgid(0, 0) = 0 [pid 5840] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5840] write(3, "1000", 4) = 4 [pid 5840] close(3) = 0 [pid 5840] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5839] <... ioctl resumed>) = 0 [pid 5840] memfd_create("syzkaller", 0 [pid 5839] close(3 [pid 5840] <... memfd_create resumed>) = 3 [pid 5839] <... close resumed>) = 0 [pid 5840] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 207.013830][ T5839] loop2: detected capacity change from 0 to 4096 [pid 5839] mkdir("./file1", 0777) = 0 [pid 5839] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5829] <... sendfile resumed>) = 1048576 [pid 5829] exit_group(0) = ? [pid 5829] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5829, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 5840] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./67/binderfs") = 0 [ 207.100765][ T5839] NILFS (loop2): invalid segment: Checksum error in segment payload [ 207.121964][ T5839] NILFS (loop2): trying rollback from an earlier position [ 207.195199][ T5839] NILFS (loop2): recovery complete [pid 4998] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5839] <... mount resumed>) = 0 [pid 5839] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5839] chdir("./file1") = 0 [pid 5839] ioctl(4, LOOP_CLR_FD) = 0 [pid 5839] close(4) = 0 [pid 5839] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5839] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5839] ftruncate(5, 33587195 [pid 5840] <... write resumed>) = 2097152 [pid 5839] <... ftruncate resumed>) = 0 [pid 5839] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5840] munmap(0x7f18ca796000, 2097152 [pid 5839] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5839] sendfile(6, 7, NULL, 281474978811909 [pid 5840] <... munmap resumed>) = 0 [pid 5840] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 207.233630][ T5841] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5840] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5840] close(3) = 0 [pid 5840] mkdir("./file1", 0777) = 0 [ 207.287444][ T5840] loop5: detected capacity change from 0 to 4096 [pid 5840] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./67/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./67/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./67/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./67/file1") = 0 [ 207.380635][ T5840] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./67") = 0 [pid 4998] mkdir("./68", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [ 207.434330][ T5840] NILFS (loop5): trying rollback from an earlier position [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5842 ./strace-static-x86_64: Process 5842 attached [pid 5842] chdir("./68") = 0 [pid 5842] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5842] setpgid(0, 0) = 0 [ 207.514415][ T5840] NILFS (loop5): recovery complete [pid 5842] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5842] write(3, "1000", 4) = 4 [pid 5842] close(3) = 0 [pid 5842] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5842] memfd_create("syzkaller", 0) = 3 [pid 5842] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5840] <... mount resumed>) = 0 [pid 5840] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5840] chdir("./file1") = 0 [pid 5840] ioctl(4, LOOP_CLR_FD) = 0 [pid 5840] close(4) = 0 [pid 5840] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5840] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5840] ftruncate(5, 33587195) = 0 [pid 5840] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5840] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 207.589548][ T5843] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5840] sendfile(6, 7, NULL, 281474978811909 [pid 5842] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5834] <... sendfile resumed>) = 1048576 [pid 5834] exit_group(0) = ? [pid 5834] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5834, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=34 /* 0.34 s */} --- [pid 5833] <... sendfile resumed>) = 1048576 [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5833] exit_group(0) = ? [pid 5000] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5833] +++ exited with 0 +++ [pid 5000] getdents64(3, [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5833, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] <... restart_syscall resumed>) = 0 [pid 5000] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] lstat("./69/binderfs", [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5842] <... write resumed>) = 2097152 [pid 5001] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5842] munmap(0x7f18ca796000, 2097152 [pid 5001] <... openat resumed>) = 3 [pid 5000] unlink("./69/binderfs" [pid 5842] <... munmap resumed>) = 0 [pid 5001] fstat(3, [pid 5000] <... unlink resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(3, [pid 5842] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5842] <... openat resumed>) = 4 [pid 5001] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5842] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./68/binderfs") = 0 [pid 5001] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5842] <... ioctl resumed>) = 0 [pid 5842] close(3) = 0 [pid 5842] mkdir("./file1", 0777) = 0 [ 207.794599][ T5842] loop1: detected capacity change from 0 to 4096 [ 207.833596][ T5842] NILFS (loop1): invalid segment: Checksum error in segment payload [ 207.874081][ T5842] NILFS (loop1): trying rollback from an earlier position [pid 5842] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5835] <... sendfile resumed>) = 1048576 [pid 5835] exit_group(0) = ? [pid 5835] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5835, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 4997] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4997] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] <... umount2 resumed>) = 0 [pid 4997] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] unlink("./68/binderfs" [pid 5000] lstat("./69/file1", [pid 4997] <... unlink resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 207.963628][ T5842] NILFS (loop1): recovery complete [pid 4997] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./68/file1", [pid 5000] openat(AT_FDCWD, "./69/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... openat resumed>) = 4 [pid 5842] <... mount resumed>) = 0 [pid 5842] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5001] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] fstat(4, [pid 5842] <... openat resumed>) = 3 [pid 5842] chdir("./file1") = 0 [pid 5842] ioctl(4, LOOP_CLR_FD [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] openat(AT_FDCWD, "./68/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] getdents64(4, [pid 5001] <... openat resumed>) = 4 [pid 5842] <... ioctl resumed>) = 0 [pid 5001] fstat(4, [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5842] close(4) = 0 [pid 5842] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, [pid 5001] getdents64(4, [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5842] <... open resumed>) = 4 [pid 5001] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] close(4 [pid 5842] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5001] getdents64(4, [pid 5842] <... open resumed>) = 5 [pid 5001] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] <... close resumed>) = 0 [pid 5842] ftruncate(5, 33587195 [pid 5001] close(4 [pid 5000] rmdir("./69/file1" [pid 5842] <... ftruncate resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5842] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5842] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5001] rmdir("./68/file1" [pid 5000] <... rmdir resumed>) = 0 [pid 5842] <... open resumed>) = 7 [pid 5842] sendfile(6, 7, NULL, 281474978811909 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] getdents64(3, [pid 5001] getdents64(3, [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3 [pid 5001] close(3 [pid 5000] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5000] rmdir("./69" [pid 5001] rmdir("./68" [pid 5000] <... rmdir resumed>) = 0 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] mkdir("./70", 0777 [pid 5001] mkdir("./69", 0777 [pid 5000] <... mkdir resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [ 208.014850][ T5844] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5001] <... openat resumed>) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 5001] close(3 [pid 5000] <... close resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5845 [pid 5001] <... clone resumed>, child_tidptr=0x555556f7b690) = 5846 ./strace-static-x86_64: Process 5845 attached ./strace-static-x86_64: Process 5846 attached [pid 5845] chdir("./70" [pid 5846] chdir("./69" [pid 5845] <... chdir resumed>) = 0 [pid 5846] <... chdir resumed>) = 0 [pid 5845] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5846] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5845] <... prctl resumed>) = 0 [pid 5846] <... prctl resumed>) = 0 [pid 5845] setpgid(0, 0 [pid 5846] setpgid(0, 0 [pid 5845] <... setpgid resumed>) = 0 [pid 5846] <... setpgid resumed>) = 0 [pid 5845] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5846] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5845] <... openat resumed>) = 3 [pid 5846] <... openat resumed>) = 3 [pid 5845] write(3, "1000", 4 [pid 5846] write(3, "1000", 4 [pid 5845] <... write resumed>) = 4 [pid 5846] <... write resumed>) = 4 [pid 5845] close(3 [pid 5846] close(3 [pid 5845] <... close resumed>) = 0 [pid 5846] <... close resumed>) = 0 [pid 5845] symlink("/dev/binderfs", "./binderfs" [pid 5846] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5845] <... symlink resumed>) = 0 [pid 5846] memfd_create("syzkaller", 0 [pid 5845] memfd_create("syzkaller", 0 [pid 5846] <... memfd_create resumed>) = 3 [pid 5845] <... memfd_create resumed>) = 3 [pid 5846] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5845] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5846] <... mmap resumed>) = 0x7f18ca796000 [pid 5845] <... mmap resumed>) = 0x7f18ca796000 [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./68/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./68/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./68/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./68") = 0 [pid 4997] mkdir("./69", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5847 ./strace-static-x86_64: Process 5847 attached [pid 5846] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5845] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5847] chdir("./69") = 0 [pid 5847] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5847] setpgid(0, 0) = 0 [pid 5847] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5847] write(3, "1000", 4) = 4 [pid 5847] close(3) = 0 [pid 5847] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5847] memfd_create("syzkaller", 0) = 3 [pid 5847] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5846] <... write resumed>) = 2097152 [pid 5845] <... write resumed>) = 2097152 [pid 5839] <... sendfile resumed>) = 1048576 [pid 5846] munmap(0x7f18ca796000, 2097152 [pid 5845] munmap(0x7f18ca796000, 2097152 [pid 5839] exit_group(0 [pid 5847] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5846] <... munmap resumed>) = 0 [pid 5845] <... munmap resumed>) = 0 [pid 5839] <... exit_group resumed>) = ? [pid 5846] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5839] +++ exited with 0 +++ [pid 5846] <... openat resumed>) = 4 [pid 5846] ioctl(4, LOOP_SET_FD, 3 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5839, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 4999] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./68/binderfs") = 0 [pid 4999] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5845] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5846] <... ioctl resumed>) = 0 [pid 5845] <... openat resumed>) = 4 [pid 5847] <... write resumed>) = 2097152 [ 208.332790][ T5846] loop4: detected capacity change from 0 to 4096 [pid 5847] munmap(0x7f18ca796000, 2097152 [pid 5846] close(3 [pid 5845] ioctl(4, LOOP_SET_FD, 3 [pid 5847] <... munmap resumed>) = 0 [pid 5846] <... close resumed>) = 0 [pid 5847] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5846] mkdir("./file1", 0777 [pid 5845] <... ioctl resumed>) = 0 [pid 5846] <... mkdir resumed>) = 0 [pid 5846] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5847] <... openat resumed>) = 4 [pid 5847] ioctl(4, LOOP_SET_FD, 3 [pid 5845] close(3 [pid 5847] <... ioctl resumed>) = 0 [pid 5845] <... close resumed>) = 0 [pid 5847] close(3 [pid 5845] mkdir("./file1", 0777 [pid 5847] <... close resumed>) = 0 [pid 5845] <... mkdir resumed>) = 0 [pid 5847] mkdir("./file1", 0777 [pid 5845] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5847] <... mkdir resumed>) = 0 [ 208.384604][ T5845] loop3: detected capacity change from 0 to 4096 [ 208.401268][ T5846] NILFS (loop4): invalid segment: Checksum error in segment payload [ 208.401344][ T5847] loop0: detected capacity change from 0 to 4096 [ 208.429763][ T5845] NILFS (loop3): invalid segment: Checksum error in segment payload [ 208.449327][ T5845] NILFS (loop3): trying rollback from an earlier position [ 208.457525][ T5847] NILFS (loop0): invalid segment: Checksum error in segment payload [ 208.458197][ T5846] NILFS (loop4): trying rollback from an earlier position [pid 5847] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./68/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./68/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./68/file1") = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./68") = 0 [ 208.496825][ T5847] NILFS (loop0): trying rollback from an earlier position [ 208.514837][ T5845] NILFS (loop3): recovery complete [pid 4999] mkdir("./69", 0777 [pid 5845] <... mount resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5845] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4999] close(3 [pid 5845] <... openat resumed>) = 3 [pid 4999] <... close resumed>) = 0 [pid 5845] chdir("./file1" [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5845] <... chdir resumed>) = 0 [ 208.549371][ T5848] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5849 ./strace-static-x86_64: Process 5849 attached [pid 5849] chdir("./69") = 0 [pid 5845] ioctl(4, LOOP_CLR_FD [pid 5849] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5845] <... ioctl resumed>) = 0 [pid 5849] <... prctl resumed>) = 0 [pid 5845] close(4 [pid 5849] setpgid(0, 0) = 0 [pid 5845] <... close resumed>) = 0 [pid 5849] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5845] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5849] <... openat resumed>) = 3 [pid 5849] write(3, "1000", 4) = 4 [pid 5845] <... open resumed>) = 4 [pid 5849] close(3 [pid 5845] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5849] <... close resumed>) = 0 [pid 5845] <... open resumed>) = 5 [pid 5849] symlink("/dev/binderfs", "./binderfs" [pid 5845] ftruncate(5, 33587195 [pid 5849] <... symlink resumed>) = 0 [pid 5840] <... sendfile resumed>) = 1048576 [pid 5849] memfd_create("syzkaller", 0 [pid 5846] <... mount resumed>) = 0 [pid 5845] <... ftruncate resumed>) = 0 [pid 5849] <... memfd_create resumed>) = 3 [pid 5846] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5845] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5840] exit_group(0 [pid 5849] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5846] <... openat resumed>) = 3 [pid 5845] <... open resumed>) = 6 [pid 5840] <... exit_group resumed>) = ? [ 208.589603][ T5846] NILFS (loop4): recovery complete [ 208.597775][ T5847] NILFS (loop0): recovery complete [ 208.628032][ T5850] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5847] <... mount resumed>) = 0 [pid 5847] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5847] chdir("./file1") = 0 [pid 5847] ioctl(4, LOOP_CLR_FD) = 0 [pid 5847] close(4 [pid 5849] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5847] <... close resumed>) = 0 [pid 5846] chdir("./file1" [pid 5845] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5840] +++ exited with 0 +++ [pid 5847] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5846] <... chdir resumed>) = 0 [pid 5845] <... open resumed>) = 7 [pid 5847] <... open resumed>) = 4 [pid 5846] ioctl(4, LOOP_CLR_FD [pid 5845] sendfile(6, 7, NULL, 281474978811909 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5840, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5847] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5846] <... ioctl resumed>) = 0 [pid 5002] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5847] <... open resumed>) = 5 [ 208.648145][ T5851] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5846] close(4 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... write resumed>) = 2097152 [pid 5847] ftruncate(5, 33587195 [pid 5846] <... close resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] munmap(0x7f18ca796000, 2097152 [pid 5846] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5002] <... openat resumed>) = 3 [pid 5849] <... munmap resumed>) = 0 [pid 5847] <... ftruncate resumed>) = 0 [pid 5002] fstat(3, [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5847] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5849] <... openat resumed>) = 4 [pid 5847] <... open resumed>) = 6 [pid 5846] <... open resumed>) = 4 [pid 5002] getdents64(3, [pid 5849] ioctl(4, LOOP_SET_FD, 3 [pid 5847] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5846] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5847] <... open resumed>) = 7 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5847] sendfile(6, 7, NULL, 281474978811909 [pid 5846] <... open resumed>) = 5 [pid 5002] lstat("./69/binderfs", [pid 5849] <... ioctl resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5849] close(3 [pid 5002] unlink("./69/binderfs" [pid 5849] <... close resumed>) = 0 [pid 5846] ftruncate(5, 33587195 [pid 5002] <... unlink resumed>) = 0 [pid 5849] mkdir("./file1", 0777 [pid 5002] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5849] <... mkdir resumed>) = 0 [pid 5846] <... ftruncate resumed>) = 0 [pid 5849] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5846] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5846] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 208.729217][ T5849] loop2: detected capacity change from 0 to 4096 [ 208.806693][ T5849] NILFS (loop2): invalid segment: Checksum error in segment payload [ 208.816207][ T5849] NILFS (loop2): trying rollback from an earlier position [pid 5846] sendfile(6, 7, NULL, 281474978811909 [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./69/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./69/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [ 208.899679][ T5849] NILFS (loop2): recovery complete [pid 5849] <... mount resumed>) = 0 [pid 5002] rmdir("./69/file1" [pid 5849] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5002] <... rmdir resumed>) = 0 [pid 5849] <... openat resumed>) = 3 [pid 5849] chdir("./file1" [pid 5002] getdents64(3, [pid 5849] <... chdir resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5849] ioctl(4, LOOP_CLR_FD [pid 5002] close(3 [pid 5849] <... ioctl resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5849] close(4 [pid 5002] rmdir("./69" [pid 5849] <... close resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5849] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5002] mkdir("./70", 0777 [pid 5849] <... open resumed>) = 4 [pid 5002] <... mkdir resumed>) = 0 [pid 5849] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5849] <... open resumed>) = 5 [pid 5002] <... openat resumed>) = 3 [pid 5849] ftruncate(5, 33587195 [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5849] <... ftruncate resumed>) = 0 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5849] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] close(3 [pid 5849] <... open resumed>) = 6 [pid 5002] <... close resumed>) = 0 [pid 5849] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5849] <... open resumed>) = 7 [pid 5849] sendfile(6, 7, NULL, 281474978811909 [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5853 ./strace-static-x86_64: Process 5853 attached [ 208.953032][ T5852] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5853] chdir("./70") = 0 [pid 5853] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5853] setpgid(0, 0) = 0 [pid 5853] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5853] write(3, "1000", 4) = 4 [pid 5853] close(3) = 0 [pid 5853] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5853] memfd_create("syzkaller", 0) = 3 [pid 5853] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5853] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5842] <... sendfile resumed>) = 1048576 [pid 5842] exit_group(0) = ? [pid 5842] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5842, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=19 /* 0.19 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4998] umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./68/binderfs") = 0 [pid 4998] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5853] <... write resumed>) = 2097152 [pid 5853] munmap(0x7f18ca796000, 2097152) = 0 [pid 5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5853] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5853] close(3) = 0 [pid 5853] mkdir("./file1", 0777) = 0 [ 209.233273][ T5853] loop5: detected capacity change from 0 to 4096 [ 209.292727][ T5853] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5853] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./68/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./68/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./68/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [ 209.349623][ T5853] NILFS (loop5): trying rollback from an earlier position [pid 4998] rmdir("./68/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./68") = 0 [pid 4998] mkdir("./69", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5854 ./strace-static-x86_64: Process 5854 attached [pid 5854] chdir("./69") = 0 [pid 5854] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 209.453245][ T5853] NILFS (loop5): recovery complete [pid 5854] setpgid(0, 0) = 0 [pid 5853] <... mount resumed>) = 0 [pid 5853] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5854] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5853] chdir("./file1") = 0 [pid 5853] ioctl(4, LOOP_CLR_FD) = 0 [pid 5853] close(4) = 0 [pid 5853] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5854] <... openat resumed>) = 3 [pid 5853] <... open resumed>) = 4 [pid 5854] write(3, "1000", 4 [pid 5853] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5854] <... write resumed>) = 4 [pid 5853] <... open resumed>) = 5 [pid 5854] close(3 [pid 5853] ftruncate(5, 33587195 [pid 5854] <... close resumed>) = 0 [pid 5853] <... ftruncate resumed>) = 0 [pid 5854] symlink("/dev/binderfs", "./binderfs" [pid 5853] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5854] <... symlink resumed>) = 0 [pid 5853] <... open resumed>) = 6 [pid 5854] memfd_create("syzkaller", 0 [pid 5853] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5854] <... memfd_create resumed>) = 3 [pid 5853] <... open resumed>) = 7 [pid 5854] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5853] sendfile(6, 7, NULL, 281474978811909 [pid 5854] <... mmap resumed>) = 0x7f18ca796000 [ 209.479425][ T5855] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5854] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5854] munmap(0x7f18ca796000, 2097152) = 0 [pid 5854] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5854] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5847] <... sendfile resumed>) = 1048576 [pid 5854] close(3 [pid 5847] exit_group(0) = ? [pid 5854] <... close resumed>) = 0 [pid 5847] +++ exited with 0 +++ [pid 5854] mkdir("./file1", 0777 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5847, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5854] <... mkdir resumed>) = 0 [pid 5854] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4997] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5845] <... sendfile resumed>) = 1048576 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 209.765269][ T5854] loop1: detected capacity change from 0 to 4096 [pid 4997] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5845] exit_group(0 [pid 4997] <... openat resumed>) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5845] <... exit_group resumed>) = ? [pid 4997] getdents64(3, [pid 5845] +++ exited with 0 +++ [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./69/binderfs") = 0 [pid 4997] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5845, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5000] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./70/binderfs") = 0 [ 209.814595][ T5854] NILFS (loop1): invalid segment: Checksum error in segment payload [ 209.824522][ T5854] NILFS (loop1): trying rollback from an earlier position [pid 5000] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5846] <... sendfile resumed>) = 1048576 [ 209.902392][ T5854] NILFS (loop1): recovery complete [pid 5846] exit_group(0) = ? [pid 5846] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5846, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=30 /* 0.30 s */} --- [pid 5001] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5854] <... mount resumed>) = 0 [pid 5854] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5001] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5854] <... openat resumed>) = 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5854] chdir("./file1" [pid 5001] lstat("./69/binderfs", [pid 5854] <... chdir resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./69/binderfs" [pid 5854] ioctl(4, LOOP_CLR_FD [pid 5001] <... unlink resumed>) = 0 [pid 5001] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5854] <... ioctl resumed>) = 0 [pid 5854] close(4 [pid 4997] <... umount2 resumed>) = 0 [pid 5854] <... close resumed>) = 0 [pid 5854] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [ 209.924022][ T5856] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4997] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5854] <... open resumed>) = 4 [pid 4997] lstat("./69/file1", [pid 5854] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5854] <... open resumed>) = 5 [pid 4997] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5854] ftruncate(5, 33587195 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5854] <... ftruncate resumed>) = 0 [pid 4997] openat(AT_FDCWD, "./69/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5854] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 4997] <... openat resumed>) = 4 [pid 5854] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4997] fstat(4, [pid 5854] <... open resumed>) = 7 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5854] sendfile(6, 7, NULL, 281474978811909 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./69/file1") = 0 [pid 5849] <... sendfile resumed>) = 1048576 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./69") = 0 [pid 4997] mkdir("./70", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5857 [pid 5849] exit_group(0) = ? [pid 5849] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5849, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 4999] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5857 attached [pid 5857] chdir("./70") = 0 [pid 5857] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5857] setpgid(0, 0) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4999] <... openat resumed>) = 3 [pid 4999] fstat(3, [pid 5857] write(3, "1000", 4 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./69/binderfs", [pid 5857] <... write resumed>) = 4 [pid 5000] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./69/binderfs" [pid 5857] close(3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5857] <... close resumed>) = 0 [pid 5000] lstat("./70/file1", [pid 5857] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5857] memfd_create("syzkaller", 0 [pid 5000] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5857] <... memfd_create resumed>) = 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5857] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] openat(AT_FDCWD, "./70/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5857] <... mmap resumed>) = 0x7f18ca796000 [pid 5000] <... openat resumed>) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./70/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./70") = 0 [pid 5000] mkdir("./71", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5001] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5858 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./69/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./69/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./69/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./69") = 0 [pid 5001] mkdir("./70", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5858 attached [pid 5857] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... clone resumed>, child_tidptr=0x555556f7b690) = 5859 [pid 5858] chdir("./71") = 0 [pid 5858] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5859 attached [pid 5859] chdir("./70") = 0 [pid 5859] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5859] setpgid(0, 0) = 0 [pid 5858] <... prctl resumed>) = 0 [pid 5859] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5858] setpgid(0, 0 [pid 5859] <... openat resumed>) = 3 [pid 5858] <... setpgid resumed>) = 0 [pid 5859] write(3, "1000", 4 [pid 5858] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5859] <... write resumed>) = 4 [pid 5858] <... openat resumed>) = 3 [pid 5859] close(3) = 0 [pid 5858] write(3, "1000", 4 [pid 5859] symlink("/dev/binderfs", "./binderfs" [pid 5858] <... write resumed>) = 4 [pid 5859] <... symlink resumed>) = 0 [pid 5858] close(3 [pid 5859] memfd_create("syzkaller", 0 [pid 5858] <... close resumed>) = 0 [pid 5859] <... memfd_create resumed>) = 3 [pid 5858] symlink("/dev/binderfs", "./binderfs" [pid 5859] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5858] <... symlink resumed>) = 0 [pid 5859] <... mmap resumed>) = 0x7f18ca796000 [pid 5858] memfd_create("syzkaller", 0) = 3 [pid 5858] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5857] <... write resumed>) = 2097152 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5859] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] lstat("./69/file1", [pid 5858] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5857] munmap(0x7f18ca796000, 2097152 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5857] <... munmap resumed>) = 0 [pid 5857] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4999] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5857] <... openat resumed>) = 4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5857] ioctl(4, LOOP_SET_FD, 3 [pid 4999] openat(AT_FDCWD, "./69/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5857] <... ioctl resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 5857] close(3 [pid 4999] fstat(4, [pid 5857] <... close resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5857] mkdir("./file1", 0777 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5859] <... write resumed>) = 2097152 [pid 5858] <... write resumed>) = 2097152 [pid 5857] <... mkdir resumed>) = 0 [pid 4999] getdents64(4, [pid 5859] munmap(0x7f18ca796000, 2097152 [pid 5858] munmap(0x7f18ca796000, 2097152 [ 210.313168][ T5857] loop0: detected capacity change from 0 to 4096 [pid 5857] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5859] <... munmap resumed>) = 0 [pid 5858] <... munmap resumed>) = 0 [pid 4999] close(4 [pid 5858] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] <... close resumed>) = 0 [pid 5859] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5858] <... openat resumed>) = 4 [pid 4999] rmdir("./69/file1" [pid 5859] <... openat resumed>) = 4 [pid 5858] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... rmdir resumed>) = 0 [pid 5859] ioctl(4, LOOP_SET_FD, 3 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5858] <... ioctl resumed>) = 0 [pid 4999] close(3 [pid 5858] close(3 [pid 4999] <... close resumed>) = 0 [pid 5858] <... close resumed>) = 0 [pid 4999] rmdir("./69" [pid 5858] mkdir("./file1", 0777 [pid 4999] <... rmdir resumed>) = 0 [pid 5858] <... mkdir resumed>) = 0 [pid 4999] mkdir("./70", 0777 [pid 5858] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [ 210.358490][ T5857] NILFS (loop0): invalid segment: Checksum error in segment payload [ 210.370690][ T5858] loop3: detected capacity change from 0 to 4096 [ 210.378679][ T5859] loop4: detected capacity change from 0 to 4096 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5860 ./strace-static-x86_64: Process 5860 attached [pid 5859] <... ioctl resumed>) = 0 [pid 5859] close(3 [pid 5860] chdir("./70") = 0 [pid 5860] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5859] <... close resumed>) = 0 [pid 5860] <... prctl resumed>) = 0 [pid 5859] mkdir("./file1", 0777 [pid 5860] setpgid(0, 0 [pid 5859] <... mkdir resumed>) = 0 [pid 5859] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5860] <... setpgid resumed>) = 0 [pid 5860] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5860] write(3, "1000", 4) = 4 [pid 5860] close(3) = 0 [pid 5860] symlink("/dev/binderfs", "./binderfs") = 0 [ 210.407803][ T5858] NILFS (loop3): invalid segment: Checksum error in segment payload [ 210.418987][ T5857] NILFS (loop0): trying rollback from an earlier position [pid 5860] memfd_create("syzkaller", 0) = 3 [pid 5860] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 210.452170][ T5859] NILFS (loop4): invalid segment: Checksum error in segment payload [ 210.469588][ T5858] NILFS (loop3): trying rollback from an earlier position [ 210.487804][ T5857] NILFS (loop0): recovery complete [ 210.493755][ T5859] NILFS (loop4): trying rollback from an earlier position [pid 5860] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5857] <... mount resumed>) = 0 [pid 5857] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5857] chdir("./file1") = 0 [pid 5857] ioctl(4, LOOP_CLR_FD) = 0 [pid 5857] close(4) = 0 [pid 5857] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5857] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5857] ftruncate(5, 33587195) = 0 [pid 5857] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5857] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 210.521585][ T5858] NILFS (loop3): recovery complete [ 210.528558][ T5861] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5857] sendfile(6, 7, NULL, 281474978811909 [pid 5853] <... sendfile resumed>) = 1048576 [pid 5853] exit_group(0) = ? [pid 5853] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5853, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5858] <... mount resumed>) = 0 [pid 5858] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5858] chdir("./file1" [pid 5002] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5858] <... chdir resumed>) = 0 [pid 5858] ioctl(4, LOOP_CLR_FD [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5858] <... ioctl resumed>) = 0 [pid 5858] close(4 [pid 5002] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5858] <... close resumed>) = 0 [pid 5858] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5002] <... openat resumed>) = 3 [pid 5859] <... mount resumed>) = 0 [pid 5858] <... open resumed>) = 4 [pid 5002] fstat(3, [pid 5859] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5858] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5859] <... openat resumed>) = 3 [pid 5858] <... open resumed>) = 5 [pid 5859] chdir("./file1" [pid 5858] ftruncate(5, 33587195 [pid 5002] getdents64(3, [pid 5859] <... chdir resumed>) = 0 [pid 5858] <... ftruncate resumed>) = 0 [pid 5859] ioctl(4, LOOP_CLR_FD [pid 5858] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5859] <... ioctl resumed>) = 0 [pid 5858] <... open resumed>) = 6 [pid 5002] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5859] close(4 [pid 5858] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5859] <... close resumed>) = 0 [pid 5858] <... open resumed>) = 7 [pid 5002] lstat("./70/binderfs", [pid 5860] <... write resumed>) = 2097152 [pid 5859] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [ 210.574864][ T5859] NILFS (loop4): recovery complete [ 210.590558][ T5862] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.613333][ T5863] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5858] sendfile(6, 7, NULL, 281474978811909 [pid 5860] munmap(0x7f18ca796000, 2097152 [pid 5859] <... open resumed>) = 4 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5859] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5859] ftruncate(5, 33587195) = 0 [pid 5860] <... munmap resumed>) = 0 [pid 5859] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] unlink("./70/binderfs" [pid 5860] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5859] <... open resumed>) = 6 [pid 5860] <... openat resumed>) = 4 [pid 5859] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5002] <... unlink resumed>) = 0 [pid 5860] ioctl(4, LOOP_SET_FD, 3 [pid 5859] <... open resumed>) = 7 [pid 5002] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5859] sendfile(6, 7, NULL, 281474978811909 [pid 5860] <... ioctl resumed>) = 0 [pid 5860] close(3) = 0 [pid 5860] mkdir("./file1", 0777) = 0 [ 210.683386][ T5860] loop2: detected capacity change from 0 to 4096 [ 210.735770][ T5860] NILFS (loop2): invalid segment: Checksum error in segment payload [ 210.755580][ T5860] NILFS (loop2): trying rollback from an earlier position [pid 5860] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 210.823903][ T5860] NILFS (loop2): recovery complete [pid 5002] lstat("./70/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5860] <... mount resumed>) = 0 [pid 5860] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5860] chdir("./file1" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5860] <... chdir resumed>) = 0 [pid 5860] ioctl(4, LOOP_CLR_FD) = 0 [pid 5002] openat(AT_FDCWD, "./70/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./70/file1") = 0 [pid 5002] getdents64(3, [pid 5860] close(4 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./70") = 0 [pid 5002] mkdir("./71", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5865 [pid 5860] <... close resumed>) = 0 [pid 5860] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [ 210.886916][ T5864] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5860] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000./strace-static-x86_64: Process 5865 attached ) = 5 [pid 5860] ftruncate(5, 33587195) = 0 [pid 5865] chdir("./71" [pid 5860] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5865] <... chdir resumed>) = 0 [pid 5865] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5860] <... open resumed>) = 6 [pid 5865] <... prctl resumed>) = 0 [pid 5860] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5865] setpgid(0, 0 [pid 5860] <... open resumed>) = 7 [pid 5865] <... setpgid resumed>) = 0 [pid 5860] sendfile(6, 7, NULL, 281474978811909 [pid 5865] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5865] write(3, "1000", 4 [pid 5854] <... sendfile resumed>) = 1048576 [pid 5865] <... write resumed>) = 4 [pid 5854] exit_group(0 [pid 5865] close(3 [pid 5854] <... exit_group resumed>) = ? [pid 5865] <... close resumed>) = 0 [pid 5865] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5854] +++ exited with 0 +++ [pid 5865] memfd_create("syzkaller", 0) = 3 [pid 5865] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5854, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 4998] umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./69/binderfs", [pid 5865] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./69/binderfs") = 0 [pid 4998] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5865] <... write resumed>) = 2097152 [pid 5865] munmap(0x7f18ca796000, 2097152) = 0 [pid 5865] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5865] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5865] close(3) = 0 [ 211.178863][ T5865] loop5: detected capacity change from 0 to 4096 [pid 5865] mkdir("./file1", 0777) = 0 [ 211.274774][ T5865] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5865] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./69/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./69/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 211.323124][ T5865] NILFS (loop5): trying rollback from an earlier position [pid 4998] openat(AT_FDCWD, "./69/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./69/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./69") = 0 [pid 4998] mkdir("./70", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5867 [ 211.373137][ T5865] NILFS (loop5): recovery complete [pid 5865] <... mount resumed>) = 0 [pid 5865] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 5867 attached ) = 3 [pid 5865] chdir("./file1" [pid 5867] chdir("./70" [pid 5865] <... chdir resumed>) = 0 [pid 5867] <... chdir resumed>) = 0 [pid 5865] ioctl(4, LOOP_CLR_FD [pid 5867] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5865] <... ioctl resumed>) = 0 [pid 5867] <... prctl resumed>) = 0 [pid 5865] close(4 [pid 5867] setpgid(0, 0 [pid 5865] <... close resumed>) = 0 [pid 5867] <... setpgid resumed>) = 0 [pid 5865] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5867] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5865] <... open resumed>) = 4 [pid 5867] write(3, "1000", 4 [ 211.414699][ T5866] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5865] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5867] <... write resumed>) = 4 [pid 5867] close(3 [pid 5865] <... open resumed>) = 5 [pid 5867] <... close resumed>) = 0 [pid 5867] symlink("/dev/binderfs", "./binderfs" [pid 5865] ftruncate(5, 33587195 [pid 5867] <... symlink resumed>) = 0 [pid 5865] <... ftruncate resumed>) = 0 [pid 5867] memfd_create("syzkaller", 0 [pid 5865] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5867] <... memfd_create resumed>) = 3 [pid 5865] <... open resumed>) = 6 [pid 5867] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5865] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5867] <... mmap resumed>) = 0x7f18ca796000 [pid 5865] <... open resumed>) = 7 [pid 5865] sendfile(6, 7, NULL, 281474978811909 [pid 5867] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5857] <... sendfile resumed>) = 1048576 [pid 5867] munmap(0x7f18ca796000, 2097152) = 0 [pid 5857] exit_group(0) = ? [pid 5857] +++ exited with 0 +++ [pid 5867] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5867] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5857, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 4997] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5867] close(3 [pid 4997] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./70/binderfs", [pid 5859] <... sendfile resumed>) = 1048576 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./70/binderfs" [pid 5859] exit_group(0 [pid 4997] <... unlink resumed>) = 0 [pid 5867] <... close resumed>) = 0 [pid 4997] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5867] mkdir("./file1", 0777 [pid 5859] <... exit_group resumed>) = ? [pid 5867] <... mkdir resumed>) = 0 [pid 5859] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5859, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5867] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5001] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW [ 211.705333][ T5867] loop1: detected capacity change from 0 to 4096 [pid 5858] <... sendfile resumed>) = 1048576 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5858] exit_group(0) = ? [pid 5858] +++ exited with 0 +++ [pid 5001] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5858, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} --- [pid 5001] fstat(3, [pid 5000] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] getdents64(3, [pid 5000] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] <... openat resumed>) = 3 [pid 5001] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] fstat(3, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] lstat("./70/binderfs", [pid 5000] getdents64(3, [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./70/binderfs" [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] <... unlink resumed>) = 0 [pid 5001] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./71/binderfs") = 0 [ 211.756014][ T5867] NILFS (loop1): invalid segment: Checksum error in segment payload [ 211.782947][ T5867] NILFS (loop1): trying rollback from an earlier position [ 211.805463][ T5867] NILFS (loop1): recovery complete [pid 5000] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5867] <... mount resumed>) = 0 [pid 5867] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5867] chdir("./file1") = 0 [pid 5867] ioctl(4, LOOP_CLR_FD) = 0 [pid 5867] close(4) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5867] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5867] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5867] ftruncate(5, 33587195) = 0 [pid 5867] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5860] <... sendfile resumed>) = 1048576 [pid 5867] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5867] sendfile(6, 7, NULL, 281474978811909 [pid 5860] exit_group(0) = ? [pid 5860] +++ exited with 0 +++ [pid 5001] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./70/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./70/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5860, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5001] getdents64(4, [pid 4999] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] lstat("./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./70/binderfs" [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 211.870763][ T5868] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5001] close(4) = 0 [pid 5001] rmdir("./70/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./70") = 0 [pid 5001] mkdir("./71", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5869 ./strace-static-x86_64: Process 5869 attached [pid 4997] <... umount2 resumed>) = 0 [pid 5869] chdir("./71") = 0 [pid 5869] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5869] setpgid(0, 0) = 0 [pid 5869] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5869] write(3, "1000", 4) = 4 [pid 5869] close(3) = 0 [pid 5869] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 4997] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5869] memfd_create("syzkaller", 0 [pid 5000] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./70/file1", [pid 5000] lstat("./71/file1", [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5869] <... memfd_create resumed>) = 3 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5869] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5869] <... mmap resumed>) = 0x7f18ca796000 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./70/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] openat(AT_FDCWD, "./71/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... openat resumed>) = 4 [pid 5000] <... openat resumed>) = 4 [pid 4997] fstat(4, [pid 5000] fstat(4, [pid 5869] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, [pid 5000] getdents64(4, [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, [pid 4997] getdents64(4, [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4 [pid 4997] close(4 [pid 5000] <... close resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 5000] rmdir("./71/file1" [pid 4997] rmdir("./70/file1" [pid 5000] <... rmdir resumed>) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 5000] getdents64(3, [pid 4997] getdents64(3, [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3 [pid 5000] close(3 [pid 4997] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4997] rmdir("./70" [pid 5000] rmdir("./71" [pid 4997] <... rmdir resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4997] mkdir("./71", 0777 [pid 5000] mkdir("./72", 0777) = 0 [pid 4997] <... mkdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5000] <... openat resumed>) = 3 [pid 4997] <... openat resumed>) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 4997] close(3 [pid 5000] <... close resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5870 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5871 ./strace-static-x86_64: Process 5870 attached [pid 5870] chdir("./72") = 0 [pid 5870] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 5871 attached [pid 5870] setpgid(0, 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5871] chdir("./71" [pid 5870] <... setpgid resumed>) = 0 [pid 5869] <... write resumed>) = 2097152 [pid 4999] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5871] <... chdir resumed>) = 0 [pid 5870] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5871] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5870] write(3, "1000", 4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5871] <... prctl resumed>) = 0 [pid 5870] <... write resumed>) = 4 [pid 5869] munmap(0x7f18ca796000, 2097152 [pid 4999] lstat("./70/file1", [pid 5871] setpgid(0, 0 [pid 5870] close(3) = 0 [pid 5870] symlink("/dev/binderfs", "./binderfs" [pid 5871] <... setpgid resumed>) = 0 [pid 5870] <... symlink resumed>) = 0 [pid 5869] <... munmap resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5871] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5870] memfd_create("syzkaller", 0 [pid 5869] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4999] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5871] <... openat resumed>) = 3 [pid 5870] <... memfd_create resumed>) = 3 [pid 5869] <... openat resumed>) = 4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5871] write(3, "1000", 4 [pid 5870] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5869] ioctl(4, LOOP_SET_FD, 3 [pid 4999] openat(AT_FDCWD, "./70/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5871] <... write resumed>) = 4 [pid 5870] <... mmap resumed>) = 0x7f18ca796000 [pid 5871] close(3 [pid 5869] <... ioctl resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 5871] <... close resumed>) = 0 [pid 5869] close(3 [pid 5871] symlink("/dev/binderfs", "./binderfs" [pid 5869] <... close resumed>) = 0 [pid 4999] fstat(4, [pid 5871] <... symlink resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5871] memfd_create("syzkaller", 0 [pid 4999] getdents64(4, [pid 5871] <... memfd_create resumed>) = 3 [pid 5871] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, [pid 5871] <... mmap resumed>) = 0x7f18ca796000 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./70/file1") = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./70" [pid 5869] mkdir("./file1", 0777 [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./71", 0777 [pid 5869] <... mkdir resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5869] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5870] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5872 ./strace-static-x86_64: Process 5872 attached [ 212.175798][ T5869] loop4: detected capacity change from 0 to 4096 [pid 5872] chdir("./71") = 0 [pid 5872] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5872] setpgid(0, 0) = 0 [pid 5872] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5872] write(3, "1000", 4) = 4 [pid 5872] close(3) = 0 [pid 5872] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5872] memfd_create("syzkaller", 0) = 3 [pid 5872] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 212.237228][ T5869] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5871] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5872] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5870] <... write resumed>) = 2097152 [ 212.273898][ T5869] NILFS (loop4): trying rollback from an earlier position [pid 5870] munmap(0x7f18ca796000, 2097152) = 0 [pid 5870] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5870] ioctl(4, LOOP_SET_FD, 3 [pid 5871] <... write resumed>) = 2097152 [pid 5871] munmap(0x7f18ca796000, 2097152 [pid 5870] <... ioctl resumed>) = 0 [pid 5870] close(3) = 0 [pid 5871] <... munmap resumed>) = 0 [pid 5870] mkdir("./file1", 0777 [pid 5871] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5870] <... mkdir resumed>) = 0 [pid 5871] <... openat resumed>) = 4 [pid 5871] ioctl(4, LOOP_SET_FD, 3 [pid 5870] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5871] <... ioctl resumed>) = 0 [ 212.348058][ T5870] loop3: detected capacity change from 0 to 4096 [ 212.359722][ T5869] NILFS (loop4): recovery complete [ 212.374967][ T5871] loop0: detected capacity change from 0 to 4096 [pid 5871] close(3 [pid 5872] <... write resumed>) = 2097152 [pid 5871] <... close resumed>) = 0 [pid 5872] munmap(0x7f18ca796000, 2097152 [pid 5871] mkdir("./file1", 0777 [pid 5872] <... munmap resumed>) = 0 [pid 5871] <... mkdir resumed>) = 0 [pid 5872] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5871] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5872] <... openat resumed>) = 4 [pid 5872] ioctl(4, LOOP_SET_FD, 3 [pid 5869] <... mount resumed>) = 0 [pid 5872] <... ioctl resumed>) = 0 [pid 5872] close(3) = 0 [pid 5872] mkdir("./file1", 0777) = 0 [pid 5872] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5869] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5869] chdir("./file1") = 0 [ 212.392161][ T5873] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.411994][ T5872] loop2: detected capacity change from 0 to 4096 [ 212.417775][ T5870] NILFS (loop3): invalid segment: Checksum error in segment payload [ 212.436219][ T5871] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5869] ioctl(4, LOOP_CLR_FD) = 0 [pid 5869] close(4) = 0 [pid 5869] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5869] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5869] ftruncate(5, 33587195) = 0 [pid 5869] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5869] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 212.452934][ T5871] NILFS (loop0): trying rollback from an earlier position [ 212.460909][ T5872] NILFS (loop2): invalid segment: Checksum error in segment payload [ 212.479012][ T5872] NILFS (loop2): trying rollback from an earlier position [ 212.489037][ T5870] NILFS (loop3): trying rollback from an earlier position [pid 5869] sendfile(6, 7, NULL, 281474978811909 [pid 5871] <... mount resumed>) = 0 [pid 5871] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5871] chdir("./file1") = 0 [pid 5871] ioctl(4, LOOP_CLR_FD) = 0 [pid 5871] close(4) = 0 [pid 5871] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5871] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5871] ftruncate(5, 33587195) = 0 [pid 5871] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5871] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5872] <... mount resumed>) = 0 [ 212.508172][ T5871] NILFS (loop0): recovery complete [ 212.512079][ T5870] NILFS (loop3): recovery complete [ 212.523662][ T5874] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.549242][ T5872] NILFS (loop2): recovery complete [pid 5871] sendfile(6, 7, NULL, 281474978811909 [pid 5872] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5865] <... sendfile resumed>) = 1048576 [pid 5872] <... openat resumed>) = 3 [pid 5870] <... mount resumed>) = 0 [pid 5865] exit_group(0 [pid 5872] chdir("./file1" [pid 5865] <... exit_group resumed>) = ? [pid 5872] <... chdir resumed>) = 0 [pid 5870] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5870] chdir("./file1" [pid 5872] ioctl(4, LOOP_CLR_FD [pid 5870] <... chdir resumed>) = 0 [pid 5865] +++ exited with 0 +++ [pid 5872] <... ioctl resumed>) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5865, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5872] close(4) = 0 [pid 5870] ioctl(4, LOOP_CLR_FD [pid 5872] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5870] <... ioctl resumed>) = 0 [pid 5870] close(4 [pid 5002] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5872] <... open resumed>) = 4 [pid 5870] <... close resumed>) = 0 [pid 5870] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5872] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5872] <... open resumed>) = 5 [pid 5870] <... open resumed>) = 4 [pid 5002] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5872] ftruncate(5, 33587195 [pid 5870] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5872] <... ftruncate resumed>) = 0 [pid 5870] <... open resumed>) = 5 [pid 5002] <... openat resumed>) = 3 [pid 5872] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5870] ftruncate(5, 33587195 [pid 5002] fstat(3, [pid 5872] <... open resumed>) = 6 [pid 5870] <... ftruncate resumed>) = 0 [pid 5872] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5870] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5872] <... open resumed>) = 7 [pid 5870] <... open resumed>) = 6 [pid 5872] sendfile(6, 7, NULL, 281474978811909 [pid 5870] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5002] getdents64(3, [pid 5870] <... open resumed>) = 7 [ 212.574371][ T5875] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.576028][ T5876] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5870] sendfile(6, 7, NULL, 281474978811909 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./71/binderfs") = 0 [pid 5002] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5002] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./71/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./71/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./71/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./71") = 0 [pid 5002] mkdir("./72", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5877 ./strace-static-x86_64: Process 5877 attached [pid 5877] chdir("./72") = 0 [pid 5877] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5877] setpgid(0, 0) = 0 [pid 5877] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5877] write(3, "1000", 4) = 4 [pid 5877] close(3) = 0 [pid 5877] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5877] memfd_create("syzkaller", 0) = 3 [pid 5877] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5877] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5867] <... sendfile resumed>) = 1048576 [pid 5867] exit_group(0 [pid 5877] <... write resumed>) = 2097152 [pid 5877] munmap(0x7f18ca796000, 2097152 [pid 5867] <... exit_group resumed>) = ? [pid 5877] <... munmap resumed>) = 0 [pid 5877] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5867] +++ exited with 0 +++ [pid 5877] <... openat resumed>) = 4 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5867, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=22 /* 0.22 s */} --- [pid 5877] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 4998] umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./70/binderfs" [pid 5877] close(3 [pid 4998] <... unlink resumed>) = 0 [pid 5877] <... close resumed>) = 0 [pid 4998] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5877] mkdir("./file1", 0777) = 0 [ 213.183586][ T5877] loop5: detected capacity change from 0 to 4096 [ 213.237472][ T5877] NILFS (loop5): invalid segment: Checksum error in segment payload [ 213.285237][ T5877] NILFS (loop5): trying rollback from an earlier position [pid 5877] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 213.357373][ T5877] NILFS (loop5): recovery complete [pid 4998] lstat("./70/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./70/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./70/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./70/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5877] <... mount resumed>) = 0 [pid 4998] close(3 [pid 5877] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4998] <... close resumed>) = 0 [pid 5877] <... openat resumed>) = 3 [pid 5877] chdir("./file1" [pid 4998] rmdir("./70" [pid 5877] <... chdir resumed>) = 0 [pid 4998] <... rmdir resumed>) = 0 [pid 5877] ioctl(4, LOOP_CLR_FD [pid 4998] mkdir("./71", 0777 [pid 5877] <... ioctl resumed>) = 0 [pid 4998] <... mkdir resumed>) = 0 [pid 5877] close(4 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5877] <... close resumed>) = 0 [pid 5877] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] <... openat resumed>) = 3 [pid 5877] <... open resumed>) = 4 [ 213.411023][ T5878] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5877] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5877] <... open resumed>) = 5 [pid 5877] ftruncate(5, 33587195 [pid 4998] close(3 [pid 5877] <... ftruncate resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5877] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5877] <... open resumed>) = 6 [pid 5877] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5877] sendfile(6, 7, NULL, 281474978811909 [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5879 ./strace-static-x86_64: Process 5879 attached [pid 5879] chdir("./71") = 0 [pid 5879] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5869] <... sendfile resumed>) = 1048576 [pid 5879] <... prctl resumed>) = 0 [pid 5879] setpgid(0, 0) = 0 [pid 5879] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5879] write(3, "1000", 4 [pid 5869] exit_group(0 [pid 5879] <... write resumed>) = 4 [pid 5869] <... exit_group resumed>) = ? [pid 5879] close(3) = 0 [pid 5879] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5879] memfd_create("syzkaller", 0) = 3 [pid 5879] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5869] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5869, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./71/binderfs") = 0 [pid 5001] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5879] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5879] munmap(0x7f18ca796000, 2097152) = 0 [pid 5879] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5879] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5879] close(3) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5879] mkdir("./file1", 0777) = 0 [pid 5879] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5001] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./71/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./71/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./71/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [ 213.662418][ T5879] loop1: detected capacity change from 0 to 4096 [pid 5001] rmdir("./71") = 0 [pid 5001] mkdir("./72", 0777) = 0 [pid 5872] <... sendfile resumed>) = 1048576 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [ 213.713404][ T5879] NILFS (loop1): invalid segment: Checksum error in segment payload [ 213.749348][ T5879] NILFS (loop1): trying rollback from an earlier position [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5872] exit_group(0 [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5880 ./strace-static-x86_64: Process 5880 attached [pid 5880] chdir("./72") = 0 [pid 5880] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5880] setpgid(0, 0) = 0 [pid 5880] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5872] <... exit_group resumed>) = ? [pid 5870] <... sendfile resumed>) = 1048576 [pid 5880] write(3, "1000", 4) = 4 [pid 5880] close(3) = 0 [pid 5880] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5880] memfd_create("syzkaller", 0 [pid 5871] <... sendfile resumed>) = 1048576 [pid 5880] <... memfd_create resumed>) = 3 [pid 5880] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5872] +++ exited with 0 +++ [pid 5871] exit_group(0 [pid 5870] exit_group(0 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5872, si_uid=0, si_status=0, si_utime=0, si_stime=31 /* 0.31 s */} --- [pid 5870] <... exit_group resumed>) = ? [pid 5871] <... exit_group resumed>) = ? [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, [pid 5871] +++ exited with 0 +++ [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5871, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5870] +++ exited with 0 +++ [pid 4999] lstat("./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5870, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 4999] unlink("./71/binderfs" [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 4999] <... unlink resumed>) = 0 [pid 4997] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... restart_syscall resumed>) = 0 [ 213.774660][ T5879] NILFS (loop1): recovery complete [pid 4999] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] fstat(3, [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] getdents64(3, [pid 5000] <... openat resumed>) = 3 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] fstat(3, [pid 4997] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] getdents64(3, [pid 4997] lstat("./71/binderfs", [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] unlink("./71/binderfs" [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... unlink resumed>) = 0 [pid 5000] lstat("./72/binderfs", [pid 4997] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./72/binderfs") = 0 [pid 5000] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5880] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5879] <... mount resumed>) = 0 [pid 5879] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5879] chdir("./file1") = 0 [pid 5879] ioctl(4, LOOP_CLR_FD) = 0 [pid 5879] close(4) = 0 [pid 5879] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5879] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5879] ftruncate(5, 33587195) = 0 [pid 5879] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5879] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 213.824807][ T5881] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5879] sendfile(6, 7, NULL, 281474978811909 [pid 5880] <... write resumed>) = 2097152 [pid 5880] munmap(0x7f18ca796000, 2097152) = 0 [pid 4997] <... umount2 resumed>) = 0 [pid 5880] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5880] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5880] close(3) = 0 [pid 5880] mkdir("./file1", 0777) = 0 [pid 5880] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4997] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./71/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... umount2 resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./71/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, [pid 5000] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] close(4 [pid 5000] lstat("./72/file1", [pid 4997] <... close resumed>) = 0 [ 213.975162][ T5880] loop4: detected capacity change from 0 to 4096 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] rmdir("./71/file1" [pid 5000] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... rmdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] getdents64(3, [pid 5000] openat(AT_FDCWD, "./72/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] <... openat resumed>) = 4 [pid 4997] close(3 [pid 5000] fstat(4, [pid 4997] <... close resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] rmdir("./71" [pid 5000] getdents64(4, [pid 4997] <... rmdir resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] mkdir("./72", 0777 [pid 5000] getdents64(4, [pid 4997] <... mkdir resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5000] close(4 [pid 4997] <... openat resumed>) = 3 [pid 5000] <... close resumed>) = 0 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5000] rmdir("./72/file1" [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... rmdir resumed>) = 0 [pid 4997] close(3 [pid 5000] getdents64(3, [pid 4997] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] close(3) = 0 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5882 [pid 5000] rmdir("./72") = 0 [pid 5000] mkdir("./73", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 4999] <... umount2 resumed>) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5882 attached ) = -1 ENXIO (No such device or address) [pid 4999] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5882] chdir("./72" [pid 5000] close(3 [pid 5882] <... chdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [ 214.036990][ T5880] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5882] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5882] <... prctl resumed>) = 0 [pid 4999] lstat("./71/file1", [pid 5882] setpgid(0, 0 [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5883 [pid 5882] <... setpgid resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5882] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5882] <... openat resumed>) = 3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5882] write(3, "1000", 4 [pid 4999] openat(AT_FDCWD, "./71/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5882] <... write resumed>) = 4 ./strace-static-x86_64: Process 5883 attached [pid 5882] close(3 [pid 4999] <... openat resumed>) = 4 [pid 5882] <... close resumed>) = 0 [pid 4999] fstat(4, [pid 5883] chdir("./73" [pid 5882] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5883] <... chdir resumed>) = 0 [pid 5882] <... symlink resumed>) = 0 [pid 4999] getdents64(4, [pid 5883] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5882] memfd_create("syzkaller", 0 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5883] <... prctl resumed>) = 0 [pid 5882] <... memfd_create resumed>) = 3 [pid 4999] getdents64(4, [pid 5883] setpgid(0, 0 [pid 5882] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5883] <... setpgid resumed>) = 0 [pid 5882] <... mmap resumed>) = 0x7f18ca796000 [pid 4999] close(4 [pid 5883] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5882] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... close resumed>) = 0 [pid 5883] <... openat resumed>) = 3 [ 214.085511][ T5880] NILFS (loop4): trying rollback from an earlier position [pid 4999] rmdir("./71/file1" [pid 5883] write(3, "1000", 4 [pid 4999] <... rmdir resumed>) = 0 [pid 5883] <... write resumed>) = 4 [pid 4999] getdents64(3, [pid 5883] close(3 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5883] <... close resumed>) = 0 [pid 4999] close(3 [pid 5883] symlink("/dev/binderfs", "./binderfs" [pid 4999] <... close resumed>) = 0 [pid 5883] <... symlink resumed>) = 0 [pid 4999] rmdir("./71" [pid 5883] memfd_create("syzkaller", 0) = 3 [pid 4999] <... rmdir resumed>) = 0 [pid 5883] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] mkdir("./72", 0777 [pid 5883] <... mmap resumed>) = 0x7f18ca796000 [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5884 [pid 5883] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152./strace-static-x86_64: Process 5884 attached [pid 5882] <... write resumed>) = 2097152 [pid 5880] <... mount resumed>) = 0 [pid 5880] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5880] chdir("./file1") = 0 [ 214.228274][ T5880] NILFS (loop4): recovery complete [pid 5884] chdir("./72" [pid 5882] munmap(0x7f18ca796000, 2097152 [pid 5880] ioctl(4, LOOP_CLR_FD [pid 5884] <... chdir resumed>) = 0 [pid 5883] <... write resumed>) = 2097152 [pid 5882] <... munmap resumed>) = 0 [pid 5880] <... ioctl resumed>) = 0 [pid 5884] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5883] munmap(0x7f18ca796000, 2097152 [pid 5882] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5880] close(4 [pid 5884] <... prctl resumed>) = 0 [pid 5883] <... munmap resumed>) = 0 [pid 5882] <... openat resumed>) = 4 [pid 5884] setpgid(0, 0 [pid 5883] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5882] ioctl(4, LOOP_SET_FD, 3 [pid 5884] <... setpgid resumed>) = 0 [pid 5883] <... openat resumed>) = 4 [pid 5882] <... ioctl resumed>) = 0 [pid 5880] <... close resumed>) = 0 [pid 5884] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5883] ioctl(4, LOOP_SET_FD, 3 [pid 5884] <... openat resumed>) = 3 [pid 5883] <... ioctl resumed>) = 0 [pid 5882] close(3 [pid 5880] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5884] write(3, "1000", 4 [pid 5883] close(3 [pid 5882] <... close resumed>) = 0 [pid 5884] <... write resumed>) = 4 [pid 5883] <... close resumed>) = 0 [pid 5882] mkdir("./file1", 0777 [pid 5884] close(3) = 0 [pid 5883] mkdir("./file1", 0777 [pid 5882] <... mkdir resumed>) = 0 [pid 5884] symlink("/dev/binderfs", "./binderfs" [pid 5883] <... mkdir resumed>) = 0 [pid 5882] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5880] <... open resumed>) = 4 [pid 5884] <... symlink resumed>) = 0 [pid 5883] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [ 214.251815][ T5885] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 214.285702][ T5882] loop0: detected capacity change from 0 to 4096 [ 214.294283][ T5883] loop3: detected capacity change from 0 to 4096 [pid 5880] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5884] memfd_create("syzkaller", 0 [pid 5880] <... open resumed>) = 5 [pid 5884] <... memfd_create resumed>) = 3 [pid 5884] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5880] ftruncate(5, 33587195) = 0 [pid 5880] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5880] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 214.329185][ T5883] NILFS (loop3): invalid segment: Checksum error in segment payload [ 214.341832][ T5882] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5880] sendfile(6, 7, NULL, 281474978811909 [ 214.403665][ T5883] NILFS (loop3): trying rollback from an earlier position [ 214.409614][ T5882] NILFS (loop0): trying rollback from an earlier position [pid 5884] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5877] <... sendfile resumed>) = 1048576 [pid 5877] exit_group(0) = ? [pid 5877] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5877, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=30 /* 0.30 s */} --- [pid 5884] munmap(0x7f18ca796000, 2097152 [pid 5002] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5884] <... munmap resumed>) = 0 [pid 5883] <... mount resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 214.487214][ T5882] NILFS (loop0): recovery complete [ 214.498999][ T5883] NILFS (loop3): recovery complete [ 214.511610][ T5886] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5884] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5002] <... openat resumed>) = 3 [pid 5883] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5882] <... mount resumed>) = 0 [pid 5002] fstat(3, [pid 5882] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5882] <... openat resumed>) = 3 [pid 5002] getdents64(3, [pid 5882] chdir("./file1" [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5884] <... openat resumed>) = 4 [pid 5882] <... chdir resumed>) = 0 [pid 5002] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5883] <... openat resumed>) = 3 [pid 5884] ioctl(4, LOOP_SET_FD, 3 [pid 5883] chdir("./file1" [pid 5882] ioctl(4, LOOP_CLR_FD [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5882] <... ioctl resumed>) = 0 [pid 5002] lstat("./72/binderfs", [pid 5882] close(4 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5884] <... ioctl resumed>) = 0 [pid 5883] <... chdir resumed>) = 0 [pid 5882] <... close resumed>) = 0 [pid 5002] unlink("./72/binderfs" [pid 5884] close(3 [pid 5883] ioctl(4, LOOP_CLR_FD [pid 5882] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5884] <... close resumed>) = 0 [pid 5883] <... ioctl resumed>) = 0 [pid 5884] mkdir("./file1", 0777 [pid 5883] close(4 [pid 5884] <... mkdir resumed>) = 0 [pid 5883] <... close resumed>) = 0 [pid 5884] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5883] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5002] <... unlink resumed>) = 0 [pid 5002] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5883] <... open resumed>) = 4 [pid 5882] <... open resumed>) = 4 [pid 5883] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5882] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5883] <... open resumed>) = 5 [pid 5882] <... open resumed>) = 5 [pid 5883] ftruncate(5, 33587195 [pid 5882] ftruncate(5, 33587195 [pid 5883] <... ftruncate resumed>) = 0 [pid 5882] <... ftruncate resumed>) = 0 [pid 5883] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5882] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5883] <... open resumed>) = 6 [pid 5882] <... open resumed>) = 6 [ 214.542394][ T5887] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 214.556813][ T5884] loop2: detected capacity change from 0 to 4096 [pid 5883] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5882] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5883] <... open resumed>) = 7 [pid 5882] <... open resumed>) = 7 [pid 5883] sendfile(6, 7, NULL, 281474978811909 [ 214.593656][ T5884] NILFS (loop2): invalid segment: Checksum error in segment payload [ 214.629563][ T5884] NILFS (loop2): trying rollback from an earlier position [pid 5882] sendfile(6, 7, NULL, 281474978811909 [pid 5002] <... umount2 resumed>) = 0 [ 214.678168][ T5884] NILFS (loop2): recovery complete [pid 5002] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5884] <... mount resumed>) = 0 [pid 5884] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5884] chdir("./file1") = 0 [pid 5884] ioctl(4, LOOP_CLR_FD) = 0 [pid 5884] close(4) = 0 [pid 5884] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5002] lstat("./72/file1", [pid 5884] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5884] <... open resumed>) = 5 [pid 5002] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./72/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5884] ftruncate(5, 33587195 [pid 5002] <... openat resumed>) = 4 [pid 5884] <... ftruncate resumed>) = 0 [pid 5002] fstat(4, [pid 5884] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5884] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 214.724086][ T5888] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] getdents64(4, [pid 5884] sendfile(6, 7, NULL, 281474978811909 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./72/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./72") = 0 [pid 5002] mkdir("./73", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5889 ./strace-static-x86_64: Process 5889 attached [pid 5889] chdir("./73" [pid 5879] <... sendfile resumed>) = 1048576 [pid 5879] exit_group(0) = ? [pid 5879] +++ exited with 0 +++ [pid 5889] <... chdir resumed>) = 0 [pid 5889] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5879, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5889] setpgid(0, 0 [pid 4998] umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5889] <... setpgid resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4998] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5889] <... openat resumed>) = 3 [pid 4998] <... openat resumed>) = 3 [pid 5889] write(3, "1000", 4 [pid 4998] fstat(3, [pid 5889] <... write resumed>) = 4 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5889] close(3 [pid 4998] getdents64(3, [pid 5889] <... close resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5889] symlink("/dev/binderfs", "./binderfs" [pid 4998] umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./71/binderfs" [pid 5889] <... symlink resumed>) = 0 [pid 5889] memfd_create("syzkaller", 0) = 3 [pid 5889] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4998] <... unlink resumed>) = 0 [pid 4998] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5889] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5889] munmap(0x7f18ca796000, 2097152) = 0 [pid 5889] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5889] ioctl(4, LOOP_SET_FD, 3 [pid 4998] <... umount2 resumed>) = 0 [pid 5889] <... ioctl resumed>) = 0 [pid 5889] close(3) = 0 [pid 5889] mkdir("./file1", 0777) = 0 [ 215.048213][ T5889] loop5: detected capacity change from 0 to 4096 [pid 5889] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./71/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./71/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./71/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./71/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./71") = 0 [pid 4998] mkdir("./72", 0777) = 0 [ 215.132590][ T5889] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5890 [ 215.173419][ T5889] NILFS (loop5): trying rollback from an earlier position ./strace-static-x86_64: Process 5890 attached [pid 5890] chdir("./72") = 0 [pid 5890] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 215.223473][ T5889] NILFS (loop5): recovery complete [pid 5890] setpgid(0, 0) = 0 [pid 5889] <... mount resumed>) = 0 [pid 5890] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5890] write(3, "1000", 4) = 4 [pid 5890] close(3 [pid 5889] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5890] <... close resumed>) = 0 [pid 5890] symlink("/dev/binderfs", "./binderfs" [pid 5889] <... openat resumed>) = 3 [pid 5890] <... symlink resumed>) = 0 [pid 5889] chdir("./file1" [pid 5890] memfd_create("syzkaller", 0) = 3 [pid 5889] <... chdir resumed>) = 0 [pid 5890] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5889] ioctl(4, LOOP_CLR_FD [pid 5890] <... mmap resumed>) = 0x7f18ca796000 [ 215.257936][ T5891] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5889] <... ioctl resumed>) = 0 [pid 5890] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5889] close(4) = 0 [pid 5889] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5889] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5889] ftruncate(5, 33587195) = 0 [pid 5889] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5889] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5889] sendfile(6, 7, NULL, 281474978811909 [pid 5880] <... sendfile resumed>) = 1048576 [pid 5880] exit_group(0) = ? [pid 5880] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5880, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5001] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./72/binderfs") = 0 [pid 5001] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5890] <... write resumed>) = 2097152 [pid 5890] munmap(0x7f18ca796000, 2097152) = 0 [pid 5890] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5890] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5890] close(3) = 0 [pid 5890] mkdir("./file1", 0777) = 0 [ 215.481530][ T5890] loop1: detected capacity change from 0 to 4096 [pid 5890] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./72/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./72/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [ 215.550510][ T5890] NILFS (loop1): invalid segment: Checksum error in segment payload [ 215.589700][ T5890] NILFS (loop1): trying rollback from an earlier position [pid 5001] rmdir("./72/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./72") = 0 [pid 5001] mkdir("./73", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5892 ./strace-static-x86_64: Process 5892 attached [pid 5892] chdir("./73") = 0 [pid 5892] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5892] setpgid(0, 0) = 0 [pid 5892] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5892] write(3, "1000", 4) = 4 [pid 5883] <... sendfile resumed>) = 1048576 [pid 5892] close(3) = 0 [pid 5883] exit_group(0 [pid 5892] symlink("/dev/binderfs", "./binderfs" [pid 5883] <... exit_group resumed>) = ? [pid 5892] <... symlink resumed>) = 0 [pid 5882] <... sendfile resumed>) = 1048576 [pid 5892] memfd_create("syzkaller", 0) = 3 [pid 5892] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5883] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5883, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=32 /* 0.32 s */} --- [pid 5000] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5882] exit_group(0 [pid 5000] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5882] <... exit_group resumed>) = ? [ 215.689629][ T5890] NILFS (loop1): recovery complete [pid 5882] +++ exited with 0 +++ [pid 5000] <... openat resumed>) = 3 [pid 5000] fstat(3, [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5882, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 4997] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5890] <... mount resumed>) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] unlink("./72/binderfs" [pid 5890] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5000] getdents64(3, [pid 4997] <... unlink resumed>) = 0 [pid 5890] <... openat resumed>) = 3 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5890] chdir("./file1" [pid 5000] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5890] <... chdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5890] ioctl(4, LOOP_CLR_FD [pid 5000] lstat("./73/binderfs", [pid 5892] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5890] <... ioctl resumed>) = 0 [pid 5890] close(4) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5890] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5000] unlink("./73/binderfs" [pid 5890] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5000] <... unlink resumed>) = 0 [ 215.732728][ T5893] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5890] ftruncate(5, 33587195 [pid 5000] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5890] <... ftruncate resumed>) = 0 [pid 5890] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5890] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5890] sendfile(6, 7, NULL, 281474978811909 [pid 5884] <... sendfile resumed>) = 1048576 [pid 5884] exit_group(0) = ? [pid 5884] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5884, si_uid=0, si_status=0, si_utime=0, si_stime=33 /* 0.33 s */} --- [pid 4999] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./72/binderfs") = 0 [pid 4999] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5892] <... write resumed>) = 2097152 [pid 5892] munmap(0x7f18ca796000, 2097152) = 0 [pid 5892] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5892] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 4997] <... umount2 resumed>) = 0 [pid 5000] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./72/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] lstat("./73/file1", [pid 4997] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW [ 215.883845][ T5892] loop4: detected capacity change from 0 to 4096 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] openat(AT_FDCWD, "./72/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./73/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... openat resumed>) = 4 [pid 4997] fstat(4, [pid 5000] <... openat resumed>) = 4 [pid 5000] fstat(4, [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, [pid 5892] close(3 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5892] <... close resumed>) = 0 [pid 5892] mkdir("./file1", 0777 [pid 4997] getdents64(4, [pid 5000] getdents64(4, [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5892] <... mkdir resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] close(4 [pid 5892] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5000] getdents64(4, [pid 4997] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4 [pid 4997] rmdir("./72/file1" [pid 5000] <... close resumed>) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 5000] rmdir("./73/file1" [pid 4997] getdents64(3, [pid 5000] <... rmdir resumed>) = 0 [pid 5000] getdents64(3, [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3 [pid 4997] close(3 [pid 5000] <... close resumed>) = 0 [pid 5000] rmdir("./73" [pid 4997] <... close resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4997] rmdir("./72" [pid 5000] mkdir("./74", 0777 [pid 4997] <... rmdir resumed>) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 4997] mkdir("./73", 0777 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4997] <... mkdir resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] <... openat resumed>) = 3 [pid 5000] close(3 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5000] <... close resumed>) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] close(3./strace-static-x86_64: Process 5894 attached ) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5894 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5895 [pid 5894] chdir("./74") = 0 [pid 5894] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5895 attached [pid 5895] chdir("./73") = 0 [pid 5895] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5895] setpgid(0, 0) = 0 [pid 5895] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5895] write(3, "1000", 4) = 4 [pid 5895] close(3) = 0 [pid 5895] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5894] <... prctl resumed>) = 0 [pid 5895] memfd_create("syzkaller", 0 [pid 5894] setpgid(0, 0) = 0 [pid 5895] <... memfd_create resumed>) = 3 [pid 5895] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5894] write(3, "1000", 4) = 4 [ 215.999355][ T5892] NILFS (loop4): invalid segment: Checksum error in segment payload [ 216.038928][ T5892] NILFS (loop4): trying rollback from an earlier position [pid 5894] close(3) = 0 [pid 5894] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5894] memfd_create("syzkaller", 0) = 3 [pid 5894] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./72/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./72/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./72/file1") = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./72") = 0 [pid 4999] mkdir("./73", 0777 [pid 5895] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5894] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5896 ./strace-static-x86_64: Process 5896 attached [pid 5896] chdir("./73") = 0 [pid 5896] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5896] setpgid(0, 0) = 0 [pid 5896] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5896] write(3, "1000", 4) = 4 [pid 5896] close(3) = 0 [pid 5896] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5896] memfd_create("syzkaller", 0) = 3 [pid 5896] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 216.143558][ T5892] NILFS (loop4): recovery complete [pid 5894] <... write resumed>) = 2097152 [pid 5895] <... write resumed>) = 2097152 [pid 5894] munmap(0x7f18ca796000, 2097152 [pid 5896] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5895] munmap(0x7f18ca796000, 2097152 [pid 5894] <... munmap resumed>) = 0 [pid 5895] <... munmap resumed>) = 0 [pid 5895] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5894] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5895] <... openat resumed>) = 4 [pid 5894] <... openat resumed>) = 4 [pid 5892] <... mount resumed>) = 0 [pid 5895] ioctl(4, LOOP_SET_FD, 3 [pid 5894] ioctl(4, LOOP_SET_FD, 3 [pid 5892] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5892] chdir("./file1") = 0 [pid 5892] ioctl(4, LOOP_CLR_FD) = 0 [pid 5892] close(4 [pid 5895] <... ioctl resumed>) = 0 [pid 5892] <... close resumed>) = 0 [pid 5892] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5895] close(3 [pid 5894] <... ioctl resumed>) = 0 [pid 5892] <... open resumed>) = 4 [pid 5895] <... close resumed>) = 0 [pid 5894] close(3 [pid 5892] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5895] mkdir("./file1", 0777 [pid 5894] <... close resumed>) = 0 [pid 5892] <... open resumed>) = 5 [pid 5892] ftruncate(5, 33587195) = 0 [pid 5892] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5896] <... write resumed>) = 2097152 [pid 5895] <... mkdir resumed>) = 0 [pid 5894] mkdir("./file1", 0777 [pid 5892] <... open resumed>) = 6 [ 216.198154][ T5897] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 216.223872][ T5895] loop0: detected capacity change from 0 to 4096 [ 216.230930][ T5894] loop3: detected capacity change from 0 to 4096 [pid 5896] munmap(0x7f18ca796000, 2097152 [pid 5895] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5894] <... mkdir resumed>) = 0 [pid 5892] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5896] <... munmap resumed>) = 0 [pid 5894] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5896] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5892] <... open resumed>) = 7 [pid 5896] <... openat resumed>) = 4 [pid 5896] ioctl(4, LOOP_SET_FD, 3 [pid 5892] sendfile(6, 7, NULL, 281474978811909 [pid 5896] <... ioctl resumed>) = 0 [pid 5896] close(3) = 0 [pid 5896] mkdir("./file1", 0777) = 0 [ 216.273370][ T5895] NILFS (loop0): invalid segment: Checksum error in segment payload [ 216.281514][ T5895] NILFS (loop0): trying rollback from an earlier position [ 216.291998][ T5896] loop2: detected capacity change from 0 to 4096 [ 216.311856][ T5896] NILFS (loop2): invalid segment: Checksum error in segment payload [ 216.316312][ T5894] NILFS (loop3): invalid segment: Checksum error in segment payload [ 216.328151][ T5896] NILFS (loop2): trying rollback from an earlier position [pid 5896] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5889] <... sendfile resumed>) = 1048576 [pid 5889] exit_group(0) = ? [pid 5889] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5889, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5002] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 216.359543][ T5894] NILFS (loop3): trying rollback from an earlier position [ 216.377998][ T5895] NILFS (loop0): recovery complete [pid 5895] <... mount resumed>) = 0 [pid 5002] getdents64(3, [pid 5895] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5895] <... openat resumed>) = 3 [pid 5002] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5895] chdir("./file1" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5895] <... chdir resumed>) = 0 [pid 5002] lstat("./73/binderfs", [pid 5895] ioctl(4, LOOP_CLR_FD [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5895] <... ioctl resumed>) = 0 [pid 5002] unlink("./73/binderfs" [pid 5895] close(4 [pid 5002] <... unlink resumed>) = 0 [pid 5895] <... close resumed>) = 0 [pid 5002] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5895] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5895] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5895] ftruncate(5, 33587195) = 0 [pid 5895] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5894] <... mount resumed>) = 0 [pid 5895] <... open resumed>) = 6 [pid 5894] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5895] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5894] <... openat resumed>) = 3 [pid 5895] sendfile(6, 7, NULL, 281474978811909 [pid 5894] chdir("./file1") = 0 [pid 5894] ioctl(4, LOOP_CLR_FD) = 0 [pid 5894] close(4) = 0 [pid 5894] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5894] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [ 216.422714][ T5898] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 216.435785][ T5894] NILFS (loop3): recovery complete [ 216.454049][ T5896] NILFS (loop2): recovery complete [ 216.461253][ T5899] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5894] ftruncate(5, 33587195) = 0 [pid 5894] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5894] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5894] sendfile(6, 7, NULL, 281474978811909 [pid 5896] <... mount resumed>) = 0 [pid 5896] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5896] chdir("./file1") = 0 [pid 5896] ioctl(4, LOOP_CLR_FD) = 0 [pid 5896] close(4) = 0 [pid 5896] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5896] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5896] ftruncate(5, 33587195) = 0 [pid 5896] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5896] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 216.531101][ T5900] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5896] sendfile(6, 7, NULL, 281474978811909 [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./73/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./73/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./73/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./73") = 0 [pid 5002] mkdir("./74", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5901 ./strace-static-x86_64: Process 5901 attached [pid 5901] chdir("./74") = 0 [pid 5901] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5901] setpgid(0, 0) = 0 [pid 5901] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5901] write(3, "1000", 4) = 4 [pid 5901] close(3) = 0 [pid 5901] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5901] memfd_create("syzkaller", 0) = 3 [pid 5901] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5901] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5901] munmap(0x7f18ca796000, 2097152) = 0 [pid 5890] <... sendfile resumed>) = 1048576 [pid 5890] exit_group(0) = ? [pid 5890] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5890, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [pid 5901] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4998] umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5901] <... openat resumed>) = 4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5901] ioctl(4, LOOP_SET_FD, 3 [pid 4998] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5901] <... ioctl resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./72/binderfs") = 0 [pid 4998] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5901] close(3) = 0 [pid 5901] mkdir("./file1", 0777) = 0 [ 216.903738][ T5901] loop5: detected capacity change from 0 to 4096 [ 216.980823][ T5901] NILFS (loop5): invalid segment: Checksum error in segment payload [ 217.013451][ T5901] NILFS (loop5): trying rollback from an earlier position [ 217.083167][ T5901] NILFS (loop5): recovery complete [pid 5901] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5901] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5901] chdir("./file1" [pid 4998] lstat("./72/file1", [pid 5901] <... chdir resumed>) = 0 [pid 5901] ioctl(4, LOOP_CLR_FD [pid 4998] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5901] <... ioctl resumed>) = 0 [pid 4998] umount2("./72/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5901] close(4) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5901] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] openat(AT_FDCWD, "./72/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [ 217.145020][ T5902] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5901] <... open resumed>) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5901] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] getdents64(4, [pid 5901] <... open resumed>) = 5 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, [pid 5901] ftruncate(5, 33587195 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5901] <... ftruncate resumed>) = 0 [pid 4998] close(4 [pid 5901] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4998] <... close resumed>) = 0 [pid 5901] <... open resumed>) = 6 [pid 4998] rmdir("./72/file1" [pid 5901] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4998] <... rmdir resumed>) = 0 [pid 4998] getdents64(3, [pid 5901] <... open resumed>) = 7 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5901] sendfile(6, 7, NULL, 281474978811909 [pid 4998] close(3) = 0 [pid 4998] rmdir("./72") = 0 [pid 4998] mkdir("./73", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5903 ./strace-static-x86_64: Process 5903 attached [pid 5903] chdir("./73") = 0 [pid 5903] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5903] setpgid(0, 0) = 0 [pid 5903] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5903] write(3, "1000", 4) = 4 [pid 5903] close(3) = 0 [pid 5903] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5903] memfd_create("syzkaller", 0) = 3 [pid 5903] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5903] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5892] <... sendfile resumed>) = 1048576 [pid 5892] exit_group(0) = ? [pid 5892] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5892, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5903] <... write resumed>) = 2097152 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./73/binderfs") = 0 [pid 5001] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5894] <... sendfile resumed>) = 1048576 [pid 5894] exit_group(0) = ? [pid 5894] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5894, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5000] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5903] munmap(0x7f18ca796000, 2097152 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5903] <... munmap resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5895] <... sendfile resumed>) = 1048576 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5895] exit_group(0 [pid 5000] getdents64(3, [pid 5903] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5895] <... exit_group resumed>) = ? [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5903] <... openat resumed>) = 4 [pid 5000] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5903] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5895] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5895, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=28 /* 0.28 s */} --- [pid 4997] restart_syscall(<... resuming interrupted clone ...> [pid 5000] lstat("./74/binderfs", [pid 5903] <... ioctl resumed>) = 0 [pid 5903] close(3 [pid 4997] <... restart_syscall resumed>) = 0 [pid 4997] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] lstat("./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./73/binderfs") = 0 [pid 4997] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5903] <... close resumed>) = 0 [pid 5903] mkdir("./file1", 0777) = 0 [pid 5903] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5000] unlink("./74/binderfs") = 0 [ 217.560070][ T5903] loop1: detected capacity change from 0 to 4096 [pid 5000] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5896] <... sendfile resumed>) = 1048576 [pid 5896] exit_group(0) = ? [pid 5896] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5896, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./73/binderfs", [pid 5001] lstat("./73/file1", [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] unlink("./73/binderfs" [pid 5001] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... unlink resumed>) = 0 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] openat(AT_FDCWD, "./73/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./73/file1") = 0 [ 217.636992][ T5903] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./73") = 0 [pid 5001] mkdir("./74", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5904 ./strace-static-x86_64: Process 5904 attached [pid 5904] chdir("./74") = 0 [pid 5904] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5904] setpgid(0, 0) = 0 [pid 5904] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5904] write(3, "1000", 4) = 4 [pid 5904] close(3) = 0 [pid 5904] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5904] memfd_create("syzkaller", 0) = 3 [pid 5904] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 217.682262][ T5903] NILFS (loop1): trying rollback from an earlier position [pid 5904] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5903] <... mount resumed>) = 0 [pid 5903] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5000] <... umount2 resumed>) = 0 [pid 5903] chdir("./file1") = 0 [pid 4997] <... umount2 resumed>) = 0 [pid 5903] ioctl(4, LOOP_CLR_FD) = 0 [pid 5903] close(4) = 0 [pid 5903] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [ 217.747461][ T5903] NILFS (loop1): recovery complete [pid 5000] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5903] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5903] <... open resumed>) = 5 [pid 5903] ftruncate(5, 33587195) = 0 [pid 5000] lstat("./74/file1", [pid 4997] lstat("./73/file1", [pid 5903] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5903] <... open resumed>) = 6 [pid 5000] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5903] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5903] <... open resumed>) = 7 [pid 5000] openat(AT_FDCWD, "./74/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5903] sendfile(6, 7, NULL, 281474978811909 [pid 5000] <... openat resumed>) = 4 [pid 4997] openat(AT_FDCWD, "./73/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] fstat(4, [pid 4997] <... openat resumed>) = 4 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] fstat(4, [pid 5000] getdents64(4, [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, [pid 5000] getdents64(4, [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] getdents64(4, [pid 5000] close(4 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] <... close resumed>) = 0 [pid 4997] close(4 [pid 5000] rmdir("./74/file1" [pid 4997] <... close resumed>) = 0 [ 217.787583][ T5905] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4997] rmdir("./73/file1" [pid 5000] <... rmdir resumed>) = 0 [pid 5000] getdents64(3, [pid 4997] <... rmdir resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3 [pid 4997] getdents64(3, [pid 5000] <... close resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] rmdir("./74" [pid 4997] close(3 [pid 5000] <... rmdir resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 5000] mkdir("./75", 0777 [pid 4997] rmdir("./73" [pid 5000] <... mkdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4997] <... rmdir resumed>) = 0 [pid 5000] <... openat resumed>) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4997] mkdir("./74", 0777 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5904] <... write resumed>) = 2097152 [pid 5000] close(3 [pid 4997] <... mkdir resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] <... openat resumed>) = 3 [pid 5904] munmap(0x7f18ca796000, 2097152 [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5906 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] <... umount2 resumed>) = 0 [pid 4997] close(3) = 0 [pid 5904] <... munmap resumed>) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5906 attached [pid 5904] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5906] chdir("./75" [pid 5904] <... openat resumed>) = 4 [pid 5906] <... chdir resumed>) = 0 [pid 5904] ioctl(4, LOOP_SET_FD, 3 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5907 ./strace-static-x86_64: Process 5907 attached [pid 5906] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5906] setpgid(0, 0) = 0 [pid 5907] chdir("./74" [pid 5906] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5907] <... chdir resumed>) = 0 [pid 5906] <... openat resumed>) = 3 [pid 5907] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5906] write(3, "1000", 4 [pid 5907] <... prctl resumed>) = 0 [pid 5906] <... write resumed>) = 4 [pid 5907] setpgid(0, 0 [pid 5906] close(3 [pid 4999] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5907] <... setpgid resumed>) = 0 [pid 5906] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5907] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5906] symlink("/dev/binderfs", "./binderfs" [pid 4999] lstat("./73/file1", [pid 5907] <... openat resumed>) = 3 [pid 5906] <... symlink resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5907] write(3, "1000", 4 [pid 5906] memfd_create("syzkaller", 0 [pid 4999] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5907] <... write resumed>) = 4 [pid 5906] <... memfd_create resumed>) = 3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5907] close(3 [pid 5906] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] openat(AT_FDCWD, "./73/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5907] <... close resumed>) = 0 [pid 5906] <... mmap resumed>) = 0x7f18ca796000 [pid 5904] <... ioctl resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 5907] symlink("/dev/binderfs", "./binderfs" [pid 5904] close(3 [pid 5907] <... symlink resumed>) = 0 [pid 5904] <... close resumed>) = 0 [pid 4999] fstat(4, [pid 5907] memfd_create("syzkaller", 0 [pid 5904] mkdir("./file1", 0777 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5907] <... memfd_create resumed>) = 3 [pid 5904] <... mkdir resumed>) = 0 [pid 4999] getdents64(4, [pid 5907] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5904] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [ 217.916551][ T5904] loop4: detected capacity change from 0 to 4096 [pid 5907] <... mmap resumed>) = 0x7f18ca796000 [pid 4999] getdents64(4, [pid 5906] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./73/file1" [pid 5907] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./73") = 0 [pid 4999] mkdir("./74", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3) = 0 [ 217.987207][ T5904] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5908 ./strace-static-x86_64: Process 5908 attached [pid 5908] chdir("./74" [pid 5906] <... write resumed>) = 2097152 [pid 5908] <... chdir resumed>) = 0 [pid 5908] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5908] setpgid(0, 0) = 0 [pid 5906] munmap(0x7f18ca796000, 2097152 [pid 5908] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5908] write(3, "1000", 4) = 4 [pid 5906] <... munmap resumed>) = 0 [pid 5908] close(3 [ 218.045307][ T5904] NILFS (loop4): trying rollback from an earlier position [pid 5906] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5908] <... close resumed>) = 0 [pid 5908] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5908] memfd_create("syzkaller", 0) = 3 [pid 5906] <... openat resumed>) = 4 [pid 5908] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5906] ioctl(4, LOOP_SET_FD, 3 [pid 5908] <... mmap resumed>) = 0x7f18ca796000 [pid 5906] <... ioctl resumed>) = 0 [pid 5904] <... mount resumed>) = 0 [pid 5904] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5907] <... write resumed>) = 2097152 [pid 5908] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5906] close(3 [pid 5904] <... openat resumed>) = 3 [pid 5906] <... close resumed>) = 0 [pid 5904] chdir("./file1" [pid 5906] mkdir("./file1", 0777 [pid 5904] <... chdir resumed>) = 0 [pid 5906] <... mkdir resumed>) = 0 [pid 5904] ioctl(4, LOOP_CLR_FD [pid 5906] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5904] <... ioctl resumed>) = 0 [ 218.095785][ T5904] NILFS (loop4): recovery complete [ 218.104645][ T5906] loop3: detected capacity change from 0 to 4096 [ 218.111325][ T5909] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5904] close(4 [pid 5907] munmap(0x7f18ca796000, 2097152 [pid 5904] <... close resumed>) = 0 [pid 5904] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5907] <... munmap resumed>) = 0 [pid 5901] <... sendfile resumed>) = 1048576 [pid 5907] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5904] <... open resumed>) = 4 [pid 5901] exit_group(0 [pid 5904] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [ 218.152686][ T5906] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5907] ioctl(4, LOOP_SET_FD, 3 [pid 5904] <... open resumed>) = 5 [pid 5904] ftruncate(5, 33587195) = 0 [pid 5904] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5904] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5904] sendfile(6, 7, NULL, 281474978811909 [pid 5907] <... ioctl resumed>) = 0 [pid 5901] <... exit_group resumed>) = ? [pid 5901] +++ exited with 0 +++ [pid 5907] close(3) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5901, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5907] mkdir("./file1", 0777 [pid 5002] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5907] <... mkdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5907] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5002] <... openat resumed>) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5908] <... write resumed>) = 2097152 [pid 5002] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./74/binderfs", [pid 5908] munmap(0x7f18ca796000, 2097152 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./74/binderfs") = 0 [pid 5908] <... munmap resumed>) = 0 [pid 5002] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5908] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 218.203734][ T5907] loop0: detected capacity change from 0 to 4096 [ 218.213626][ T5906] NILFS (loop3): trying rollback from an earlier position [ 218.242385][ T5908] loop2: detected capacity change from 0 to 4096 [pid 5908] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5908] close(3) = 0 [pid 5908] mkdir("./file1", 0777) = 0 [ 218.256624][ T5907] NILFS (loop0): invalid segment: Checksum error in segment payload [ 218.301549][ T5907] NILFS (loop0): trying rollback from an earlier position [ 218.307396][ T5908] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5908] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./74/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 218.342365][ T5906] NILFS (loop3): recovery complete [ 218.355647][ T5907] NILFS (loop0): recovery complete [ 218.360498][ T5908] NILFS (loop2): trying rollback from an earlier position [pid 5907] <... mount resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./74/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5907] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5906] <... mount resumed>) = 0 [pid 5002] <... openat resumed>) = 4 [pid 5907] <... openat resumed>) = 3 [pid 5906] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5002] fstat(4, [pid 5906] <... openat resumed>) = 3 [pid 5907] chdir("./file1" [pid 5906] chdir("./file1" [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5907] <... chdir resumed>) = 0 [pid 5906] <... chdir resumed>) = 0 [pid 5002] getdents64(4, [pid 5907] ioctl(4, LOOP_CLR_FD [pid 5906] ioctl(4, LOOP_CLR_FD [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5907] <... ioctl resumed>) = 0 [pid 5906] <... ioctl resumed>) = 0 [pid 5002] getdents64(4, [pid 5907] close(4 [pid 5906] close(4 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5907] <... close resumed>) = 0 [pid 5907] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5906] <... close resumed>) = 0 [pid 5002] close(4 [pid 5906] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./74/file1") = 0 [pid 5907] <... open resumed>) = 4 [pid 5906] <... open resumed>) = 4 [pid 5002] getdents64(3, [pid 5907] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5906] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5907] <... open resumed>) = 5 [pid 5002] close(3 [pid 5907] ftruncate(5, 33587195 [pid 5906] <... open resumed>) = 5 [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./74" [pid 5907] <... ftruncate resumed>) = 0 [pid 5906] ftruncate(5, 33587195 [pid 5002] <... rmdir resumed>) = 0 [pid 5907] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5906] <... ftruncate resumed>) = 0 [pid 5002] mkdir("./75", 0777 [pid 5907] <... open resumed>) = 6 [pid 5906] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5907] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5002] <... mkdir resumed>) = 0 [pid 5906] <... open resumed>) = 6 [pid 5907] <... open resumed>) = 7 [pid 5906] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [ 218.385136][ T5910] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 218.396275][ T5911] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5907] sendfile(6, 7, NULL, 281474978811909 [pid 5906] <... open resumed>) = 7 [pid 5002] <... openat resumed>) = 3 [pid 5906] sendfile(6, 7, NULL, 281474978811909 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5913 [ 218.443796][ T5908] NILFS (loop2): recovery complete ./strace-static-x86_64: Process 5913 attached [pid 5913] chdir("./75" [pid 5908] <... mount resumed>) = 0 [pid 5908] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5908] chdir("./file1") = 0 [pid 5908] ioctl(4, LOOP_CLR_FD) = 0 [pid 5908] close(4) = 0 [pid 5908] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5913] <... chdir resumed>) = 0 [pid 5913] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5908] <... open resumed>) = 4 [pid 5908] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5913] setpgid(0, 0 [pid 5908] <... open resumed>) = 5 [pid 5913] <... setpgid resumed>) = 0 [pid 5908] ftruncate(5, 33587195) = 0 [pid 5913] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5908] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5908] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5908] sendfile(6, 7, NULL, 281474978811909 [pid 5913] <... openat resumed>) = 3 [pid 5913] write(3, "1000", 4) = 4 [pid 5913] close(3) = 0 [ 218.492374][ T5912] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5913] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5913] memfd_create("syzkaller", 0) = 3 [pid 5913] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5913] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5913] munmap(0x7f18ca796000, 2097152) = 0 [pid 5913] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5913] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5913] close(3) = 0 [pid 5913] mkdir("./file1", 0777) = 0 [ 218.755371][ T5913] loop5: detected capacity change from 0 to 4096 [ 218.839735][ T5913] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5913] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5903] <... sendfile resumed>) = 1048576 [pid 5903] exit_group(0) = ? [pid 5903] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5903, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [ 218.882901][ T5913] NILFS (loop5): trying rollback from an earlier position [pid 4998] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./73/binderfs") = 0 [ 218.994068][ T5913] NILFS (loop5): recovery complete [pid 4998] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5913] <... mount resumed>) = 0 [pid 5913] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5913] chdir("./file1") = 0 [pid 5913] ioctl(4, LOOP_CLR_FD) = 0 [pid 5913] close(4) = 0 [ 219.017752][ T5914] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5913] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5913] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5913] ftruncate(5, 33587195) = 0 [pid 5913] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5913] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5913] sendfile(6, 7, NULL, 281474978811909 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./73/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./73/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./73/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./73/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./73") = 0 [pid 4998] mkdir("./74", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5915 ./strace-static-x86_64: Process 5915 attached [pid 5915] chdir("./74") = 0 [pid 5915] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5915] setpgid(0, 0) = 0 [pid 5915] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5915] write(3, "1000", 4) = 4 [pid 5915] close(3) = 0 [pid 5915] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5915] memfd_create("syzkaller", 0) = 3 [pid 5915] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5915] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5904] <... sendfile resumed>) = 1048576 [pid 5904] exit_group(0) = ? [pid 5904] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5904, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 5001] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./74/binderfs") = 0 [pid 5001] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5915] <... write resumed>) = 2097152 [pid 5915] munmap(0x7f18ca796000, 2097152) = 0 [pid 5915] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5915] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5915] close(3) = 0 [pid 5915] mkdir("./file1", 0777) = 0 [ 219.416435][ T5915] loop1: detected capacity change from 0 to 4096 [pid 5915] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./74/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./74/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 219.468309][ T5915] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./74/file1") = 0 [pid 5001] getdents64(3, [pid 5907] <... sendfile resumed>) = 1048576 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./74") = 0 [pid 5001] mkdir("./75", 0777 [pid 5907] exit_group(0 [pid 5001] <... mkdir resumed>) = 0 [pid 5907] <... exit_group resumed>) = ? [pid 5906] <... sendfile resumed>) = 1048576 [pid 5907] +++ exited with 0 +++ [pid 5906] exit_group(0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5906] <... exit_group resumed>) = ? [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5907, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 5906] +++ exited with 0 +++ [pid 5001] <... openat resumed>) = 3 [pid 4997] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4997] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./74/binderfs") = 0 [pid 4997] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5906, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 219.546535][ T5915] NILFS (loop1): trying rollback from an earlier position [pid 5000] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] close(3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... close resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, [pid 5001] <... clone resumed>, child_tidptr=0x555556f7b690) = 5916 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 5908] <... sendfile resumed>) = 1048576 [pid 5908] exit_group(0 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./75/binderfs", [pid 5908] <... exit_group resumed>) = ? [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./75/binderfs") = 0 [ 219.603208][ T5915] NILFS (loop1): recovery complete [pid 5000] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5916 attached [pid 5908] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5908, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./74/binderfs") = 0 [pid 4999] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5916] chdir("./75" [pid 5915] <... mount resumed>) = 0 [pid 5916] <... chdir resumed>) = 0 [pid 5915] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5916] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5915] <... openat resumed>) = 3 [pid 5916] <... prctl resumed>) = 0 [pid 5916] setpgid(0, 0) = 0 [pid 5915] chdir("./file1" [pid 5916] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5915] <... chdir resumed>) = 0 [pid 5916] <... openat resumed>) = 3 [pid 5915] ioctl(4, LOOP_CLR_FD [pid 5916] write(3, "1000", 4 [pid 5915] <... ioctl resumed>) = 0 [pid 5916] <... write resumed>) = 4 [pid 5915] close(4) = 0 [pid 5916] close(3 [pid 5915] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5916] <... close resumed>) = 0 [pid 5916] symlink("/dev/binderfs", "./binderfs" [pid 5915] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5916] <... symlink resumed>) = 0 [pid 5915] <... open resumed>) = 5 [pid 5916] memfd_create("syzkaller", 0) = 3 [pid 5915] ftruncate(5, 33587195) = 0 [pid 5916] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5915] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5916] <... mmap resumed>) = 0x7f18ca796000 [pid 5915] <... open resumed>) = 6 [pid 5915] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 219.626332][ T5917] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5915] sendfile(6, 7, NULL, 281474978811909 [pid 5916] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./74/file1", [pid 5000] <... umount2 resumed>) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./74/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./74/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] close(3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./75/file1", [pid 4999] <... umount2 resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] rmdir("./74" [pid 5000] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./75/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... rmdir resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 5000] fstat(4, [pid 4997] mkdir("./75", 0777 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] getdents64(4, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... mkdir resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, [pid 4999] lstat("./74/file1", [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5000] close(4 [pid 4999] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... openat resumed>) = 3 [pid 5000] rmdir("./75/file1" [pid 4999] openat(AT_FDCWD, "./74/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 5000] getdents64(3, [pid 4999] fstat(4, [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] close(3 [pid 4999] getdents64(4, [pid 4997] close(3 [pid 5000] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] <... close resumed>) = 0 [pid 5000] rmdir("./75" [pid 4999] getdents64(4, [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] mkdir("./76", 0777 [pid 4999] close(4 [pid 5000] <... mkdir resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] rmdir("./74/file1" [pid 5000] <... openat resumed>) = 3 [pid 4999] <... rmdir resumed>) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] getdents64(3, [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] close(3 [pid 4999] close(3 [pid 5000] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] rmdir("./74") = 0 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5918 [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5919 [pid 4999] mkdir("./75", 0777) = 0 [pid 5916] <... write resumed>) = 2097152 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 5918 attached ) = 3 [pid 5918] chdir("./75" [pid 5916] munmap(0x7f18ca796000, 2097152 [pid 4999] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5919 attached [pid 5918] <... chdir resumed>) = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5919] chdir("./76" [pid 5918] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] close(3 [pid 5919] <... chdir resumed>) = 0 [pid 5918] <... prctl resumed>) = 0 [pid 5916] <... munmap resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5919] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5918] setpgid(0, 0 [pid 5916] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5919] <... prctl resumed>) = 0 [pid 5918] <... setpgid resumed>) = 0 [pid 5916] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5920 attached [pid 5919] setpgid(0, 0 [pid 5918] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5916] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5920 [pid 5919] <... setpgid resumed>) = 0 [pid 5918] <... openat resumed>) = 3 [pid 5919] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5918] write(3, "1000", 4 [pid 5919] <... openat resumed>) = 3 [pid 5918] <... write resumed>) = 4 [pid 5919] write(3, "1000", 4 [pid 5918] close(3 [pid 5919] <... write resumed>) = 4 [pid 5918] <... close resumed>) = 0 [pid 5920] chdir("./75" [pid 5919] close(3 [pid 5918] symlink("/dev/binderfs", "./binderfs" [pid 5916] <... ioctl resumed>) = 0 [pid 5920] <... chdir resumed>) = 0 [pid 5919] <... close resumed>) = 0 [pid 5918] <... symlink resumed>) = 0 [pid 5916] close(3 [pid 5920] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5919] symlink("/dev/binderfs", "./binderfs" [pid 5918] memfd_create("syzkaller", 0 [pid 5916] <... close resumed>) = 0 [pid 5920] <... prctl resumed>) = 0 [pid 5919] <... symlink resumed>) = 0 [pid 5918] <... memfd_create resumed>) = 3 [pid 5916] mkdir("./file1", 0777 [pid 5920] setpgid(0, 0 [pid 5919] memfd_create("syzkaller", 0 [pid 5918] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5920] <... setpgid resumed>) = 0 [pid 5919] <... memfd_create resumed>) = 3 [pid 5918] <... mmap resumed>) = 0x7f18ca796000 [pid 5916] <... mkdir resumed>) = 0 [pid 5920] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5919] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5916] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5920] <... openat resumed>) = 3 [pid 5919] <... mmap resumed>) = 0x7f18ca796000 [ 219.913348][ T5916] loop4: detected capacity change from 0 to 4096 [pid 5920] write(3, "1000", 4) = 4 [pid 5920] close(3) = 0 [pid 5920] symlink("/dev/binderfs", "./binderfs" [pid 5918] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5920] <... symlink resumed>) = 0 [pid 5919] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5920] memfd_create("syzkaller", 0) = 3 [pid 5920] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 219.958462][ T5916] NILFS (loop4): invalid segment: Checksum error in segment payload [ 219.974890][ T5916] NILFS (loop4): trying rollback from an earlier position [ 220.044453][ T5916] NILFS (loop4): recovery complete [pid 5920] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5916] <... mount resumed>) = 0 [pid 5916] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5919] <... write resumed>) = 2097152 [pid 5918] <... write resumed>) = 2097152 [pid 5916] <... openat resumed>) = 3 [pid 5920] munmap(0x7f18ca796000, 2097152 [pid 5916] chdir("./file1") = 0 [pid 5916] ioctl(4, LOOP_CLR_FD) = 0 [pid 5920] <... munmap resumed>) = 0 [pid 5916] close(4 [pid 5920] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5916] <... close resumed>) = 0 [pid 5918] munmap(0x7f18ca796000, 2097152 [pid 5919] munmap(0x7f18ca796000, 2097152 [pid 5918] <... munmap resumed>) = 0 [pid 5920] <... openat resumed>) = 4 [pid 5916] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5920] ioctl(4, LOOP_SET_FD, 3 [pid 5918] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5919] <... munmap resumed>) = 0 [ 220.068697][ T5921] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5918] <... openat resumed>) = 4 [pid 5916] <... open resumed>) = 4 [pid 5919] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5918] ioctl(4, LOOP_SET_FD, 3 [pid 5919] <... openat resumed>) = 4 [pid 5916] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5919] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5916] <... open resumed>) = 5 [pid 5916] ftruncate(5, 33587195) = 0 [pid 5916] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5920] <... ioctl resumed>) = 0 [pid 5916] <... open resumed>) = 6 [pid 5920] close(3 [pid 5916] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5920] <... close resumed>) = 0 [pid 5918] <... ioctl resumed>) = 0 [pid 5916] <... open resumed>) = 7 [pid 5920] mkdir("./file1", 0777 [pid 5918] close(3 [pid 5916] sendfile(6, 7, NULL, 281474978811909 [pid 5920] <... mkdir resumed>) = 0 [pid 5920] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5918] <... close resumed>) = 0 [pid 5919] close(3) = 0 [pid 5919] mkdir("./file1", 0777) = 0 [pid 5919] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [ 220.117614][ T5920] loop2: detected capacity change from 0 to 4096 [ 220.120438][ T5918] loop0: detected capacity change from 0 to 4096 [ 220.133267][ T5919] loop3: detected capacity change from 0 to 4096 [pid 5918] mkdir("./file1", 0777) = 0 [pid 5918] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5913] <... sendfile resumed>) = 1048576 [pid 5913] exit_group(0) = ? [pid 5913] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5913, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 5002] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 220.181855][ T5920] NILFS (loop2): invalid segment: Checksum error in segment payload [ 220.196617][ T5918] NILFS (loop0): invalid segment: Checksum error in segment payload [ 220.198497][ T5920] NILFS (loop2): trying rollback from an earlier position [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./75/binderfs") = 0 [ 220.224639][ T5919] NILFS (loop3): invalid segment: Checksum error in segment payload [ 220.258908][ T5918] NILFS (loop0): trying rollback from an earlier position [ 220.269271][ T5920] NILFS (loop2): recovery complete [ 220.270384][ T5919] NILFS (loop3): trying rollback from an earlier position [pid 5002] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5920] <... mount resumed>) = 0 [pid 5920] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5920] chdir("./file1") = 0 [pid 5920] ioctl(4, LOOP_CLR_FD) = 0 [pid 5920] close(4) = 0 [pid 5920] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5920] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5920] ftruncate(5, 33587195) = 0 [pid 5920] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5920] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 220.319638][ T5922] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 220.356572][ T5919] NILFS (loop3): recovery complete [ 220.362538][ T5918] NILFS (loop0): recovery complete [pid 5920] sendfile(6, 7, NULL, 281474978811909 [pid 5002] <... umount2 resumed>) = 0 [pid 5919] <... mount resumed>) = 0 [pid 5919] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5919] chdir("./file1") = 0 [pid 5919] ioctl(4, LOOP_CLR_FD) = 0 [pid 5919] close(4) = 0 [pid 5919] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5919] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5919] ftruncate(5, 33587195) = 0 [pid 5919] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5918] <... mount resumed>) = 0 [pid 5919] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5918] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5919] <... open resumed>) = 7 [pid 5918] <... openat resumed>) = 3 [pid 5002] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5919] sendfile(6, 7, NULL, 281474978811909 [pid 5918] chdir("./file1") = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./75/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./75/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, [pid 5918] ioctl(4, LOOP_CLR_FD [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5918] <... ioctl resumed>) = 0 [pid 5002] getdents64(4, [pid 5918] close(4 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5918] <... close resumed>) = 0 [pid 5002] close(4) = 0 [pid 5918] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [ 220.409949][ T5923] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 220.420664][ T5924] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] rmdir("./75/file1" [pid 5918] <... open resumed>) = 4 [pid 5002] <... rmdir resumed>) = 0 [pid 5918] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] getdents64(3, [pid 5918] <... open resumed>) = 5 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5918] ftruncate(5, 33587195 [pid 5002] close(3 [pid 5918] <... ftruncate resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5918] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] rmdir("./75" [pid 5918] <... open resumed>) = 6 [pid 5002] <... rmdir resumed>) = 0 [pid 5918] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5002] mkdir("./76", 0777 [pid 5918] <... open resumed>) = 7 [pid 5002] <... mkdir resumed>) = 0 [pid 5918] sendfile(6, 7, NULL, 281474978811909 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5925 ./strace-static-x86_64: Process 5925 attached [pid 5925] chdir("./76") = 0 [pid 5925] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5925] setpgid(0, 0) = 0 [pid 5925] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5925] write(3, "1000", 4) = 4 [pid 5925] close(3) = 0 [pid 5925] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5925] memfd_create("syzkaller", 0) = 3 [pid 5925] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5925] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5925] munmap(0x7f18ca796000, 2097152) = 0 [pid 5925] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5925] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5925] close(3) = 0 [pid 5925] mkdir("./file1", 0777) = 0 [ 220.665849][ T5925] loop5: detected capacity change from 0 to 4096 [ 220.702997][ T5925] NILFS (loop5): invalid segment: Checksum error in segment payload [ 220.711070][ T5925] NILFS (loop5): trying rollback from an earlier position [ 220.764093][ T5925] NILFS (loop5): recovery complete [pid 5925] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5915] <... sendfile resumed>) = 1048576 [pid 5915] exit_group(0) = ? [pid 5915] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5915, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5925] <... mount resumed>) = 0 [pid 4998] <... restart_syscall resumed>) = 0 [pid 5925] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5925] chdir("./file1" [pid 4998] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5925] <... chdir resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5925] ioctl(4, LOOP_CLR_FD [pid 4998] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5925] <... ioctl resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 5925] close(4 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5925] <... close resumed>) = 0 [pid 5925] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5925] <... open resumed>) = 4 [ 220.823125][ T5926] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5925] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./74/binderfs") = 0 [pid 4998] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5925] <... open resumed>) = 5 [pid 5925] ftruncate(5, 33587195) = 0 [pid 5925] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5925] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5925] sendfile(6, 7, NULL, 281474978811909 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./74/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./74/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./74/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./74/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./74") = 0 [pid 4998] mkdir("./75", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5927 ./strace-static-x86_64: Process 5927 attached [pid 5927] chdir("./75") = 0 [pid 5927] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5927] setpgid(0, 0) = 0 [pid 5927] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5927] write(3, "1000", 4) = 4 [pid 5927] close(3) = 0 [pid 5927] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5927] memfd_create("syzkaller", 0) = 3 [pid 5927] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5916] <... sendfile resumed>) = 1048576 [pid 5916] exit_group(0) = ? [pid 5916] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5916, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5001] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./75/binderfs" [pid 5927] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5001] <... unlink resumed>) = 0 [pid 5001] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5927] <... write resumed>) = 2097152 [pid 5927] munmap(0x7f18ca796000, 2097152) = 0 [pid 5927] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5927] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5927] close(3) = 0 [pid 5927] mkdir("./file1", 0777) = 0 [ 221.379866][ T5927] loop1: detected capacity change from 0 to 4096 [pid 5927] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5920] <... sendfile resumed>) = 1048576 [pid 5918] <... sendfile resumed>) = 1048576 [pid 5918] exit_group(0 [pid 5920] exit_group(0 [pid 5918] <... exit_group resumed>) = ? [ 221.467269][ T5927] NILFS (loop1): invalid segment: Checksum error in segment payload [ 221.499374][ T5927] NILFS (loop1): trying rollback from an earlier position [pid 5920] <... exit_group resumed>) = ? [pid 5918] +++ exited with 0 +++ [pid 5001] <... umount2 resumed>) = 0 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5918, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [pid 5920] +++ exited with 0 +++ [pid 5001] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5920, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 5001] lstat("./75/file1", [pid 4999] <... restart_syscall resumed>) = 0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... openat resumed>) = 3 [pid 5001] openat(AT_FDCWD, "./75/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... openat resumed>) = 3 [pid 4997] fstat(3, [pid 5001] <... openat resumed>) = 4 [pid 4999] fstat(3, [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] fstat(4, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] getdents64(4, [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5927] <... mount resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./75/binderfs", [pid 4999] lstat("./75/binderfs", [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./75/binderfs" [pid 4999] unlink("./75/binderfs" [pid 4997] <... unlink resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 4997] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5927] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5001] getdents64(4, [pid 5919] <... sendfile resumed>) = 1048576 [pid 5927] <... openat resumed>) = 3 [pid 5919] exit_group(0 [pid 5001] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5927] chdir("./file1" [pid 5919] <... exit_group resumed>) = ? [pid 5001] close(4 [pid 5927] <... chdir resumed>) = 0 [pid 5919] +++ exited with 0 +++ [pid 5001] <... close resumed>) = 0 [pid 5927] ioctl(4, LOOP_CLR_FD [pid 5001] rmdir("./75/file1" [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5919, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- [pid 5927] <... ioctl resumed>) = 0 [pid 5000] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5927] close(4 [pid 5000] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5927] <... close resumed>) = 0 [pid 5001] getdents64(3, [pid 5927] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] fstat(3, [pid 5001] close(3 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, [pid 5927] <... open resumed>) = 4 [pid 5001] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] rmdir("./75" [pid 5927] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5000] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./76/binderfs", [pid 5927] <... open resumed>) = 5 [pid 5001] <... rmdir resumed>) = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5927] ftruncate(5, 33587195 [pid 5000] unlink("./76/binderfs" [pid 5927] <... ftruncate resumed>) = 0 [pid 5001] mkdir("./76", 0777 [pid 5000] <... unlink resumed>) = 0 [pid 5927] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5927] <... open resumed>) = 6 [ 221.582282][ T5927] NILFS (loop1): recovery complete [ 221.590215][ T5928] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5927] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5001] <... mkdir resumed>) = 0 [pid 5927] <... open resumed>) = 7 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5927] sendfile(6, 7, NULL, 281474978811909 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5929 ./strace-static-x86_64: Process 5929 attached [pid 5929] chdir("./76") = 0 [pid 5929] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5929] setpgid(0, 0) = 0 [pid 5929] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5929] write(3, "1000", 4) = 4 [pid 5929] close(3) = 0 [pid 5929] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5929] memfd_create("syzkaller", 0) = 3 [pid 5929] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./75/file1", [pid 5929] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./75/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, [pid 4997] <... umount2 resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] <... umount2 resumed>) = 0 [pid 4999] getdents64(4, [pid 4997] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4) = 0 [pid 4999] rmdir("./75/file1" [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... rmdir resumed>) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3 [pid 4997] lstat("./75/file1", [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./75" [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./76", 0777) = 0 [pid 4997] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] openat(AT_FDCWD, "./75/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] close(3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... close resumed>) = 0 [pid 4997] <... openat resumed>) = 4 [pid 5000] lstat("./76/file1", [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] fstat(4, [pid 5000] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5930 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] openat(AT_FDCWD, "./76/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] getdents64(4, [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, [pid 4997] getdents64(4, ./strace-static-x86_64: Process 5930 attached [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5929] <... write resumed>) = 2097152 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5930] chdir("./76" [pid 5000] getdents64(4, [pid 4997] close(4 [pid 5930] <... chdir resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5930] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] close(4 [pid 4997] <... close resumed>) = 0 [pid 5930] <... prctl resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4997] rmdir("./75/file1" [pid 5930] setpgid(0, 0 [pid 5000] rmdir("./76/file1" [pid 5930] <... setpgid resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 5930] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] getdents64(3, [pid 4997] getdents64(3, [pid 5930] <... openat resumed>) = 3 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5930] write(3, "1000", 4 [pid 5000] close(3 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5930] <... write resumed>) = 4 [pid 5000] <... close resumed>) = 0 [pid 4997] close(3 [pid 5930] close(3 [pid 5000] rmdir("./76" [pid 5930] <... close resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 5930] symlink("/dev/binderfs", "./binderfs" [pid 5000] mkdir("./77", 0777 [pid 4997] rmdir("./75" [pid 5930] <... symlink resumed>) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 5930] memfd_create("syzkaller", 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5930] <... memfd_create resumed>) = 3 [pid 5000] <... openat resumed>) = 3 [pid 5930] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4997] <... rmdir resumed>) = 0 [pid 5930] <... mmap resumed>) = 0x7f18ca796000 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] mkdir("./76", 0777 [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] <... mkdir resumed>) = 0 [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5931 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5929] munmap(0x7f18ca796000, 2097152 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] close(3 [pid 5929] <... munmap resumed>) = 0 [pid 4997] <... close resumed>) = 0 ./strace-static-x86_64: Process 5931 attached [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5931] chdir("./77") = 0 [pid 5929] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5931] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5929] <... openat resumed>) = 4 [pid 5931] <... prctl resumed>) = 0 [pid 5929] ioctl(4, LOOP_SET_FD, 3 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5932 [pid 5931] setpgid(0, 0) = 0 [pid 5930] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5931] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5931] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 5932 attached [pid 5931] close(3) = 0 [pid 5932] chdir("./76" [pid 5931] symlink("/dev/binderfs", "./binderfs" [pid 5932] <... chdir resumed>) = 0 [pid 5931] <... symlink resumed>) = 0 [pid 5932] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5931] memfd_create("syzkaller", 0 [pid 5932] <... prctl resumed>) = 0 [pid 5931] <... memfd_create resumed>) = 3 [pid 5932] setpgid(0, 0 [pid 5931] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5932] <... setpgid resumed>) = 0 [pid 5931] <... mmap resumed>) = 0x7f18ca796000 [pid 5932] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5929] <... ioctl resumed>) = 0 [pid 5932] <... openat resumed>) = 3 [pid 5929] close(3 [pid 5932] write(3, "1000", 4 [pid 5929] <... close resumed>) = 0 [pid 5929] mkdir("./file1", 0777 [pid 5932] <... write resumed>) = 4 [pid 5929] <... mkdir resumed>) = 0 [pid 5932] close(3 [pid 5929] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5932] <... close resumed>) = 0 [pid 5932] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5932] memfd_create("syzkaller", 0) = 3 [pid 5932] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 221.906136][ T5929] loop4: detected capacity change from 0 to 4096 [pid 5931] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 221.979232][ T5929] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5932] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5930] <... write resumed>) = 2097152 [pid 5930] munmap(0x7f18ca796000, 2097152) = 0 [pid 5930] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5930] ioctl(4, LOOP_SET_FD, 3 [pid 5931] <... write resumed>) = 2097152 [pid 5925] <... sendfile resumed>) = 1048576 [pid 5925] exit_group(0) = ? [pid 5925] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5925, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5002] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./76/binderfs") = 0 [pid 5002] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5930] <... ioctl resumed>) = 0 [pid 5930] close(3) = 0 [pid 5931] munmap(0x7f18ca796000, 2097152 [pid 5930] mkdir("./file1", 0777 [pid 5931] <... munmap resumed>) = 0 [pid 5930] <... mkdir resumed>) = 0 [pid 5930] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5931] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 222.020982][ T5929] NILFS (loop4): trying rollback from an earlier position [ 222.047233][ T5930] loop2: detected capacity change from 0 to 4096 [pid 5931] ioctl(4, LOOP_SET_FD, 3 [pid 5932] <... write resumed>) = 2097152 [pid 5931] <... ioctl resumed>) = 0 [pid 5931] close(3) = 0 [pid 5931] mkdir("./file1", 0777) = 0 [pid 5931] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5932] munmap(0x7f18ca796000, 2097152) = 0 [pid 5932] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5929] <... mount resumed>) = 0 [pid 5929] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5929] chdir("./file1") = 0 [pid 5929] ioctl(4, LOOP_CLR_FD) = 0 [pid 5929] close(4) = 0 [pid 5929] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5929] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5929] ftruncate(5, 33587195) = 0 [pid 5929] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5929] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5929] sendfile(6, 7, NULL, 281474978811909 [pid 5932] <... openat resumed>) = 4 [ 222.092586][ T5930] NILFS (loop2): invalid segment: Checksum error in segment payload [ 222.101014][ T5931] loop3: detected capacity change from 0 to 4096 [ 222.109429][ T5929] NILFS (loop4): recovery complete [ 222.127215][ T5933] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5932] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5932] close(3) = 0 [pid 5932] mkdir("./file1", 0777) = 0 [ 222.145186][ T5932] loop0: detected capacity change from 0 to 4096 [ 222.159153][ T5930] NILFS (loop2): trying rollback from an earlier position [ 222.169418][ T5931] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5932] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./76/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./76/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [ 222.214681][ T5932] NILFS (loop0): invalid segment: Checksum error in segment payload [ 222.215912][ T5931] NILFS (loop3): trying rollback from an earlier position [ 222.250969][ T5930] NILFS (loop2): recovery complete [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./76/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./76") = 0 [pid 5002] mkdir("./77", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5935 ./strace-static-x86_64: Process 5935 attached [pid 5935] chdir("./77") = 0 [pid 5935] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5935] setpgid(0, 0) = 0 [pid 5935] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5935] write(3, "1000", 4) = 4 [pid 5935] close(3) = 0 [pid 5935] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5935] memfd_create("syzkaller", 0) = 3 [pid 5935] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5930] <... mount resumed>) = 0 [pid 5930] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5930] chdir("./file1") = 0 [pid 5930] ioctl(4, LOOP_CLR_FD) = 0 [pid 5930] close(4) = 0 [pid 5930] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5930] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5930] ftruncate(5, 33587195) = 0 [pid 5930] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5930] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 222.269466][ T5932] NILFS (loop0): trying rollback from an earlier position [ 222.294723][ T5934] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.306901][ T5931] NILFS (loop3): recovery complete [pid 5930] sendfile(6, 7, NULL, 281474978811909 [pid 5931] <... mount resumed>) = 0 [pid 5931] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5931] chdir("./file1") = 0 [pid 5931] ioctl(4, LOOP_CLR_FD) = 0 [pid 5931] close(4 [pid 5935] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5931] <... close resumed>) = 0 [pid 5931] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5931] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5931] ftruncate(5, 33587195) = 0 [pid 5931] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5931] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 222.349477][ T5936] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.373854][ T5932] NILFS (loop0): recovery complete [pid 5931] sendfile(6, 7, NULL, 281474978811909 [pid 5932] <... mount resumed>) = 0 [pid 5932] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5932] chdir("./file1") = 0 [pid 5932] ioctl(4, LOOP_CLR_FD) = 0 [pid 5932] close(4) = 0 [pid 5932] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5932] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5932] ftruncate(5, 33587195) = 0 [pid 5932] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [ 222.430064][ T5937] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5932] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5932] sendfile(6, 7, NULL, 281474978811909 [pid 5935] <... write resumed>) = 2097152 [pid 5935] munmap(0x7f18ca796000, 2097152) = 0 [pid 5935] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5935] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5935] close(3) = 0 [ 222.524279][ T5935] loop5: detected capacity change from 0 to 4096 [pid 5935] mkdir("./file1", 0777) = 0 [ 222.620678][ T5935] NILFS (loop5): invalid segment: Checksum error in segment payload [ 222.678913][ T5935] NILFS (loop5): trying rollback from an earlier position [pid 5935] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5927] <... sendfile resumed>) = 1048576 [pid 5927] exit_group(0) = ? [pid 5927] +++ exited with 0 +++ [ 222.760513][ T5935] NILFS (loop5): recovery complete [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5927, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 4998] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5935] <... mount resumed>) = 0 [pid 4998] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5935] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5935] chdir("./file1") = 0 [pid 4998] lstat("./75/binderfs", [pid 5935] ioctl(4, LOOP_CLR_FD) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5935] close(4 [pid 4998] unlink("./75/binderfs" [pid 5935] <... close resumed>) = 0 [pid 5935] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] <... unlink resumed>) = 0 [pid 5935] <... open resumed>) = 4 [pid 4998] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5935] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5935] ftruncate(5, 33587195) = 0 [pid 5935] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5935] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 222.822609][ T5938] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5935] sendfile(6, 7, NULL, 281474978811909 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./75/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./75/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./75/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./75/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./75") = 0 [pid 4998] mkdir("./76", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5939 ./strace-static-x86_64: Process 5939 attached [pid 5939] chdir("./76") = 0 [pid 5939] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5939] setpgid(0, 0) = 0 [pid 5939] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5939] write(3, "1000", 4) = 4 [pid 5939] close(3) = 0 [pid 5939] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5939] memfd_create("syzkaller", 0) = 3 [pid 5939] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5939] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5929] <... sendfile resumed>) = 1048576 [pid 5939] munmap(0x7f18ca796000, 2097152 [pid 5929] exit_group(0) = ? [pid 5939] <... munmap resumed>) = 0 [pid 5929] +++ exited with 0 +++ [pid 5939] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5929, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 5939] <... openat resumed>) = 4 [pid 5939] ioctl(4, LOOP_SET_FD, 3 [pid 5001] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./76/binderfs") = 0 [pid 5001] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5939] <... ioctl resumed>) = 0 [pid 5939] close(3) = 0 [pid 5939] mkdir("./file1", 0777) = 0 [pid 5939] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5930] <... sendfile resumed>) = 1048576 [pid 5930] exit_group(0) = ? [pid 5930] +++ exited with 0 +++ [ 223.359007][ T5939] loop1: detected capacity change from 0 to 4096 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5930, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./76/binderfs") = 0 [pid 4999] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5932] <... sendfile resumed>) = 1048576 [pid 5932] exit_group(0) = ? [pid 5932] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5932, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 4997] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./76/binderfs") = 0 [ 223.430484][ T5939] NILFS (loop1): invalid segment: Checksum error in segment payload [ 223.461854][ T5939] NILFS (loop1): trying rollback from an earlier position [pid 4997] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5931] <... sendfile resumed>) = 1048576 [pid 5931] exit_group(0) = ? [pid 5001] <... umount2 resumed>) = 0 [pid 5931] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5931, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] lstat("./76/file1", [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... openat resumed>) = 3 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] fstat(3, [pid 5001] openat(AT_FDCWD, "./76/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... openat resumed>) = 4 [pid 5000] getdents64(3, [pid 5001] fstat(4, [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(4, [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] lstat("./77/binderfs", [pid 5001] getdents64(4, [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] unlink("./77/binderfs" [pid 5001] close(4 [pid 5000] <... unlink resumed>) = 0 [pid 5001] <... close resumed>) = 0 [pid 5000] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] rmdir("./76/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./76") = 0 [pid 5001] mkdir("./77", 0777) = 0 [ 223.527454][ T5939] NILFS (loop1): recovery complete [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5941 ./strace-static-x86_64: Process 5941 attached [pid 5941] chdir("./77") = 0 [pid 5941] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5941] setpgid(0, 0) = 0 [pid 5941] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5939] <... mount resumed>) = 0 [pid 5939] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5941] <... openat resumed>) = 3 [pid 5939] <... openat resumed>) = 3 [pid 5939] chdir("./file1" [pid 5941] write(3, "1000", 4 [pid 5939] <... chdir resumed>) = 0 [pid 5941] <... write resumed>) = 4 [pid 5939] ioctl(4, LOOP_CLR_FD [pid 5941] close(3 [pid 5939] <... ioctl resumed>) = 0 [pid 5941] <... close resumed>) = 0 [pid 5939] close(4 [pid 5941] symlink("/dev/binderfs", "./binderfs" [pid 5939] <... close resumed>) = 0 [pid 5941] <... symlink resumed>) = 0 [pid 5939] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5941] memfd_create("syzkaller", 0 [pid 5939] <... open resumed>) = 4 [pid 5941] <... memfd_create resumed>) = 3 [pid 5939] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5941] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5939] <... open resumed>) = 5 [pid 5941] <... mmap resumed>) = 0x7f18ca796000 [pid 5939] ftruncate(5, 33587195) = 0 [pid 5939] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5939] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 223.584394][ T5940] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5939] sendfile(6, 7, NULL, 281474978811909 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./76/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5941] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] openat(AT_FDCWD, "./76/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] <... umount2 resumed>) = 0 [pid 4999] getdents64(4, [pid 4997] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] close(4 [pid 4997] lstat("./76/file1", [pid 4999] <... close resumed>) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] rmdir("./76/file1" [pid 4997] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... rmdir resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] getdents64(3, [pid 4997] openat(AT_FDCWD, "./76/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3 [pid 4997] <... openat resumed>) = 4 [pid 4999] <... close resumed>) = 0 [pid 4997] fstat(4, [pid 4999] rmdir("./76" [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4997] getdents64(4, [pid 4999] mkdir("./77", 0777 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] <... mkdir resumed>) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4997] close(4 [pid 4999] <... openat resumed>) = 3 [pid 4997] <... close resumed>) = 0 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4997] rmdir("./76/file1" [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] <... rmdir resumed>) = 0 [pid 4999] close(3 [pid 4997] getdents64(3, [pid 5000] <... umount2 resumed>) = 0 [pid 5000] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... close resumed>) = 0 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./77/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./77/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./77/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./77") = 0 [pid 5000] mkdir("./78", 0777 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] close(3 [pid 5000] <... mkdir resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4997] rmdir("./76" [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5942 [pid 5000] <... openat resumed>) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4997] <... rmdir resumed>) = 0 [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] mkdir("./77", 0777 [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] <... mkdir resumed>) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5941] <... write resumed>) = 2097152 [pid 4997] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5942 attached [pid 5941] munmap(0x7f18ca796000, 2097152 [pid 5942] chdir("./77" [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5943 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5942] <... chdir resumed>) = 0 [pid 5941] <... munmap resumed>) = 0 [pid 5942] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5942] setpgid(0, 0 [pid 5941] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4997] close(3 [pid 5942] <... setpgid resumed>) = 0 [pid 5941] <... openat resumed>) = 4 [pid 5942] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5941] ioctl(4, LOOP_SET_FD, 3 [pid 4997] <... close resumed>) = 0 [pid 5942] <... openat resumed>) = 3 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5943 attached [pid 5942] write(3, "1000", 4 [pid 5943] chdir("./78" [pid 5942] <... write resumed>) = 4 [pid 5943] <... chdir resumed>) = 0 [pid 5942] close(3 [pid 5943] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5942] <... close resumed>) = 0 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5944 [pid 5943] <... prctl resumed>) = 0 [pid 5942] symlink("/dev/binderfs", "./binderfs" [pid 5943] setpgid(0, 0 [pid 5942] <... symlink resumed>) = 0 [pid 5943] <... setpgid resumed>) = 0 [pid 5942] memfd_create("syzkaller", 0 [pid 5943] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5942] <... memfd_create resumed>) = 3 [pid 5943] <... openat resumed>) = 3 [pid 5942] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5943] write(3, "1000", 4 [pid 5942] <... mmap resumed>) = 0x7f18ca796000 [pid 5943] <... write resumed>) = 4 [pid 5943] close(3) = 0 [pid 5943] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5943] memfd_create("syzkaller", 0) = 3 [pid 5943] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5941] <... ioctl resumed>) = 0 [pid 5941] close(3) = 0 [pid 5941] mkdir("./file1", 0777./strace-static-x86_64: Process 5944 attached ) = 0 [pid 5941] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5944] chdir("./77") = 0 [pid 5944] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 223.805529][ T5941] loop4: detected capacity change from 0 to 4096 [pid 5944] setpgid(0, 0) = 0 [pid 5943] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5944] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5944] write(3, "1000", 4) = 4 [pid 5942] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5944] close(3) = 0 [pid 5944] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5944] memfd_create("syzkaller", 0) = 3 [pid 5935] <... sendfile resumed>) = 1048576 [pid 5944] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5935] exit_group(0 [pid 5944] <... mmap resumed>) = 0x7f18ca796000 [pid 5935] <... exit_group resumed>) = ? [pid 5935] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5935, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5002] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./77/binderfs") = 0 [pid 5002] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5944] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5943] <... write resumed>) = 2097152 [pid 5942] <... write resumed>) = 2097152 [ 223.917532][ T5941] NILFS (loop4): invalid segment: Checksum error in segment payload [ 223.946307][ T5941] NILFS (loop4): trying rollback from an earlier position [pid 5943] munmap(0x7f18ca796000, 2097152 [pid 5942] munmap(0x7f18ca796000, 2097152 [pid 5943] <... munmap resumed>) = 0 [pid 5942] <... munmap resumed>) = 0 [pid 5943] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5942] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5943] <... openat resumed>) = 4 [pid 5942] <... openat resumed>) = 4 [pid 5943] ioctl(4, LOOP_SET_FD, 3 [pid 5942] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5942] close(3) = 0 [pid 5942] mkdir("./file1", 0777 [pid 5943] <... ioctl resumed>) = 0 [pid 5943] close(3) = 0 [pid 5943] mkdir("./file1", 0777) = 0 [pid 5942] <... mkdir resumed>) = 0 [pid 5942] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [ 223.974873][ T5941] NILFS (loop4): recovery complete [ 223.982139][ T5943] loop3: detected capacity change from 0 to 4096 [ 223.989230][ T5942] loop2: detected capacity change from 0 to 4096 [pid 5943] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5941] <... mount resumed>) = 0 [pid 5941] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5941] chdir("./file1") = 0 [pid 5941] ioctl(4, LOOP_CLR_FD) = 0 [pid 5941] close(4) = 0 [ 224.016010][ T5942] NILFS (loop2): invalid segment: Checksum error in segment payload [ 224.029160][ T5943] NILFS (loop3): invalid segment: Checksum error in segment payload [ 224.038127][ T5945] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.053899][ T5942] NILFS (loop2): trying rollback from an earlier position [pid 5941] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5941] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5941] ftruncate(5, 33587195) = 0 [pid 5941] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5941] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5941] sendfile(6, 7, NULL, 281474978811909 [pid 5944] <... write resumed>) = 2097152 [pid 5002] <... umount2 resumed>) = 0 [ 224.063640][ T5943] NILFS (loop3): trying rollback from an earlier position [pid 5944] munmap(0x7f18ca796000, 2097152) = 0 [pid 5944] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5944] ioctl(4, LOOP_SET_FD, 3 [pid 5002] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./77/file1", [pid 5944] <... ioctl resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./77/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4 [pid 5944] close(3 [pid 5002] <... close resumed>) = 0 [pid 5944] <... close resumed>) = 0 [pid 5002] rmdir("./77/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3 [pid 5944] mkdir("./file1", 0777 [pid 5002] <... close resumed>) = 0 [pid 5002] rmdir("./77" [pid 5944] <... mkdir resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5944] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5002] mkdir("./78", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [ 224.125996][ T5944] loop0: detected capacity change from 0 to 4096 [ 224.134284][ T5942] NILFS (loop2): recovery complete [ 224.139921][ T5943] NILFS (loop3): recovery complete [pid 5942] <... mount resumed>) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5943] <... mount resumed>) = 0 [pid 5943] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5942] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5943] <... openat resumed>) = 3 [pid 5942] <... openat resumed>) = 3 [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5948 [pid 5943] chdir("./file1" [pid 5942] chdir("./file1" [pid 5943] <... chdir resumed>) = 0 [pid 5942] <... chdir resumed>) = 0 [pid 5943] ioctl(4, LOOP_CLR_FD [pid 5942] ioctl(4, LOOP_CLR_FD [pid 5943] <... ioctl resumed>) = 0 [pid 5942] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 5948 attached [pid 5943] close(4 [pid 5942] close(4 [pid 5948] chdir("./78" [pid 5943] <... close resumed>) = 0 [pid 5942] <... close resumed>) = 0 [pid 5948] <... chdir resumed>) = 0 [pid 5943] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5942] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5948] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5943] <... open resumed>) = 4 [pid 5942] <... open resumed>) = 4 [pid 5948] <... prctl resumed>) = 0 [pid 5943] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5942] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5948] setpgid(0, 0 [pid 5943] <... open resumed>) = 5 [pid 5942] <... open resumed>) = 5 [pid 5948] <... setpgid resumed>) = 0 [pid 5943] ftruncate(5, 33587195 [pid 5942] ftruncate(5, 33587195 [pid 5948] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5943] <... ftruncate resumed>) = 0 [pid 5942] <... ftruncate resumed>) = 0 [pid 5948] <... openat resumed>) = 3 [pid 5943] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5942] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5948] write(3, "1000", 4 [pid 5943] <... open resumed>) = 6 [pid 5942] <... open resumed>) = 6 [pid 5948] <... write resumed>) = 4 [pid 5943] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5942] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5948] close(3 [pid 5943] <... open resumed>) = 7 [pid 5942] <... open resumed>) = 7 [pid 5948] <... close resumed>) = 0 [ 224.182629][ T5946] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.195366][ T5947] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.210347][ T5944] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 5943] sendfile(6, 7, NULL, 281474978811909 [pid 5942] sendfile(6, 7, NULL, 281474978811909 [pid 5948] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5948] memfd_create("syzkaller", 0) = 3 [pid 5948] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 224.249158][ T5944] NILFS (loop0): trying rollback from an earlier position [ 224.345574][ T5944] NILFS (loop0): recovery complete [pid 5948] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5944] <... mount resumed>) = 0 [pid 5944] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5944] chdir("./file1") = 0 [pid 5944] ioctl(4, LOOP_CLR_FD) = 0 [ 224.386526][ T5949] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5944] close(4) = 0 [pid 5944] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5948] <... write resumed>) = 2097152 [pid 5944] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5944] ftruncate(5, 33587195) = 0 [pid 5944] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5948] munmap(0x7f18ca796000, 2097152 [pid 5944] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5948] <... munmap resumed>) = 0 [pid 5944] <... open resumed>) = 7 [pid 5948] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5948] ioctl(4, LOOP_SET_FD, 3 [pid 5944] sendfile(6, 7, NULL, 281474978811909 [pid 5948] <... ioctl resumed>) = 0 [pid 5948] close(3) = 0 [pid 5948] mkdir("./file1", 0777) = 0 [ 224.495909][ T5948] loop5: detected capacity change from 0 to 4096 [ 224.537419][ T5948] NILFS (loop5): invalid segment: Checksum error in segment payload [ 224.599491][ T5948] NILFS (loop5): trying rollback from an earlier position [pid 5948] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5939] <... sendfile resumed>) = 1048576 [pid 5948] <... mount resumed>) = 0 [ 224.690412][ T5948] NILFS (loop5): recovery complete [pid 5948] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5939] exit_group(0 [pid 5948] <... openat resumed>) = 3 [pid 5939] <... exit_group resumed>) = ? [pid 5948] chdir("./file1" [pid 5939] +++ exited with 0 +++ [pid 5948] <... chdir resumed>) = 0 [pid 5948] ioctl(4, LOOP_CLR_FD [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5939, si_uid=0, si_status=0, si_utime=0, si_stime=35 /* 0.35 s */} --- [pid 5948] <... ioctl resumed>) = 0 [pid 4998] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5948] close(4 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5948] <... close resumed>) = 0 [pid 5948] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5948] <... open resumed>) = 4 [pid 4998] <... openat resumed>) = 3 [pid 5948] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [ 224.720926][ T5950] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] fstat(3, [pid 5948] <... open resumed>) = 5 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5948] ftruncate(5, 33587195 [pid 4998] getdents64(3, [pid 5948] <... ftruncate resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5948] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4998] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5948] <... open resumed>) = 6 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5948] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4998] lstat("./76/binderfs", [pid 5948] <... open resumed>) = 7 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5948] sendfile(6, 7, NULL, 281474978811909 [pid 4998] unlink("./76/binderfs") = 0 [pid 4998] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 4998] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./76/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./76/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./76/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./76/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./76") = 0 [pid 4998] mkdir("./77", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5951 [pid 5941] <... sendfile resumed>) = 1048576 ./strace-static-x86_64: Process 5951 attached [pid 5951] chdir("./77" [pid 5941] exit_group(0 [pid 5951] <... chdir resumed>) = 0 [pid 5941] <... exit_group resumed>) = ? [pid 5951] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5941] +++ exited with 0 +++ [pid 5951] setpgid(0, 0) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5941, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=22 /* 0.22 s */} --- [pid 5951] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5001] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5951] <... openat resumed>) = 3 [pid 5951] write(3, "1000", 4 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5951] <... write resumed>) = 4 [pid 5001] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5951] close(3) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5951] symlink("/dev/binderfs", "./binderfs" [pid 5001] fstat(3, [pid 5951] <... symlink resumed>) = 0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5951] memfd_create("syzkaller", 0 [pid 5001] getdents64(3, [pid 5951] <... memfd_create resumed>) = 3 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5951] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5951] <... mmap resumed>) = 0x7f18ca796000 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./77/binderfs") = 0 [pid 5001] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5951] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5942] <... sendfile resumed>) = 1048576 [pid 5942] exit_group(0) = ? [pid 5942] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5942, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 4999] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 4999] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./77/binderfs") = 0 [pid 4999] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5943] <... sendfile resumed>) = 1048576 [pid 5951] <... write resumed>) = 2097152 [pid 5943] exit_group(0 [pid 5951] munmap(0x7f18ca796000, 2097152 [pid 5943] <... exit_group resumed>) = ? [pid 5943] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5943, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5000] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5951] <... munmap resumed>) = 0 [pid 5000] fstat(3, [pid 5951] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5951] <... openat resumed>) = 4 [pid 5000] getdents64(3, [pid 5951] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5951] <... ioctl resumed>) = 0 [pid 5000] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./78/binderfs") = 0 [pid 5951] close(3 [pid 5000] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5951] <... close resumed>) = 0 [pid 5001] <... umount2 resumed>) = 0 [pid 5951] mkdir("./file1", 0777) = 0 [pid 5951] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5001] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./77/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./77/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 225.383868][ T5951] loop1: detected capacity change from 0 to 4096 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./77/file1") = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./77") = 0 [pid 5001] mkdir("./78", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 225.447898][ T5951] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5001] close(3) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5952 ./strace-static-x86_64: Process 5952 attached [pid 5944] <... sendfile resumed>) = 1048576 [pid 4999] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5944] exit_group(0 [pid 5952] chdir("./78" [pid 5944] <... exit_group resumed>) = ? [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5952] <... chdir resumed>) = 0 [pid 5944] +++ exited with 0 +++ [pid 5952] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] lstat("./77/file1", [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5944, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- [pid 5952] <... prctl resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5952] setpgid(0, 0 [pid 4999] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5952] <... setpgid resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5952] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] openat(AT_FDCWD, "./77/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5952] <... openat resumed>) = 3 [pid 4999] <... openat resumed>) = 4 [pid 4997] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5952] write(3, "1000", 4 [pid 4999] fstat(4, [pid 4997] <... openat resumed>) = 3 [pid 5952] <... write resumed>) = 4 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] fstat(3, [pid 5952] close(3 [pid 4999] getdents64(4, [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5952] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(3, [pid 5952] symlink("/dev/binderfs", "./binderfs" [pid 4999] getdents64(4, [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5952] <... symlink resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5952] memfd_create("syzkaller", 0 [pid 4999] close(4 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5952] <... memfd_create resumed>) = 3 [pid 4999] <... close resumed>) = 0 [ 225.490116][ T5951] NILFS (loop1): trying rollback from an earlier position [pid 4997] lstat("./77/binderfs", [pid 5952] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4999] rmdir("./77/file1" [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./77/binderfs") = 0 [pid 4997] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5952] <... mmap resumed>) = 0x7f18ca796000 [pid 5000] <... umount2 resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 5951] <... mount resumed>) = 0 [pid 5000] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] getdents64(3, [pid 5951] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5951] <... openat resumed>) = 3 [pid 5000] lstat("./78/file1", [pid 4999] close(3 [pid 5951] chdir("./file1" [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... close resumed>) = 0 [pid 5951] <... chdir resumed>) = 0 [pid 5000] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] rmdir("./77" [pid 5951] ioctl(4, LOOP_CLR_FD [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... rmdir resumed>) = 0 [pid 5951] <... ioctl resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./78/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] mkdir("./78", 0777 [pid 5951] close(4 [pid 5000] <... openat resumed>) = 4 [pid 4999] <... mkdir resumed>) = 0 [pid 5951] <... close resumed>) = 0 [pid 5000] fstat(4, [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5951] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5951] <... open resumed>) = 4 [pid 5000] getdents64(4, [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5951] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5951] <... open resumed>) = 5 [pid 5000] getdents64(4, [pid 4999] close(3 [pid 5951] ftruncate(5, 33587195 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] <... close resumed>) = 0 [pid 5951] <... ftruncate resumed>) = 0 [pid 5000] close(4 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5951] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] <... close resumed>) = 0 [pid 5951] <... open resumed>) = 6 [pid 5000] rmdir("./78/file1" [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5954 [pid 5951] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5000] <... rmdir resumed>) = 0 [pid 5951] <... open resumed>) = 7 [pid 5000] getdents64(3, [pid 5951] sendfile(6, 7, NULL, 281474978811909 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5952] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] close(3) = 0 [pid 5000] rmdir("./78") = 0 [pid 5000] mkdir("./79", 0777) = 0 ./strace-static-x86_64: Process 5954 attached [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5954] chdir("./78" [pid 5000] <... openat resumed>) = 3 [pid 5954] <... chdir resumed>) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 5954] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5954] <... prctl resumed>) = 0 [pid 5000] close(3 [pid 5954] setpgid(0, 0 [pid 5000] <... close resumed>) = 0 [pid 5954] <... setpgid resumed>) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5954] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5955 [pid 5954] write(3, "1000", 4) = 4 [pid 5954] close(3) = 0 [ 225.542698][ T5951] NILFS (loop1): recovery complete [ 225.559240][ T5953] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5954] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5955 attached ) = 0 [pid 5955] chdir("./79" [pid 5954] memfd_create("syzkaller", 0 [pid 5955] <... chdir resumed>) = 0 [pid 5954] <... memfd_create resumed>) = 3 [pid 5955] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5954] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5955] <... prctl resumed>) = 0 [pid 5954] <... mmap resumed>) = 0x7f18ca796000 [pid 5955] setpgid(0, 0) = 0 [pid 5955] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5955] write(3, "1000", 4) = 4 [pid 5955] close(3) = 0 [pid 5955] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5955] memfd_create("syzkaller", 0) = 3 [pid 5955] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5954] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5955] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5952] <... write resumed>) = 2097152 [pid 4997] <... umount2 resumed>) = 0 [pid 5952] munmap(0x7f18ca796000, 2097152) = 0 [pid 5952] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 4997] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5952] ioctl(4, LOOP_SET_FD, 3 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./77/file1", [pid 5952] <... ioctl resumed>) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5954] <... write resumed>) = 2097152 [pid 4997] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5952] close(3 [pid 5954] munmap(0x7f18ca796000, 2097152 [pid 5952] <... close resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5954] <... munmap resumed>) = 0 [pid 5952] mkdir("./file1", 0777 [pid 4997] openat(AT_FDCWD, "./77/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5952] <... mkdir resumed>) = 0 [pid 5955] <... write resumed>) = 2097152 [pid 5952] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4997] <... openat resumed>) = 4 [pid 5954] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 4997] fstat(4, [pid 5954] ioctl(4, LOOP_SET_FD, 3 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, [pid 5955] munmap(0x7f18ca796000, 2097152) = 0 [pid 5955] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 225.787320][ T5952] loop4: detected capacity change from 0 to 4096 [ 225.819891][ T5954] loop2: detected capacity change from 0 to 4096 [ 225.824141][ T5952] NILFS (loop4): invalid segment: Checksum error in segment payload [pid 5955] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./77/file1") = 0 [pid 5954] <... ioctl resumed>) = 0 [pid 5954] close(3) = 0 [pid 5954] mkdir("./file1", 0777) = 0 [pid 5954] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5955] close(3) = 0 [pid 5955] mkdir("./file1", 0777 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3 [pid 5948] <... sendfile resumed>) = 1048576 [pid 5948] exit_group(0 [pid 4997] <... close resumed>) = 0 [pid 5948] <... exit_group resumed>) = ? [pid 4997] rmdir("./77" [pid 5955] <... mkdir resumed>) = 0 [pid 5955] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4997] <... rmdir resumed>) = 0 [ 225.833508][ T5955] loop3: detected capacity change from 0 to 4096 [ 225.856760][ T5952] NILFS (loop4): trying rollback from an earlier position [ 225.878367][ T5954] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5948] +++ exited with 0 +++ [pid 4997] mkdir("./78", 0777 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5948, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5002] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] <... mkdir resumed>) = 0 [pid 5002] lstat("./78/binderfs", [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./78/binderfs") = 0 [pid 5002] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... openat resumed>) = 3 [pid 5952] <... mount resumed>) = 0 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5952] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5952] <... openat resumed>) = 3 [pid 4997] close(3) = 0 [pid 5952] chdir("./file1" [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5952] <... chdir resumed>) = 0 [pid 5952] ioctl(4, LOOP_CLR_FD [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5957 [pid 5952] <... ioctl resumed>) = 0 [pid 5952] close(4) = 0 [pid 5952] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5952] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5952] ftruncate(5, 33587195) = 0 [pid 5952] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5952] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 225.899115][ T5955] NILFS (loop3): invalid segment: Checksum error in segment payload [ 225.906250][ T5952] NILFS (loop4): recovery complete [ 225.915467][ T5954] NILFS (loop2): trying rollback from an earlier position [ 225.923273][ T5955] NILFS (loop3): trying rollback from an earlier position [ 225.932978][ T5956] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5952] sendfile(6, 7, NULL, 281474978811909./strace-static-x86_64: Process 5957 attached [pid 5957] chdir("./78") = 0 [pid 5957] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5957] setpgid(0, 0) = 0 [pid 5957] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5957] write(3, "1000", 4) = 4 [pid 5957] close(3) = 0 [pid 5957] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5957] memfd_create("syzkaller", 0) = 3 [pid 5957] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 226.004647][ T5954] NILFS (loop2): recovery complete [ 226.005421][ T5955] NILFS (loop3): recovery complete [pid 5955] <... mount resumed>) = 0 [pid 5954] <... mount resumed>) = 0 [pid 5955] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5954] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5955] <... openat resumed>) = 3 [pid 5954] chdir("./file1" [pid 5955] chdir("./file1" [pid 5954] <... chdir resumed>) = 0 [pid 5955] <... chdir resumed>) = 0 [pid 5954] ioctl(4, LOOP_CLR_FD [pid 5955] ioctl(4, LOOP_CLR_FD) = 0 [pid 5954] <... ioctl resumed>) = 0 [pid 5955] close(4 [pid 5954] close(4 [pid 5955] <... close resumed>) = 0 [pid 5954] <... close resumed>) = 0 [pid 5955] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5954] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5955] <... open resumed>) = 4 [pid 5955] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5954] <... open resumed>) = 4 [pid 5955] <... open resumed>) = 5 [pid 5954] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5955] ftruncate(5, 33587195 [pid 5954] <... open resumed>) = 5 [pid 5955] <... ftruncate resumed>) = 0 [pid 5954] ftruncate(5, 33587195 [pid 5955] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5954] <... ftruncate resumed>) = 0 [pid 5955] <... open resumed>) = 6 [ 226.060574][ T5958] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 226.071682][ T5959] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5954] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5957] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5955] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5954] <... open resumed>) = 6 [pid 5002] <... umount2 resumed>) = 0 [pid 5955] <... open resumed>) = 7 [pid 5954] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5955] sendfile(6, 7, NULL, 281474978811909 [pid 5954] <... open resumed>) = 7 [pid 5954] sendfile(6, 7, NULL, 281474978811909 [pid 5002] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./78/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./78/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./78/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./78" [pid 5957] <... write resumed>) = 2097152 [pid 5002] <... rmdir resumed>) = 0 [pid 5002] mkdir("./79", 0777) = 0 [pid 5957] munmap(0x7f18ca796000, 2097152 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5957] <... munmap resumed>) = 0 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5957] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5002] close(3 [pid 5957] <... openat resumed>) = 4 [pid 5002] <... close resumed>) = 0 [pid 5957] ioctl(4, LOOP_SET_FD, 3 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5960 ./strace-static-x86_64: Process 5960 attached [pid 5960] chdir("./79") = 0 [pid 5957] <... ioctl resumed>) = 0 [pid 5960] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5957] close(3 [pid 5960] <... prctl resumed>) = 0 [pid 5957] <... close resumed>) = 0 [pid 5960] setpgid(0, 0 [pid 5957] mkdir("./file1", 0777 [pid 5960] <... setpgid resumed>) = 0 [pid 5957] <... mkdir resumed>) = 0 [pid 5960] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5957] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5960] <... openat resumed>) = 3 [pid 5960] write(3, "1000", 4) = 4 [ 226.277825][ T5957] loop0: detected capacity change from 0 to 4096 [pid 5960] close(3) = 0 [pid 5960] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5960] memfd_create("syzkaller", 0) = 3 [pid 5960] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 226.329637][ T5957] NILFS (loop0): invalid segment: Checksum error in segment payload [ 226.348261][ T5957] NILFS (loop0): trying rollback from an earlier position [ 226.448365][ T5957] NILFS (loop0): recovery complete [pid 5960] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5960] munmap(0x7f18ca796000, 2097152) = 0 [pid 5957] <... mount resumed>) = 0 [pid 5957] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5957] chdir("./file1") = 0 [pid 5957] ioctl(4, LOOP_CLR_FD) = 0 [pid 5957] close(4 [pid 5960] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5957] <... close resumed>) = 0 [pid 5957] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5960] <... openat resumed>) = 4 [pid 5957] <... open resumed>) = 4 [pid 5957] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5960] ioctl(4, LOOP_SET_FD, 3 [pid 5957] <... open resumed>) = 5 [pid 5957] ftruncate(5, 33587195) = 0 [pid 5957] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5957] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 226.508347][ T5961] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5957] sendfile(6, 7, NULL, 281474978811909 [pid 5960] <... ioctl resumed>) = 0 [pid 5960] close(3) = 0 [ 226.564686][ T5960] loop5: detected capacity change from 0 to 4096 [pid 5960] mkdir("./file1", 0777) = 0 [ 226.643539][ T5960] NILFS (loop5): invalid segment: Checksum error in segment payload [ 226.664714][ T5960] NILFS (loop5): trying rollback from an earlier position [ 226.683284][ T5960] NILFS (loop5): recovery complete [pid 5960] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 5951] <... sendfile resumed>) = 1048576 [pid 5960] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5951] exit_group(0 [pid 5960] <... openat resumed>) = 3 [pid 5951] <... exit_group resumed>) = ? [pid 5960] chdir("./file1" [pid 5951] +++ exited with 0 +++ [pid 5960] <... chdir resumed>) = 0 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5951, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5960] ioctl(4, LOOP_CLR_FD) = 0 [pid 5960] close(4) = 0 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 5960] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] <... restart_syscall resumed>) = 0 [pid 4998] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5960] <... open resumed>) = 4 [pid 5960] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] fstat(3, [pid 5960] <... open resumed>) = 5 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 226.695308][ T5962] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] getdents64(3, [pid 5960] ftruncate(5, 33587195 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5960] <... ftruncate resumed>) = 0 [pid 4998] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5960] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./77/binderfs", [pid 5960] <... open resumed>) = 6 [pid 5960] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5960] <... open resumed>) = 7 [pid 4998] unlink("./77/binderfs" [pid 5960] sendfile(6, 7, NULL, 281474978811909 [pid 4998] <... unlink resumed>) = 0 [pid 4998] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 4998] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./77/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./77/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./77/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./77/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./77") = 0 [pid 4998] mkdir("./78", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5963 ./strace-static-x86_64: Process 5963 attached [pid 5963] chdir("./78") = 0 [pid 5963] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5963] setpgid(0, 0) = 0 [pid 5963] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5963] write(3, "1000", 4) = 4 [pid 5963] close(3) = 0 [pid 5963] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5963] memfd_create("syzkaller", 0) = 3 [pid 5963] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5952] <... sendfile resumed>) = 1048576 [pid 5952] exit_group(0 [pid 5954] <... sendfile resumed>) = 1048576 [pid 5952] <... exit_group resumed>) = ? [pid 5954] exit_group(0 [pid 5963] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5954] <... exit_group resumed>) = ? [pid 5952] +++ exited with 0 +++ [pid 5954] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5952, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5954, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5001] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... restart_syscall resumed>) = 0 [pid 5001] <... openat resumed>) = 3 [pid 5001] fstat(3, [pid 4999] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] getdents64(3, [pid 4999] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] <... openat resumed>) = 3 [pid 5001] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] fstat(3, [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] lstat("./78/binderfs", [pid 4999] getdents64(3, [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./78/binderfs" [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] <... unlink resumed>) = 0 [pid 4999] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./78/binderfs", [pid 5963] <... write resumed>) = 2097152 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./78/binderfs" [pid 5963] munmap(0x7f18ca796000, 2097152 [pid 4999] <... unlink resumed>) = 0 [pid 4999] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5963] <... munmap resumed>) = 0 [pid 5963] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5963] ioctl(4, LOOP_SET_FD, 3 [pid 5955] <... sendfile resumed>) = 1048576 [pid 5963] <... ioctl resumed>) = 0 [pid 5955] exit_group(0) = ? [pid 5963] close(3) = 0 [pid 5963] mkdir("./file1", 0777) = 0 [pid 5955] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5955, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- [pid 5963] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5000] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 227.195105][ T5963] loop1: detected capacity change from 0 to 4096 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./79/binderfs") = 0 [ 227.260403][ T5963] NILFS (loop1): invalid segment: Checksum error in segment payload [pid 5000] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5001] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./78/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./78/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./78/file1") = 0 [pid 4999] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] getdents64(3, [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] lstat("./78/file1", [pid 5001] close(3 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... close resumed>) = 0 [ 227.305493][ T5963] NILFS (loop1): trying rollback from an earlier position [pid 4999] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] rmdir("./78") = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] mkdir("./79", 0777 [pid 4999] openat(AT_FDCWD, "./78/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... mkdir resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4999] fstat(4, [pid 5001] <... openat resumed>) = 3 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4999] getdents64(4, [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] close(3 [pid 4999] getdents64(4, [pid 5001] <... close resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] close(4) = 0 [pid 4999] rmdir("./78/file1") = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 5001] <... clone resumed>, child_tidptr=0x555556f7b690) = 5964 [pid 4999] rmdir("./78") = 0 [pid 4999] mkdir("./79", 0777) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4999] close(3./strace-static-x86_64: Process 5964 attached ) = 0 [pid 5964] chdir("./79" [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5964] <... chdir resumed>) = 0 [pid 5964] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5965 [pid 5964] <... prctl resumed>) = 0 [pid 5964] setpgid(0, 0) = 0 [pid 5964] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 5965 attached [pid 5964] write(3, "1000", 4 [pid 5965] chdir("./79" [pid 5964] <... write resumed>) = 4 [pid 5965] <... chdir resumed>) = 0 [pid 5964] close(3 [pid 5965] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5964] <... close resumed>) = 0 [pid 5965] <... prctl resumed>) = 0 [pid 5964] symlink("/dev/binderfs", "./binderfs" [pid 5965] setpgid(0, 0 [pid 5964] <... symlink resumed>) = 0 [pid 5965] <... setpgid resumed>) = 0 [pid 5964] memfd_create("syzkaller", 0 [pid 5965] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5964] <... memfd_create resumed>) = 3 [pid 5965] <... openat resumed>) = 3 [ 227.395817][ T5963] NILFS (loop1): recovery complete [pid 5964] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5965] write(3, "1000", 4 [pid 5964] <... mmap resumed>) = 0x7f18ca796000 [pid 5965] <... write resumed>) = 4 [pid 5965] close(3) = 0 [pid 5965] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5965] memfd_create("syzkaller", 0) = 3 [pid 5965] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5963] <... mount resumed>) = 0 [pid 5963] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5963] chdir("./file1") = 0 [pid 5963] ioctl(4, LOOP_CLR_FD) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 5963] close(4) = 0 [pid 5963] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5963] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5000] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5963] ftruncate(5, 33587195 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5963] <... ftruncate resumed>) = 0 [pid 5963] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5000] lstat("./79/file1", [pid 5963] <... open resumed>) = 6 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5963] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5000] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5963] <... open resumed>) = 7 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5963] sendfile(6, 7, NULL, 281474978811909 [pid 5000] openat(AT_FDCWD, "./79/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, [pid 5965] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [ 227.455126][ T5966] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5964] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] close(4) = 0 [pid 5000] rmdir("./79/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./79") = 0 [pid 5000] mkdir("./80", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5967 ./strace-static-x86_64: Process 5967 attached [pid 5967] chdir("./80") = 0 [pid 5967] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5967] setpgid(0, 0) = 0 [pid 5967] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5967] write(3, "1000", 4) = 4 [pid 5967] close(3) = 0 [pid 5967] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5967] memfd_create("syzkaller", 0) = 3 [pid 5967] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5957] <... sendfile resumed>) = 1048576 [pid 5964] <... write resumed>) = 2097152 [pid 5957] exit_group(0 [pid 5965] <... write resumed>) = 2097152 [pid 5957] <... exit_group resumed>) = ? [pid 5964] munmap(0x7f18ca796000, 2097152) = 0 [pid 5957] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5957, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5964] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 4997] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5964] ioctl(4, LOOP_SET_FD, 3 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5965] munmap(0x7f18ca796000, 2097152 [pid 4997] <... openat resumed>) = 3 [pid 5967] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5965] <... munmap resumed>) = 0 [pid 4997] fstat(3, [pid 5965] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5965] <... openat resumed>) = 4 [pid 5965] ioctl(4, LOOP_SET_FD, 3 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5964] <... ioctl resumed>) = 0 [pid 4997] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./78/binderfs") = 0 [pid 4997] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5964] close(3) = 0 [pid 5964] mkdir("./file1", 0777) = 0 [pid 5964] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5965] <... ioctl resumed>) = 0 [ 227.651037][ T5964] loop4: detected capacity change from 0 to 4096 [ 227.677287][ T5965] loop2: detected capacity change from 0 to 4096 [pid 5965] close(3) = 0 [pid 5965] mkdir("./file1", 0777) = 0 [pid 5965] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5967] <... write resumed>) = 2097152 [pid 5967] munmap(0x7f18ca796000, 2097152 [pid 5960] <... sendfile resumed>) = 1048576 [ 227.719336][ T5964] NILFS (loop4): invalid segment: Checksum error in segment payload [ 227.759019][ T5965] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5960] exit_group(0) = ? [pid 5967] <... munmap resumed>) = 0 [pid 5967] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5960] +++ exited with 0 +++ [pid 5967] <... openat resumed>) = 4 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5960, si_uid=0, si_status=0, si_utime=0, si_stime=32 /* 0.32 s */} --- [pid 5967] ioctl(4, LOOP_SET_FD, 3 [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5967] <... ioctl resumed>) = 0 [pid 5967] close(3) = 0 [pid 5967] mkdir("./file1", 0777 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./79/binderfs") = 0 [pid 5002] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5967] <... mkdir resumed>) = 0 [ 227.782755][ T5964] NILFS (loop4): trying rollback from an earlier position [ 227.797751][ T5967] loop3: detected capacity change from 0 to 4096 [ 227.805973][ T5965] NILFS (loop2): trying rollback from an earlier position [pid 5967] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4997] <... umount2 resumed>) = 0 [pid 4997] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./78/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./78/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 5965] <... mount resumed>) = 0 [ 227.858726][ T5967] NILFS (loop3): invalid segment: Checksum error in segment payload [ 227.873135][ T5964] NILFS (loop4): recovery complete [ 227.885105][ T5965] NILFS (loop2): recovery complete [pid 5965] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4997] rmdir("./78/file1" [pid 5965] <... openat resumed>) = 3 [pid 5964] <... mount resumed>) = 0 [pid 5965] chdir("./file1" [pid 5964] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4997] <... rmdir resumed>) = 0 [pid 5965] <... chdir resumed>) = 0 [pid 5964] <... openat resumed>) = 3 [pid 5965] ioctl(4, LOOP_CLR_FD [pid 5964] chdir("./file1" [pid 4997] getdents64(3, [pid 5965] <... ioctl resumed>) = 0 [pid 5964] <... chdir resumed>) = 0 [pid 5965] close(4 [pid 5964] ioctl(4, LOOP_CLR_FD [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5965] <... close resumed>) = 0 [pid 5964] <... ioctl resumed>) = 0 [pid 5964] close(4) = 0 [pid 5964] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5965] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4997] close(3) = 0 [pid 5965] <... open resumed>) = 4 [pid 4997] rmdir("./78" [pid 5965] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4997] <... rmdir resumed>) = 0 [pid 5965] <... open resumed>) = 5 [pid 5965] ftruncate(5, 33587195 [pid 4997] mkdir("./79", 0777 [pid 5965] <... ftruncate resumed>) = 0 [pid 5965] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5964] <... open resumed>) = 4 [pid 4997] <... mkdir resumed>) = 0 [pid 5965] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5964] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5965] <... open resumed>) = 7 [pid 4997] <... openat resumed>) = 3 [pid 5965] sendfile(6, 7, NULL, 281474978811909 [pid 5964] <... open resumed>) = 5 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5964] ftruncate(5, 33587195) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 227.906658][ T5968] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 227.908641][ T5969] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 227.937478][ T5967] NILFS (loop3): trying rollback from an earlier position [pid 5964] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4997] close(3 [pid 5964] <... open resumed>) = 6 [pid 5964] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4997] <... close resumed>) = 0 [pid 5964] <... open resumed>) = 7 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5964] sendfile(6, 7, NULL, 281474978811909 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5970 [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./79/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./79/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, ./strace-static-x86_64: Process 5970 attached [pid 5970] chdir("./79" [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5970] <... chdir resumed>) = 0 [pid 5970] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] getdents64(4, [pid 5970] <... prctl resumed>) = 0 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5970] setpgid(0, 0 [pid 5002] close(4 [pid 5970] <... setpgid resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5970] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] rmdir("./79/file1" [pid 5970] <... openat resumed>) = 3 [pid 5002] <... rmdir resumed>) = 0 [pid 5970] write(3, "1000", 4 [pid 5002] getdents64(3, [pid 5970] <... write resumed>) = 4 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5970] close(3 [pid 5002] close(3 [pid 5970] <... close resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5970] symlink("/dev/binderfs", "./binderfs" [pid 5002] rmdir("./79" [pid 5970] <... symlink resumed>) = 0 [pid 5002] <... rmdir resumed>) = 0 [pid 5970] memfd_create("syzkaller", 0 [pid 5002] mkdir("./80", 0777 [pid 5970] <... memfd_create resumed>) = 3 [pid 5002] <... mkdir resumed>) = 0 [pid 5970] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [ 228.014811][ T5967] NILFS (loop3): recovery complete [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5970] <... mmap resumed>) = 0x7f18ca796000 [pid 5967] <... mount resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5967] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5002] ioctl(3, LOOP_CLR_FD [pid 5967] <... openat resumed>) = 3 [pid 5002] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5967] chdir("./file1" [pid 5002] close(3 [pid 5967] <... chdir resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 5967] ioctl(4, LOOP_CLR_FD [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5967] <... ioctl resumed>) = 0 [pid 5967] close(4 [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5972 [pid 5967] <... close resumed>) = 0 [pid 5967] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5967] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5967] ftruncate(5, 33587195) = 0 ./strace-static-x86_64: Process 5972 attached [pid 5967] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5972] chdir("./80" [pid 5967] <... open resumed>) = 6 [pid 5972] <... chdir resumed>) = 0 [pid 5967] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5972] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5967] <... open resumed>) = 7 [pid 5972] <... prctl resumed>) = 0 [pid 5967] sendfile(6, 7, NULL, 281474978811909 [pid 5972] setpgid(0, 0) = 0 [pid 5972] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5972] write(3, "1000", 4) = 4 [pid 5972] close(3) = 0 [pid 5972] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5972] memfd_create("syzkaller", 0) = 3 [ 228.049902][ T5971] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5972] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5970] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5972] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5970] munmap(0x7f18ca796000, 2097152) = 0 [pid 5970] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5970] ioctl(4, LOOP_SET_FD, 3 [pid 5972] <... write resumed>) = 2097152 [pid 5970] <... ioctl resumed>) = 0 [pid 5970] close(3 [pid 5972] munmap(0x7f18ca796000, 2097152 [pid 5970] <... close resumed>) = 0 [pid 5972] <... munmap resumed>) = 0 [pid 5970] mkdir("./file1", 0777) = 0 [pid 5970] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [ 228.249425][ T5970] loop0: detected capacity change from 0 to 4096 [pid 5972] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5972] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5972] close(3) = 0 [pid 5972] mkdir("./file1", 0777) = 0 [ 228.312580][ T5970] NILFS (loop0): invalid segment: Checksum error in segment payload [ 228.321263][ T5972] loop5: detected capacity change from 0 to 4096 [ 228.350907][ T5970] NILFS (loop0): trying rollback from an earlier position [ 228.371280][ T5972] NILFS (loop5): invalid segment: Checksum error in segment payload [pid 5972] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5963] <... sendfile resumed>) = 1048576 [pid 5963] exit_group(0) = ? [pid 5963] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5963, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 4998] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 228.415928][ T5972] NILFS (loop5): trying rollback from an earlier position [ 228.427837][ T5970] NILFS (loop0): recovery complete [pid 5970] <... mount resumed>) = 0 [pid 4998] lstat("./78/binderfs", [pid 5970] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./78/binderfs") = 0 [pid 4998] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5970] <... openat resumed>) = 3 [pid 5970] chdir("./file1") = 0 [pid 5970] ioctl(4, LOOP_CLR_FD) = 0 [pid 5970] close(4) = 0 [pid 5970] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5970] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5970] ftruncate(5, 33587195) = 0 [pid 5970] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5970] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 228.466192][ T5973] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 228.486305][ T5972] NILFS (loop5): recovery complete [pid 5970] sendfile(6, 7, NULL, 281474978811909 [pid 5972] <... mount resumed>) = 0 [pid 5972] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5972] chdir("./file1") = 0 [pid 5972] ioctl(4, LOOP_CLR_FD) = 0 [pid 5972] close(4) = 0 [pid 5972] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5972] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5972] ftruncate(5, 33587195) = 0 [pid 5972] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5972] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 228.528910][ T5974] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5972] sendfile(6, 7, NULL, 281474978811909 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./78/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./78/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./78/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./78/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./78") = 0 [pid 4998] mkdir("./79", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5975 ./strace-static-x86_64: Process 5975 attached [pid 5975] chdir("./79") = 0 [pid 5975] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5975] setpgid(0, 0) = 0 [pid 5975] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5975] write(3, "1000", 4) = 4 [pid 5975] close(3) = 0 [pid 5975] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5975] memfd_create("syzkaller", 0) = 3 [pid 5975] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5975] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5975] munmap(0x7f18ca796000, 2097152) = 0 [pid 5975] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5975] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5975] close(3) = 0 [ 229.027258][ T5975] loop1: detected capacity change from 0 to 4096 [pid 5975] mkdir("./file1", 0777) = 0 [pid 5975] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5967] <... sendfile resumed>) = 1048576 [pid 5967] exit_group(0) = ? [pid 5964] <... sendfile resumed>) = 1048576 [pid 5967] +++ exited with 0 +++ [pid 5964] exit_group(0) = ? [ 229.120632][ T5975] NILFS (loop1): invalid segment: Checksum error in segment payload [ 229.138468][ T5975] NILFS (loop1): trying rollback from an earlier position [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5967, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 5964] +++ exited with 0 +++ [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5964, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5001] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5965] <... sendfile resumed>) = 1048576 [pid 5001] <... openat resumed>) = 3 [pid 5000] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] fstat(3, [pid 5000] <... openat resumed>) = 3 [pid 5965] exit_group(0 [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] fstat(3, [pid 5001] getdents64(3, [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] getdents64(3, [pid 5001] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] lstat("./79/binderfs", [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] lstat("./80/binderfs", [pid 5965] <... exit_group resumed>) = ? [pid 5001] unlink("./79/binderfs" [pid 5000] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] <... unlink resumed>) = 0 [pid 5000] unlink("./80/binderfs" [pid 5965] +++ exited with 0 +++ [pid 5001] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... unlink resumed>) = 0 [ 229.196126][ T5975] NILFS (loop1): recovery complete [pid 5000] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5965, si_uid=0, si_status=0, si_utime=0, si_stime=35 /* 0.35 s */} --- [pid 5975] <... mount resumed>) = 0 [pid 5975] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4999] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5975] <... openat resumed>) = 3 [pid 4999] lstat("./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./79/binderfs") = 0 [pid 4999] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5975] chdir("./file1") = 0 [pid 5975] ioctl(4, LOOP_CLR_FD) = 0 [pid 5975] close(4) = 0 [pid 5975] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5975] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5975] ftruncate(5, 33587195) = 0 [pid 5975] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5975] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 229.221946][ T5976] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5975] sendfile(6, 7, NULL, 281474978811909 [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./79/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./79/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./79/file1") = 0 [pid 5001] getdents64(3, [pid 5000] <... umount2 resumed>) = 0 [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./79") = 0 [pid 5001] mkdir("./80", 0777) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5977 [pid 5000] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5977 attached [pid 5000] lstat("./80/file1", [pid 5977] chdir("./80") = 0 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5977] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5000] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... umount2 resumed>) = 0 [pid 5977] setpgid(0, 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5977] <... setpgid resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./80/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5977] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] <... openat resumed>) = 4 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5977] <... openat resumed>) = 3 [pid 5000] fstat(4, [pid 5977] write(3, "1000", 4 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5977] <... write resumed>) = 4 [pid 5000] getdents64(4, [pid 5977] close(3 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5977] <... close resumed>) = 0 [pid 5000] getdents64(4, [pid 5977] symlink("/dev/binderfs", "./binderfs" [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] lstat("./79/file1", [pid 5977] <... symlink resumed>) = 0 [pid 5000] close(4 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5977] memfd_create("syzkaller", 0 [pid 5000] rmdir("./80/file1" [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./79/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5977] <... memfd_create resumed>) = 3 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... openat resumed>) = 4 [pid 5977] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] getdents64(3, [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5977] <... mmap resumed>) = 0x7f18ca796000 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] getdents64(4, [pid 5000] close(3 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] <... close resumed>) = 0 [pid 4999] getdents64(4, [pid 5000] rmdir("./80" [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] close(4 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5000] mkdir("./81", 0777 [pid 4999] rmdir("./79/file1") = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] close(3) = 0 [pid 4999] rmdir("./79" [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] <... rmdir resumed>) = 0 [pid 4999] mkdir("./80", 0777 [pid 5000] <... openat resumed>) = 3 [pid 4999] <... mkdir resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] <... openat resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] close(3 [pid 5000] close(3 [pid 4999] <... close resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5978 attached [pid 5977] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5978] chdir("./80" [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5978 [pid 5978] <... chdir resumed>) = 0 [pid 5978] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5979 [pid 5978] <... prctl resumed>) = 0 [pid 5978] setpgid(0, 0) = 0 [pid 5978] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5978] write(3, "1000", 4) = 4 [pid 5978] close(3) = 0 [pid 5978] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5978] memfd_create("syzkaller", 0) = 3 [pid 5978] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5970] <... sendfile resumed>) = 1048576 [pid 5970] exit_group(0) = ? [pid 5970] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5970, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 4997] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5977] <... write resumed>) = 2097152 [pid 4997] <... openat resumed>) = 3 [pid 4997] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5977] munmap(0x7f18ca796000, 2097152 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5977] <... munmap resumed>) = 0 [pid 4997] lstat("./79/binderfs", [pid 5977] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 5979 attached [pid 5977] <... openat resumed>) = 4 [pid 4997] unlink("./79/binderfs" [pid 5979] chdir("./81" [pid 5977] ioctl(4, LOOP_SET_FD, 3 [pid 4997] <... unlink resumed>) = 0 [pid 5979] <... chdir resumed>) = 0 [pid 5977] <... ioctl resumed>) = 0 [pid 4997] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5979] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5979] setpgid(0, 0) = 0 [pid 5978] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5979] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5977] close(3) = 0 [pid 5977] mkdir("./file1", 0777) = 0 [pid 5979] <... openat resumed>) = 3 [pid 5979] write(3, "1000", 4) = 4 [pid 5979] close(3) = 0 [pid 5979] symlink("/dev/binderfs", "./binderfs" [pid 5977] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5979] <... symlink resumed>) = 0 [pid 5979] memfd_create("syzkaller", 0) = 3 [pid 5979] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 229.626277][ T5977] loop4: detected capacity change from 0 to 4096 [pid 5978] <... write resumed>) = 2097152 [pid 5979] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5978] munmap(0x7f18ca796000, 2097152) = 0 [pid 5978] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5978] ioctl(4, LOOP_SET_FD, 3 [pid 5972] <... sendfile resumed>) = 1048576 [pid 5978] <... ioctl resumed>) = 0 [pid 5972] exit_group(0) = ? [pid 5978] close(3) = 0 [pid 5978] mkdir("./file1", 0777 [pid 5972] +++ exited with 0 +++ [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5972, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=21 /* 0.21 s */} --- [pid 5002] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5002] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5002] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5002] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5979] <... write resumed>) = 2097152 [pid 5978] <... mkdir resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] <... umount2 resumed>) = 0 [pid 5978] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5002] lstat("./80/binderfs", [pid 5979] munmap(0x7f18ca796000, 2097152 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./80/binderfs") = 0 [ 229.713462][ T5977] NILFS (loop4): invalid segment: Checksum error in segment payload [ 229.742636][ T5978] loop2: detected capacity change from 0 to 4096 [ 229.747505][ T5977] NILFS (loop4): trying rollback from an earlier position [pid 5002] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./79/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./79/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] close(4) = 0 [pid 4997] rmdir("./79/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./79") = 0 [pid 5979] <... munmap resumed>) = 0 [pid 4997] mkdir("./80", 0777 [pid 5979] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 4997] <... mkdir resumed>) = 0 [pid 5979] ioctl(4, LOOP_SET_FD, 3 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5980 ./strace-static-x86_64: Process 5980 attached [pid 5980] chdir("./80") = 0 [pid 5979] <... ioctl resumed>) = 0 [pid 5980] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 229.807453][ T5978] NILFS (loop2): invalid segment: Checksum error in segment payload [ 229.825427][ T5979] loop3: detected capacity change from 0 to 4096 [ 229.839920][ T5978] NILFS (loop2): trying rollback from an earlier position [pid 5979] close(3 [pid 5980] setpgid(0, 0 [pid 5979] <... close resumed>) = 0 [pid 5980] <... setpgid resumed>) = 0 [pid 5980] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5979] mkdir("./file1", 0777 [pid 5980] <... openat resumed>) = 3 [pid 5980] write(3, "1000", 4) = 4 [pid 5979] <... mkdir resumed>) = 0 [pid 5980] close(3 [pid 5979] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5980] <... close resumed>) = 0 [pid 5980] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5980] memfd_create("syzkaller", 0) = 3 [ 229.866720][ T5977] NILFS (loop4): recovery complete [pid 5980] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5977] <... mount resumed>) = 0 [pid 5977] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5977] chdir("./file1") = 0 [pid 5977] ioctl(4, LOOP_CLR_FD) = 0 [pid 5977] close(4) = 0 [pid 5977] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5977] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5977] ftruncate(5, 33587195) = 0 [pid 5977] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5977] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 229.891286][ T5979] NILFS (loop3): invalid segment: Checksum error in segment payload [ 229.906410][ T5981] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 229.926804][ T5978] NILFS (loop2): recovery complete [pid 5977] sendfile(6, 7, NULL, 281474978811909 [pid 5002] <... umount2 resumed>) = 0 [pid 5978] <... mount resumed>) = 0 [pid 5002] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5978] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5978] <... openat resumed>) = 3 [pid 5002] lstat("./80/file1", [pid 5980] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5978] chdir("./file1" [ 229.941066][ T5979] NILFS (loop3): trying rollback from an earlier position [ 229.963620][ T5982] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5978] <... chdir resumed>) = 0 [pid 5002] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5979] <... mount resumed>) = 0 [pid 5978] ioctl(4, LOOP_CLR_FD [pid 5979] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5979] chdir("./file1") = 0 [pid 5979] ioctl(4, LOOP_CLR_FD) = 0 [pid 5979] close(4) = 0 [pid 5978] <... ioctl resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5980] <... write resumed>) = 2097152 [pid 5979] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5978] close(4 [pid 5002] openat(AT_FDCWD, "./80/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5980] munmap(0x7f18ca796000, 2097152 [pid 5978] <... close resumed>) = 0 [pid 5002] <... openat resumed>) = 4 [pid 5980] <... munmap resumed>) = 0 [pid 5979] <... open resumed>) = 4 [pid 5978] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5002] fstat(4, [pid 5980] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5979] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5978] <... open resumed>) = 4 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5980] <... openat resumed>) = 4 [pid 5979] <... open resumed>) = 5 [pid 5978] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] getdents64(4, [ 229.993249][ T5979] NILFS (loop3): recovery complete [ 230.009244][ T5983] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5980] ioctl(4, LOOP_SET_FD, 3 [pid 5979] ftruncate(5, 33587195 [pid 5978] <... open resumed>) = 5 [pid 5002] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5979] <... ftruncate resumed>) = 0 [pid 5978] ftruncate(5, 33587195 [pid 5979] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5978] <... ftruncate resumed>) = 0 [pid 5979] <... open resumed>) = 6 [pid 5978] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5979] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5978] <... open resumed>) = 6 [pid 5979] <... open resumed>) = 7 [pid 5978] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5979] sendfile(6, 7, NULL, 281474978811909 [pid 5978] <... open resumed>) = 7 [pid 5980] <... ioctl resumed>) = 0 [pid 5978] sendfile(6, 7, NULL, 281474978811909 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./80/file1") = 0 [pid 5980] close(3 [pid 5002] getdents64(3, [pid 5980] <... close resumed>) = 0 [ 230.083836][ T5980] loop0: detected capacity change from 0 to 4096 [pid 5980] mkdir("./file1", 0777 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5980] <... mkdir resumed>) = 0 [pid 5980] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5002] close(3) = 0 [pid 5002] rmdir("./80") = 0 [pid 5002] mkdir("./81", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5984 [ 230.152593][ T5980] NILFS (loop0): invalid segment: Checksum error in segment payload [ 230.168561][ T5980] NILFS (loop0): trying rollback from an earlier position ./strace-static-x86_64: Process 5984 attached [pid 5975] <... sendfile resumed>) = 1048576 [pid 5984] chdir("./81") = 0 [pid 5975] exit_group(0 [pid 5984] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5975] <... exit_group resumed>) = ? [pid 5984] <... prctl resumed>) = 0 [pid 5984] setpgid(0, 0 [pid 5975] +++ exited with 0 +++ [pid 5984] <... setpgid resumed>) = 0 [pid 5984] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5984] write(3, "1000", 4) = 4 [pid 5984] close(3) = 0 [pid 5984] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5984] memfd_create("syzkaller", 0) = 3 [pid 5984] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5975, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 4998] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5984] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 230.267682][ T5980] NILFS (loop0): recovery complete [pid 4998] getdents64(3, [pid 5980] <... mount resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5980] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4998] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5980] <... openat resumed>) = 3 [pid 5980] chdir("./file1" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5980] <... chdir resumed>) = 0 [pid 4998] lstat("./79/binderfs", [pid 5980] ioctl(4, LOOP_CLR_FD) = 0 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5980] close(4 [pid 4998] unlink("./79/binderfs" [pid 5980] <... close resumed>) = 0 [pid 5980] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] <... unlink resumed>) = 0 [pid 4998] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5980] <... open resumed>) = 4 [pid 5980] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5980] ftruncate(5, 33587195) = 0 [pid 5980] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5980] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 230.296710][ T5987] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5980] sendfile(6, 7, NULL, 281474978811909 [pid 5984] <... write resumed>) = 2097152 [pid 5984] munmap(0x7f18ca796000, 2097152) = 0 [pid 5984] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5984] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5984] close(3) = 0 [pid 5984] mkdir("./file1", 0777) = 0 [ 230.434212][ T5984] loop5: detected capacity change from 0 to 4096 [pid 5984] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 230.515554][ T5984] NILFS (loop5): invalid segment: Checksum error in segment payload [ 230.542019][ T5984] NILFS (loop5): trying rollback from an earlier position [pid 4998] lstat("./79/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./79/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./79/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./79/file1") = 0 [ 230.572046][ T5984] NILFS (loop5): recovery complete [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3 [pid 5984] <... mount resumed>) = 0 [pid 4998] <... close resumed>) = 0 [pid 5984] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 4998] rmdir("./79" [pid 5984] chdir("./file1" [pid 4998] <... rmdir resumed>) = 0 [pid 5984] <... chdir resumed>) = 0 [pid 4998] mkdir("./80", 0777 [pid 5984] ioctl(4, LOOP_CLR_FD [pid 4998] <... mkdir resumed>) = 0 [pid 5984] <... ioctl resumed>) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5984] close(4 [pid 4998] <... openat resumed>) = 3 [pid 5984] <... close resumed>) = 0 [pid 4998] ioctl(3, LOOP_CLR_FD [pid 5984] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 4998] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5984] <... open resumed>) = 4 [pid 4998] <... clone resumed>, child_tidptr=0x555556f7b690) = 5989 [pid 5984] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5984] ftruncate(5, 33587195./strace-static-x86_64: Process 5989 attached [pid 5989] chdir("./80" [pid 5984] <... ftruncate resumed>) = 0 [pid 5984] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5989] <... chdir resumed>) = 0 [pid 5984] <... open resumed>) = 6 [pid 5989] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5984] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5989] <... prctl resumed>) = 0 [pid 5984] <... open resumed>) = 7 [pid 5989] setpgid(0, 0) = 0 [pid 5989] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5984] sendfile(6, 7, NULL, 281474978811909 [pid 5989] <... openat resumed>) = 3 [pid 5989] write(3, "1000", 4) = 4 [pid 5989] close(3) = 0 [pid 5989] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5989] memfd_create("syzkaller", 0) = 3 [pid 5989] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 230.606357][ T5988] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5989] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5989] munmap(0x7f18ca796000, 2097152) = 0 [pid 5989] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5989] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5989] close(3) = 0 [pid 5989] mkdir("./file1", 0777) = 0 [ 230.860960][ T5989] loop1: detected capacity change from 0 to 4096 [ 230.920919][ T5989] NILFS (loop1): invalid segment: Checksum error in segment payload [ 230.964694][ T5989] NILFS (loop1): trying rollback from an earlier position [ 231.037024][ T5989] NILFS (loop1): recovery complete [pid 5989] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 5989] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5989] chdir("./file1") = 0 [pid 5989] ioctl(4, LOOP_CLR_FD) = 0 [pid 5989] close(4) = 0 [pid 5977] <... sendfile resumed>) = 1048576 [pid 5989] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5977] exit_group(0) = ? [pid 5989] <... open resumed>) = 4 [pid 5989] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5977] +++ exited with 0 +++ [pid 5989] ftruncate(5, 33587195 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5977, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5989] <... ftruncate resumed>) = 0 [pid 5989] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5001] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [ 231.064164][ T5990] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5989] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5001] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5989] <... open resumed>) = 7 [pid 5001] lstat("./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5989] sendfile(6, 7, NULL, 281474978811909 [pid 5001] unlink("./80/binderfs") = 0 [pid 5001] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5978] <... sendfile resumed>) = 1048576 [pid 5978] exit_group(0) = ? [pid 5978] +++ exited with 0 +++ [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5978, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} --- [pid 4999] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4999] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4999] unlink("./80/binderfs") = 0 [pid 4999] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5979] <... sendfile resumed>) = 1048576 [pid 5979] exit_group(0) = ? [pid 5979] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5979, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./81/binderfs") = 0 [pid 5000] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... umount2 resumed>) = 0 [pid 5001] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./80/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./80/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./80/file1") = 0 [pid 4999] <... umount2 resumed>) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5001] close(3) = 0 [pid 5001] rmdir("./80") = 0 [pid 5001] mkdir("./81", 0777) = 0 [pid 4999] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] ioctl(3, LOOP_CLR_FD [pid 4999] lstat("./80/file1", [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5001] close(3 [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] <... close resumed>) = 0 [pid 4999] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] <... clone resumed>, child_tidptr=0x555556f7b690) = 5991 [pid 4999] openat(AT_FDCWD, "./80/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5991 attached [pid 4999] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4999] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5991] chdir("./81" [pid 5980] <... sendfile resumed>) = 1048576 [pid 4999] close(4 [pid 5991] <... chdir resumed>) = 0 [pid 5980] exit_group(0 [pid 4999] <... close resumed>) = 0 [pid 5991] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5980] <... exit_group resumed>) = ? [pid 5991] <... prctl resumed>) = 0 [pid 4999] rmdir("./80/file1" [pid 5980] +++ exited with 0 +++ [pid 4999] <... rmdir resumed>) = 0 [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5980, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5991] setpgid(0, 0 [pid 4999] getdents64(3, [pid 4997] restart_syscall(<... resuming interrupted clone ...> [pid 5991] <... setpgid resumed>) = 0 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] <... restart_syscall resumed>) = 0 [pid 5991] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4999] close(3 [pid 5991] <... openat resumed>) = 3 [pid 4999] <... close resumed>) = 0 [pid 5991] write(3, "1000", 4 [pid 4997] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5991] <... write resumed>) = 4 [pid 4999] rmdir("./80" [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5991] close(3 [pid 5000] <... umount2 resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4997] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5991] <... close resumed>) = 0 [pid 4999] mkdir("./81", 0777 [pid 4997] <... openat resumed>) = 3 [pid 5991] symlink("/dev/binderfs", "./binderfs" [pid 4997] fstat(3, [pid 4999] <... mkdir resumed>) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5991] <... symlink resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4997] getdents64(3, [pid 5991] memfd_create("syzkaller", 0 [pid 4999] <... openat resumed>) = 3 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5991] <... memfd_create resumed>) = 3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4997] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5991] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5991] <... mmap resumed>) = 0x7f18ca796000 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] close(3 [pid 4997] lstat("./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4997] unlink("./80/binderfs") = 0 [pid 5991] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5000] lstat("./81/file1", [pid 4999] <... close resumed>) = 0 [pid 4997] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5000] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5992 attached [pid 5000] openat(AT_FDCWD, "./81/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 5992 [pid 5992] chdir("./81") = 0 [pid 5000] <... openat resumed>) = 4 [pid 5992] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] fstat(4, [pid 5992] <... prctl resumed>) = 0 [pid 5992] setpgid(0, 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5992] <... setpgid resumed>) = 0 [pid 5992] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5000] getdents64(4, [pid 5992] <... openat resumed>) = 3 [pid 5992] write(3, "1000", 4 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5992] <... write resumed>) = 4 [pid 5992] close(3 [pid 5000] getdents64(4, [pid 5992] <... close resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5992] symlink("/dev/binderfs", "./binderfs" [pid 5000] close(4 [pid 5992] <... symlink resumed>) = 0 [pid 5000] <... close resumed>) = 0 [pid 5992] memfd_create("syzkaller", 0 [pid 5000] rmdir("./81/file1" [pid 5992] <... memfd_create resumed>) = 3 [pid 5992] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5000] <... rmdir resumed>) = 0 [pid 5992] <... mmap resumed>) = 0x7f18ca796000 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3) = 0 [pid 5000] rmdir("./81") = 0 [pid 5000] mkdir("./82", 0777) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3 [pid 5992] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5991] <... write resumed>) = 2097152 [pid 5000] <... close resumed>) = 0 [pid 5991] munmap(0x7f18ca796000, 2097152 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5991] <... munmap resumed>) = 0 [pid 5991] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5991] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 5993 ./strace-static-x86_64: Process 5993 attached [pid 5993] chdir("./82" [pid 5991] <... ioctl resumed>) = 0 [pid 5993] <... chdir resumed>) = 0 [pid 5993] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5991] close(3 [pid 5993] <... prctl resumed>) = 0 [pid 5992] <... write resumed>) = 2097152 [pid 5991] <... close resumed>) = 0 [pid 4997] <... umount2 resumed>) = 0 [pid 5993] setpgid(0, 0 [pid 5991] mkdir("./file1", 0777 [pid 5993] <... setpgid resumed>) = 0 [pid 5993] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5991] <... mkdir resumed>) = 0 [pid 5993] <... openat resumed>) = 3 [pid 5993] write(3, "1000", 4 [pid 5992] munmap(0x7f18ca796000, 2097152 [pid 5991] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [ 231.630113][ T5991] loop4: detected capacity change from 0 to 4096 [pid 5993] <... write resumed>) = 4 [pid 5993] close(3) = 0 [pid 5993] symlink("/dev/binderfs", "./binderfs" [pid 5992] <... munmap resumed>) = 0 [pid 5993] <... symlink resumed>) = 0 [pid 5992] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5993] memfd_create("syzkaller", 0 [pid 5992] <... openat resumed>) = 4 [pid 5993] <... memfd_create resumed>) = 3 [pid 5992] ioctl(4, LOOP_SET_FD, 3 [pid 5993] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 4997] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./80/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./80/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, [pid 5992] <... ioctl resumed>) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, [pid 5992] close(3 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5992] <... close resumed>) = 0 [pid 4997] close(4) = 0 [ 231.694744][ T5991] NILFS (loop4): invalid segment: Checksum error in segment payload [ 231.708964][ T5992] loop2: detected capacity change from 0 to 4096 [pid 5992] mkdir("./file1", 0777 [pid 4997] rmdir("./80/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] close(3) = 0 [pid 4997] rmdir("./80") = 0 [pid 4997] mkdir("./81", 0777 [pid 5992] <... mkdir resumed>) = 0 [pid 4997] <... mkdir resumed>) = 0 [pid 5993] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [ 231.743971][ T5991] NILFS (loop4): trying rollback from an earlier position [ 231.773134][ T5991] NILFS (loop4): recovery complete [pid 5992] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5991] <... mount resumed>) = 0 [pid 5991] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5991] chdir("./file1") = 0 [pid 5991] ioctl(4, LOOP_CLR_FD) = 0 [pid 5991] close(4) = 0 [pid 5991] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5991] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5991] ftruncate(5, 33587195) = 0 [pid 5991] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5991] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5991] sendfile(6, 7, NULL, 281474978811909 [pid 5984] <... sendfile resumed>) = 1048576 [pid 4997] <... openat resumed>) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5984] exit_group(0) = ? [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 5995 [pid 5984] +++ exited with 0 +++ ./strace-static-x86_64: Process 5995 attached [pid 5995] chdir("./81" [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5984, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 5995] <... chdir resumed>) = 0 [pid 5002] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5995] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 231.794259][ T5994] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 231.798226][ T5992] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5995] <... prctl resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5995] setpgid(0, 0 [pid 5002] <... openat resumed>) = 3 [pid 5995] <... setpgid resumed>) = 0 [pid 5002] fstat(3, [pid 5995] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5995] <... openat resumed>) = 3 [pid 5002] getdents64(3, [pid 5995] write(3, "1000", 4 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5995] <... write resumed>) = 4 [pid 5002] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5995] close(3) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5995] symlink("/dev/binderfs", "./binderfs" [pid 5002] lstat("./81/binderfs", [pid 5995] <... symlink resumed>) = 0 [pid 5993] <... write resumed>) = 2097152 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5995] memfd_create("syzkaller", 0 [pid 5993] munmap(0x7f18ca796000, 2097152 [pid 5002] unlink("./81/binderfs" [pid 5995] <... memfd_create resumed>) = 3 [pid 5995] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] <... unlink resumed>) = 0 [pid 5995] <... mmap resumed>) = 0x7f18ca796000 [pid 5993] <... munmap resumed>) = 0 [pid 5002] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5993] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 231.862304][ T5992] NILFS (loop2): trying rollback from an earlier position [pid 5993] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5993] close(3) = 0 [pid 5993] mkdir("./file1", 0777) = 0 [ 231.905180][ T5993] loop3: detected capacity change from 0 to 4096 [ 231.942250][ T5992] NILFS (loop2): recovery complete [pid 5993] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [ 231.948543][ T5993] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5995] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5992] <... mount resumed>) = 0 [pid 5992] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5992] chdir("./file1") = 0 [pid 5992] ioctl(4, LOOP_CLR_FD) = 0 [pid 5992] close(4) = 0 [pid 5992] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5992] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5992] ftruncate(5, 33587195) = 0 [pid 5992] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5992] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5992] sendfile(6, 7, NULL, 281474978811909 [pid 5989] <... sendfile resumed>) = 1048576 [pid 5989] exit_group(0) = ? [pid 5989] +++ exited with 0 +++ [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5989, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 4998] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5995] <... write resumed>) = 2097152 [pid 4998] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 231.988301][ T5993] NILFS (loop3): trying rollback from an earlier position [ 231.995739][ T5996] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 4998] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./80/binderfs") = 0 [pid 5995] munmap(0x7f18ca796000, 2097152 [pid 4998] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5995] <... munmap resumed>) = 0 [pid 5995] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5995] ioctl(4, LOOP_SET_FD, 3 [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./81/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./81/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [ 232.060978][ T5995] loop0: detected capacity change from 0 to 4096 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./81/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./81") = 0 [pid 5002] mkdir("./82", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5995] <... ioctl resumed>) = 0 [pid 5002] <... clone resumed>, child_tidptr=0x555556f7b690) = 5997 [pid 5995] close(3) = 0 [pid 5995] mkdir("./file1", 0777) = 0 [pid 5995] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, ""./strace-static-x86_64: Process 5997 attached [pid 5997] chdir("./82") = 0 [pid 5997] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5997] setpgid(0, 0) = 0 [pid 5997] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 232.103160][ T5993] NILFS (loop3): recovery complete [pid 5997] write(3, "1000", 4) = 4 [pid 5997] close(3) = 0 [pid 5997] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5997] memfd_create("syzkaller", 0) = 3 [pid 5997] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5993] <... mount resumed>) = 0 [pid 5997] <... mmap resumed>) = 0x7f18ca796000 [pid 5993] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5993] chdir("./file1") = 0 [pid 5993] ioctl(4, LOOP_CLR_FD) = 0 [pid 5993] close(4) = 0 [pid 5993] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5993] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5993] ftruncate(5, 33587195) = 0 [pid 5993] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5997] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5993] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 232.144335][ T5998] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 232.158665][ T5995] NILFS (loop0): invalid segment: Checksum error in segment payload [ 232.203997][ T5995] NILFS (loop0): trying rollback from an earlier position [pid 5993] sendfile(6, 7, NULL, 281474978811909 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./80/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./80/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./80/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, [pid 5997] <... write resumed>) = 2097152 [pid 4998] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./80/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./80") = 0 [pid 4998] mkdir("./81", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 5999 [ 232.288618][ T5995] NILFS (loop0): recovery complete ./strace-static-x86_64: Process 5999 attached [pid 5997] munmap(0x7f18ca796000, 2097152 [pid 5999] chdir("./81") = 0 [pid 5999] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5997] <... munmap resumed>) = 0 [pid 5999] <... prctl resumed>) = 0 [pid 5997] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5999] setpgid(0, 0) = 0 [pid 5997] <... openat resumed>) = 4 [pid 5999] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5997] ioctl(4, LOOP_SET_FD, 3 [pid 5999] <... openat resumed>) = 3 [pid 5995] <... mount resumed>) = 0 [pid 5999] write(3, "1000", 4 [pid 5995] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5999] <... write resumed>) = 4 [pid 5995] <... openat resumed>) = 3 [pid 5999] close(3 [pid 5995] chdir("./file1" [pid 5999] <... close resumed>) = 0 [pid 5995] <... chdir resumed>) = 0 [pid 5999] symlink("/dev/binderfs", "./binderfs" [pid 5995] ioctl(4, LOOP_CLR_FD [pid 5999] <... symlink resumed>) = 0 [pid 5995] <... ioctl resumed>) = 0 [pid 5999] memfd_create("syzkaller", 0 [pid 5995] close(4 [pid 5999] <... memfd_create resumed>) = 3 [pid 5995] <... close resumed>) = 0 [pid 5999] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5995] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5999] <... mmap resumed>) = 0x7f18ca796000 [pid 5995] <... open resumed>) = 4 [pid 5995] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5995] ftruncate(5, 33587195) = 0 [pid 5995] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5997] <... ioctl resumed>) = 0 [pid 5995] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5997] close(3 [pid 5995] <... open resumed>) = 7 [pid 5997] <... close resumed>) = 0 [ 232.340815][ T5997] loop5: detected capacity change from 0 to 4096 [ 232.342937][ T6000] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5995] sendfile(6, 7, NULL, 281474978811909 [pid 5997] mkdir("./file1", 0777) = 0 [pid 5997] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [ 232.411560][ T5997] NILFS (loop5): invalid segment: Checksum error in segment payload [ 232.462980][ T5997] NILFS (loop5): trying rollback from an earlier position [ 232.529824][ T5997] NILFS (loop5): recovery complete [pid 5999] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 5997] <... mount resumed>) = 0 [pid 5999] munmap(0x7f18ca796000, 2097152 [pid 5997] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5997] chdir("./file1" [pid 5999] <... munmap resumed>) = 0 [pid 5997] <... chdir resumed>) = 0 [pid 5997] ioctl(4, LOOP_CLR_FD [pid 5999] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5997] <... ioctl resumed>) = 0 [pid 5997] close(4 [pid 5999] <... openat resumed>) = 4 [pid 5997] <... close resumed>) = 0 [pid 5997] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5999] ioctl(4, LOOP_SET_FD, 3 [pid 5997] <... open resumed>) = 4 [ 232.561942][ T6002] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5997] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5997] ftruncate(5, 33587195) = 0 [pid 5997] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5997] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5997] sendfile(6, 7, NULL, 281474978811909 [pid 5999] <... ioctl resumed>) = 0 [pid 5999] close(3) = 0 [ 232.609345][ T5999] loop1: detected capacity change from 0 to 4096 [pid 5999] mkdir("./file1", 0777) = 0 [ 232.678600][ T5999] NILFS (loop1): invalid segment: Checksum error in segment payload [ 232.699427][ T5999] NILFS (loop1): trying rollback from an earlier position [ 232.803397][ T5999] NILFS (loop1): recovery complete [pid 5999] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 5999] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5999] chdir("./file1") = 0 [pid 5999] ioctl(4, LOOP_CLR_FD) = 0 [ 232.836483][ T6003] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5999] close(4) = 0 [pid 5999] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5999] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 5999] ftruncate(5, 33587195) = 0 [pid 5999] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 5999] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [pid 5999] sendfile(6, 7, NULL, 281474978811909 [pid 5991] <... sendfile resumed>) = 1048576 [pid 5991] exit_group(0) = ? [pid 5991] +++ exited with 0 +++ [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5991, si_uid=0, si_status=0, si_utime=0, si_stime=19 /* 0.19 s */} --- [pid 5001] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./81/binderfs") = 0 [pid 5001] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5001] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5992] <... sendfile resumed>) = 1048576 [pid 5001] lstat("./81/file1", [pid 5992] exit_group(0 [pid 5001] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5992] <... exit_group resumed>) = ? [pid 5001] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5992] +++ exited with 0 +++ [pid 5001] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./81/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5992, si_uid=0, si_status=0, si_utime=0, si_stime=33 /* 0.33 s */} --- [pid 5001] fstat(4, [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 5001] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... restart_syscall resumed>) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, [pid 4999] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] close(4 [pid 4999] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5001] <... close resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5001] rmdir("./81/file1" [pid 4999] fstat(3, [pid 5001] <... rmdir resumed>) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, [pid 4999] getdents64(3, [pid 5001] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] close(3 [pid 4999] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... close resumed>) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5001] rmdir("./81" [pid 4999] lstat("./81/binderfs", [pid 5001] <... rmdir resumed>) = 0 [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] mkdir("./82", 0777 [pid 4999] unlink("./81/binderfs" [pid 5001] <... mkdir resumed>) = 0 [pid 4999] <... unlink resumed>) = 0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4999] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] <... openat resumed>) = 3 [pid 5001] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5001] close(3) = 0 [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 6005 ./strace-static-x86_64: Process 6005 attached [pid 6005] chdir("./82") = 0 [pid 6005] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6005] setpgid(0, 0) = 0 [pid 6005] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6005] write(3, "1000", 4) = 4 [pid 6005] close(3) = 0 [pid 6005] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6005] memfd_create("syzkaller", 0) = 3 [pid 6005] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 5993] <... sendfile resumed>) = 1048576 [pid 5993] exit_group(0) = ? [pid 6005] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5993] +++ exited with 0 +++ [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5993, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 5000] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5000] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5000] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5000] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./82/binderfs") = 0 [pid 5000] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6005] <... write resumed>) = 2097152 [pid 6005] munmap(0x7f18ca796000, 2097152) = 0 [pid 6005] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6005] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] lstat("./81/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5995] <... sendfile resumed>) = 1048576 [pid 5995] exit_group(0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5995] <... exit_group resumed>) = ? [pid 5995] +++ exited with 0 +++ [pid 4999] openat(AT_FDCWD, "./81/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5995, si_uid=0, si_status=0, si_utime=0, si_stime=26 /* 0.26 s */} --- [pid 4999] <... openat resumed>) = 4 [pid 6005] <... ioctl resumed>) = 0 [pid 4999] fstat(4, [pid 6005] close(3) = 0 [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 4997] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] getdents64(4, [pid 4997] <... openat resumed>) = 3 [pid 4997] fstat(3, [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(3, [pid 4999] close(4 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... close resumed>) = 0 [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 233.478911][ T6005] loop4: detected capacity change from 0 to 4096 [pid 6005] mkdir("./file1", 0777 [pid 4999] rmdir("./81/file1" [pid 4997] lstat("./81/binderfs", [pid 6005] <... mkdir resumed>) = 0 [pid 5000] <... umount2 resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6005] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4999] getdents64(3, [pid 4997] unlink("./81/binderfs" [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] <... unlink resumed>) = 0 [pid 4999] close(3 [pid 4997] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... close resumed>) = 0 [pid 4999] rmdir("./81") = 0 [pid 5000] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] mkdir("./82", 0777 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./82/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] openat(AT_FDCWD, "./82/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... mkdir resumed>) = 0 [pid 5000] <... openat resumed>) = 4 [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5000] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... openat resumed>) = 3 [pid 5000] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4) = 0 [pid 5000] rmdir("./82/file1") = 0 [pid 5000] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3 [pid 4999] ioctl(3, LOOP_CLR_FD [pid 5000] <... close resumed>) = 0 [pid 5000] rmdir("./82") = 0 [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] mkdir("./83", 0777) = 0 [pid 4999] close(3) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5000] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5000] close(3) = 0 [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 6006 [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 6007 ./strace-static-x86_64: Process 6007 attached [pid 6007] chdir("./82"./strace-static-x86_64: Process 6006 attached ) = 0 [pid 6007] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6006] chdir("./83" [pid 6007] <... prctl resumed>) = 0 [pid 6006] <... chdir resumed>) = 0 [pid 6007] setpgid(0, 0 [ 233.554083][ T6005] NILFS (loop4): invalid segment: Checksum error in segment payload [ 233.581716][ T6005] NILFS (loop4): trying rollback from an earlier position [pid 6006] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6007] <... setpgid resumed>) = 0 [pid 6006] <... prctl resumed>) = 0 [pid 6007] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6006] setpgid(0, 0 [pid 6007] <... openat resumed>) = 3 [pid 6006] <... setpgid resumed>) = 0 [pid 6007] write(3, "1000", 4 [pid 6006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6007] <... write resumed>) = 4 [pid 6006] <... openat resumed>) = 3 [pid 6007] close(3 [pid 6006] write(3, "1000", 4 [pid 6007] <... close resumed>) = 0 [pid 6006] <... write resumed>) = 4 [pid 6007] symlink("/dev/binderfs", "./binderfs" [pid 6006] close(3 [pid 6007] <... symlink resumed>) = 0 [pid 6006] <... close resumed>) = 0 [pid 6006] symlink("/dev/binderfs", "./binderfs" [pid 6007] memfd_create("syzkaller", 0 [pid 6006] <... symlink resumed>) = 0 [pid 6006] memfd_create("syzkaller", 0) = 3 [pid 6007] <... memfd_create resumed>) = 3 [pid 6006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6007] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6006] <... mmap resumed>) = 0x7f18ca796000 [pid 6007] <... mmap resumed>) = 0x7f18ca796000 [ 233.648663][ T6005] NILFS (loop4): recovery complete [pid 6005] <... mount resumed>) = 0 [pid 6005] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5997] <... sendfile resumed>) = 1048576 [pid 6005] <... openat resumed>) = 3 [pid 5997] exit_group(0 [pid 6005] chdir("./file1" [pid 5997] <... exit_group resumed>) = ? [pid 6005] <... chdir resumed>) = 0 [pid 5997] +++ exited with 0 +++ [pid 6005] ioctl(4, LOOP_CLR_FD [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5997, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} --- [pid 6005] <... ioctl resumed>) = 0 [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 6005] close(4 [pid 5002] <... restart_syscall resumed>) = 0 [pid 6005] <... close resumed>) = 0 [pid 6005] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 5002] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6005] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6005] <... open resumed>) = 5 [pid 5002] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6005] ftruncate(5, 33587195 [pid 5002] <... openat resumed>) = 3 [pid 6005] <... ftruncate resumed>) = 0 [pid 5002] fstat(3, [pid 6005] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6005] <... open resumed>) = 6 [pid 5002] getdents64(3, [pid 6005] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 6006] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6005] <... open resumed>) = 7 [pid 5002] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [ 233.678414][ T6008] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6005] sendfile(6, 7, NULL, 281474978811909 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6007] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5002] lstat("./82/binderfs", [pid 4997] <... umount2 resumed>) = 0 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5002] unlink("./82/binderfs") = 0 [pid 5002] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] lstat("./81/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4997] openat(AT_FDCWD, "./81/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4997] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 6007] <... write resumed>) = 2097152 [pid 4997] close(4 [pid 6007] munmap(0x7f18ca796000, 2097152 [pid 4997] <... close resumed>) = 0 [pid 6007] <... munmap resumed>) = 0 [pid 4997] rmdir("./81/file1") = 0 [pid 4997] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 6007] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4997] close(3 [pid 6007] <... openat resumed>) = 4 [pid 4997] <... close resumed>) = 0 [pid 6007] ioctl(4, LOOP_SET_FD, 3 [pid 4997] rmdir("./81") = 0 [pid 4997] mkdir("./82", 0777) = 0 [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 4997] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4997] close(3) = 0 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6007] <... ioctl resumed>) = 0 [pid 6006] <... write resumed>) = 2097152 [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 6009 ./strace-static-x86_64: Process 6009 attached [pid 6009] chdir("./82") = 0 [pid 6009] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6009] setpgid(0, 0) = 0 [pid 6009] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6009] write(3, "1000", 4) = 4 [pid 6009] close(3) = 0 [ 233.791771][ T6007] loop2: detected capacity change from 0 to 4096 [pid 6009] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6007] close(3 [pid 6006] munmap(0x7f18ca796000, 2097152 [pid 6009] memfd_create("syzkaller", 0) = 3 [pid 6009] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6007] <... close resumed>) = 0 [pid 6006] <... munmap resumed>) = 0 [pid 6009] <... mmap resumed>) = 0x7f18ca796000 [pid 6007] mkdir("./file1", 0777 [pid 6006] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6007] <... mkdir resumed>) = 0 [pid 6006] <... openat resumed>) = 4 [pid 6007] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 6006] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6009] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6006] close(3) = 0 [pid 5002] <... umount2 resumed>) = 0 [pid 6006] mkdir("./file1", 0777 [pid 5002] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6006] <... mkdir resumed>) = 0 [pid 6006] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./82/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] openat(AT_FDCWD, "./82/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5002] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 233.885302][ T6006] loop3: detected capacity change from 0 to 4096 [ 233.906839][ T6007] NILFS (loop2): invalid segment: Checksum error in segment payload [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./82/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./82") = 0 [pid 5002] mkdir("./83", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [ 233.939831][ T6007] NILFS (loop2): trying rollback from an earlier position [ 233.960354][ T6006] NILFS (loop3): invalid segment: Checksum error in segment payload [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 6010 ./strace-static-x86_64: Process 6010 attached [pid 6010] chdir("./83") = 0 [pid 6010] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6010] setpgid(0, 0) = 0 [pid 6010] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6010] write(3, "1000", 4) = 4 [pid 6010] close(3 [pid 6009] <... write resumed>) = 2097152 [pid 6009] munmap(0x7f18ca796000, 2097152 [pid 6010] <... close resumed>) = 0 [pid 6009] <... munmap resumed>) = 0 [pid 6010] symlink("/dev/binderfs", "./binderfs" [ 233.983704][ T6006] NILFS (loop3): trying rollback from an earlier position [pid 6009] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6010] <... symlink resumed>) = 0 [pid 6009] <... openat resumed>) = 4 [pid 5999] <... sendfile resumed>) = 1048576 [pid 6010] memfd_create("syzkaller", 0 [pid 6009] ioctl(4, LOOP_SET_FD, 3 [pid 5999] exit_group(0 [pid 6009] <... ioctl resumed>) = 0 [pid 5999] <... exit_group resumed>) = ? [pid 6009] close(3 [pid 5999] +++ exited with 0 +++ [pid 6009] <... close resumed>) = 0 [pid 6009] mkdir("./file1", 0777 [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5999, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 6010] <... memfd_create resumed>) = 3 [pid 6009] <... mkdir resumed>) = 0 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 6010] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6009] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 6010] <... mmap resumed>) = 0x7f18ca796000 [pid 4998] <... restart_syscall resumed>) = 0 [pid 6007] <... mount resumed>) = 0 [pid 4998] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 234.040022][ T6007] NILFS (loop2): recovery complete [ 234.045200][ T6009] loop0: detected capacity change from 0 to 4096 [ 234.055616][ T6006] NILFS (loop3): recovery complete [ 234.070494][ T6009] NILFS (loop0): invalid segment: Checksum error in segment payload [pid 6007] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 4998] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6010] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4998] <... openat resumed>) = 3 [pid 4998] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4998] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6007] chdir("./file1" [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6007] <... chdir resumed>) = 0 [pid 4998] lstat("./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./81/binderfs") = 0 [pid 6007] ioctl(4, LOOP_CLR_FD [pid 4998] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6007] <... ioctl resumed>) = 0 [pid 6007] close(4) = 0 [pid 6006] <... mount resumed>) = 0 [pid 6007] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6006] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6006] chdir("./file1") = 0 [pid 6006] ioctl(4, LOOP_CLR_FD [pid 6007] <... open resumed>) = 4 [pid 6006] <... ioctl resumed>) = 0 [pid 6006] close(4 [pid 6007] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6006] <... close resumed>) = 0 [pid 6007] <... open resumed>) = 5 [pid 6006] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6007] ftruncate(5, 33587195 [pid 6006] <... open resumed>) = 4 [pid 6007] <... ftruncate resumed>) = 0 [pid 6006] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6007] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6006] <... open resumed>) = 5 [pid 6007] <... open resumed>) = 6 [pid 6006] ftruncate(5, 33587195 [pid 6007] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 6006] <... ftruncate resumed>) = 0 [pid 6007] <... open resumed>) = 7 [pid 6006] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6007] sendfile(6, 7, NULL, 281474978811909 [pid 6006] <... open resumed>) = 6 [pid 6006] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 234.080208][ T6012] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.081210][ T6011] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.117637][ T6009] NILFS (loop0): trying rollback from an earlier position [pid 6006] sendfile(6, 7, NULL, 281474978811909 [pid 6010] <... write resumed>) = 2097152 [pid 6010] munmap(0x7f18ca796000, 2097152) = 0 [pid 6010] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6010] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6010] close(3) = 0 [ 234.182138][ T6010] loop5: detected capacity change from 0 to 4096 [ 234.215246][ T6009] NILFS (loop0): recovery complete [pid 6010] mkdir("./file1", 0777) = 0 [pid 6010] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 6009] <... mount resumed>) = 0 [pid 6009] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6009] chdir("./file1") = 0 [ 234.245823][ T6013] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.273470][ T6010] NILFS (loop5): invalid segment: Checksum error in segment payload [ 234.281545][ T6010] NILFS (loop5): trying rollback from an earlier position [pid 6009] ioctl(4, LOOP_CLR_FD) = 0 [pid 6009] close(4) = 0 [pid 6009] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 6009] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 6009] ftruncate(5, 33587195) = 0 [pid 6009] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 6009] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 234.302606][ T6010] NILFS (loop5): recovery complete [pid 6009] sendfile(6, 7, NULL, 281474978811909 [pid 6010] <... mount resumed>) = 0 [pid 6010] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6010] chdir("./file1") = 0 [pid 6010] ioctl(4, LOOP_CLR_FD) = 0 [pid 6010] close(4) = 0 [pid 6010] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 6010] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 6010] ftruncate(5, 33587195) = 0 [pid 6010] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 6010] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 234.360193][ T6014] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6010] sendfile(6, 7, NULL, 281474978811909 [pid 4998] <... umount2 resumed>) = 0 [pid 4998] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] lstat("./81/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] umount2("./81/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 4998] openat(AT_FDCWD, "./81/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 4998] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4998] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4998] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4998] close(4) = 0 [pid 4998] rmdir("./81/file1") = 0 [pid 4998] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4998] close(3) = 0 [pid 4998] rmdir("./81") = 0 [pid 4998] mkdir("./82", 0777) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 4998] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 4998] close(3) = 0 [pid 4998] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 6016 ./strace-static-x86_64: Process 6016 attached [pid 6016] chdir("./82") = 0 [pid 6016] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6016] setpgid(0, 0) = 0 [pid 6016] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6016] write(3, "1000", 4) = 4 [pid 6016] close(3) = 0 [pid 6016] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6016] memfd_create("syzkaller", 0) = 3 [pid 6016] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 6016] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 6016] munmap(0x7f18ca796000, 2097152) = 0 [pid 6016] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6016] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6016] close(3) = 0 [pid 6016] mkdir("./file1", 0777) = 0 [ 234.755647][ T6016] loop1: detected capacity change from 0 to 4096 [ 234.800729][ T6016] NILFS (loop1): invalid segment: Checksum error in segment payload [ 234.826079][ T6016] NILFS (loop1): trying rollback from an earlier position [pid 6016] mount("/dev/loop1", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "") = 0 [pid 6016] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6016] chdir("./file1") = 0 [pid 6016] ioctl(4, LOOP_CLR_FD) = 0 [pid 6016] close(4 [pid 6005] <... sendfile resumed>) = 1048576 [pid 6016] <... close resumed>) = 0 [ 234.873402][ T6016] NILFS (loop1): recovery complete [ 234.886169][ T6017] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6016] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 6005] exit_group(0 [pid 6016] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 6005] <... exit_group resumed>) = ? [pid 6016] ftruncate(5, 33587195 [pid 6005] +++ exited with 0 +++ [pid 6016] <... ftruncate resumed>) = 0 [pid 6016] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5001] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6005, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=35 /* 0.35 s */} --- [pid 6016] <... open resumed>) = 6 [pid 5001] restart_syscall(<... resuming interrupted clone ...> [pid 6016] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 5001] <... restart_syscall resumed>) = 0 [pid 6016] <... open resumed>) = 7 [pid 6016] sendfile(6, 7, NULL, 281474978811909 [pid 5001] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5001] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] unlink("./82/binderfs") = 0 [pid 5001] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5001] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] lstat("./82/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5001] openat(AT_FDCWD, "./82/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5001] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5001] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5001] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5001] close(4) = 0 [pid 5001] rmdir("./82/file1") = 0 [pid 6009] <... sendfile resumed>) = 1048576 [pid 6007] <... sendfile resumed>) = 1048576 [pid 5001] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 6009] exit_group(0 [pid 6007] exit_group(0 [pid 5001] close(3 [pid 6009] <... exit_group resumed>) = ? [pid 6007] <... exit_group resumed>) = ? [pid 5001] <... close resumed>) = 0 [pid 6009] +++ exited with 0 +++ [pid 4997] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6009, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5001] rmdir("./82" [pid 6007] +++ exited with 0 +++ [pid 6006] <... sendfile resumed>) = 1048576 [pid 5001] <... rmdir resumed>) = 0 [pid 5001] mkdir("./83", 0777 [pid 4999] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6007, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=30 /* 0.30 s */} --- [pid 4997] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] restart_syscall(<... resuming interrupted clone ...> [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... restart_syscall resumed>) = 0 [pid 5001] <... mkdir resumed>) = 0 [pid 4997] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6006] exit_group(0 [pid 5001] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4997] fstat(3, [pid 6006] <... exit_group resumed>) = ? [pid 4999] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6006] +++ exited with 0 +++ [pid 5001] <... openat resumed>) = 3 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] getdents64(3, [pid 5000] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6006, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} --- [pid 4999] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 5001] ioctl(3, LOOP_CLR_FD [pid 5000] restart_syscall(<... resuming interrupted clone ...> [pid 4999] <... openat resumed>) = 3 [pid 4997] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... restart_syscall resumed>) = 0 [pid 4999] fstat(3, [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] lstat("./82/binderfs", [pid 5001] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] getdents64(3, [pid 4997] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5001] close(3 [pid 5000] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4997] unlink("./82/binderfs" [pid 5001] <... close resumed>) = 0 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... unlink resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] <... openat resumed>) = 3 [pid 4999] lstat("./82/binderfs", [pid 5000] fstat(3, [pid 4999] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] unlink("./82/binderfs" [pid 5000] getdents64(3, [pid 4999] <... unlink resumed>) = 0 [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 4999] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5000] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5000] lstat("./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5000] unlink("./83/binderfs") = 0 [pid 5000] umount2("./83/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5001] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 6018 ./strace-static-x86_64: Process 6018 attached [pid 6018] chdir("./83") = 0 [pid 6018] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6018] setpgid(0, 0) = 0 [pid 6018] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6018] write(3, "1000", 4) = 4 [pid 6018] close(3) = 0 [pid 6018] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6018] memfd_create("syzkaller", 0) = 3 [pid 6018] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [pid 6018] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 4999] <... umount2 resumed>) = 0 [pid 4999] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4997] <... umount2 resumed>) = 0 [pid 6018] <... write resumed>) = 2097152 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6018] munmap(0x7f18ca796000, 2097152 [pid 5000] <... umount2 resumed>) = 0 [pid 4999] lstat("./82/file1", [pid 4997] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6018] <... munmap resumed>) = 0 [pid 5000] umount2("./83/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] lstat("./82/file1", [pid 6018] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4999] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6018] <... openat resumed>) = 4 [pid 5000] lstat("./83/file1", [pid 4997] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6018] ioctl(4, LOOP_SET_FD, 3 [pid 5000] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4997] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6018] <... ioctl resumed>) = 0 [pid 5000] umount2("./83/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4999] openat(AT_FDCWD, "./82/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4997] openat(AT_FDCWD, "./82/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6018] close(3 [pid 5000] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6018] <... close resumed>) = 0 [pid 5000] openat(AT_FDCWD, "./83/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4999] <... openat resumed>) = 4 [pid 4997] <... openat resumed>) = 4 [pid 6018] mkdir("./file1", 0777 [pid 5000] <... openat resumed>) = 4 [pid 4999] fstat(4, [pid 4997] fstat(4, [pid 5000] fstat(4, [pid 4999] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4997] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5000] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4999] getdents64(4, [pid 4997] getdents64(4, [pid 6018] <... mkdir resumed>) = 0 [pid 5000] getdents64(4, [pid 6018] mount("/dev/loop4", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4999] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] <... getdents64 resumed>0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5000] getdents64(4, [pid 4999] getdents64(4, [pid 4997] getdents64(4, [pid 5000] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4999] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 4997] <... getdents64 resumed>0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5000] close(4 [pid 4999] close(4 [pid 4997] close(4 [pid 5000] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4997] <... close resumed>) = 0 [pid 5000] rmdir("./83/file1" [pid 4999] rmdir("./82/file1" [pid 4997] rmdir("./82/file1" [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4997] <... rmdir resumed>) = 0 [pid 5000] getdents64(3, [pid 4999] getdents64(3, [pid 4997] getdents64(3, [pid 5000] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4999] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 4997] <... getdents64 resumed>0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5000] close(3 [pid 4999] close(3 [pid 4997] close(3 [pid 5000] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 5000] rmdir("./83" [pid 4999] rmdir("./82" [pid 4997] <... close resumed>) = 0 [pid 5000] <... rmdir resumed>) = 0 [pid 4999] <... rmdir resumed>) = 0 [pid 4997] rmdir("./82" [pid 5000] mkdir("./84", 0777 [pid 4999] mkdir("./83", 0777 [pid 4997] <... rmdir resumed>) = 0 [pid 5000] <... mkdir resumed>) = 0 [pid 4999] <... mkdir resumed>) = 0 [pid 5000] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4999] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4997] mkdir("./83", 0777 [pid 5000] <... openat resumed>) = 3 [pid 4999] <... openat resumed>) = 3 [pid 4997] <... mkdir resumed>) = 0 [pid 5000] ioctl(3, LOOP_CLR_FD [pid 4999] ioctl(3, LOOP_CLR_FD [pid 4997] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5000] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4999] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4997] <... openat resumed>) = 3 [pid 5000] close(3 [pid 4999] close(3 [pid 4997] ioctl(3, LOOP_CLR_FD [pid 5000] <... close resumed>) = 0 [pid 4999] <... close resumed>) = 0 [pid 4997] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5000] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4997] close(3) = 0 ./strace-static-x86_64: Process 6021 attached ./strace-static-x86_64: Process 6020 attached [pid 6010] <... sendfile resumed>) = 1048576 [pid 5000] <... clone resumed>, child_tidptr=0x555556f7b690) = 6020 [ 235.523834][ T6018] loop4: detected capacity change from 0 to 4096 [ 235.550200][ T6018] NILFS (loop4): invalid segment: Checksum error in segment payload [ 235.559331][ T6018] NILFS (loop4): trying rollback from an earlier position [pid 4999] <... clone resumed>, child_tidptr=0x555556f7b690) = 6021 [pid 4997] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6021] chdir("./83" [pid 6020] chdir("./84" [pid 6010] exit_group(0 [pid 6021] <... chdir resumed>) = 0 [pid 6020] <... chdir resumed>) = 0 [pid 6010] <... exit_group resumed>) = ? [pid 4997] <... clone resumed>, child_tidptr=0x555556f7b690) = 6022 [pid 6021] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6020] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6021] <... prctl resumed>) = 0 [pid 6020] <... prctl resumed>) = 0 [pid 6010] +++ exited with 0 +++ [pid 6021] setpgid(0, 0 [pid 6020] setpgid(0, 0./strace-static-x86_64: Process 6022 attached [pid 6021] <... setpgid resumed>) = 0 [pid 6020] <... setpgid resumed>) = 0 [pid 5002] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6010, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} --- [pid 6022] chdir("./83" [pid 6021] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6020] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5002] restart_syscall(<... resuming interrupted clone ...> [pid 6022] <... chdir resumed>) = 0 [pid 6021] <... openat resumed>) = 3 [pid 6020] <... openat resumed>) = 3 [pid 5002] <... restart_syscall resumed>) = 0 [pid 6022] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6021] write(3, "1000", 4 [pid 6020] write(3, "1000", 4 [pid 6022] <... prctl resumed>) = 0 [pid 6021] <... write resumed>) = 4 [pid 6020] <... write resumed>) = 4 [pid 6022] setpgid(0, 0 [pid 6021] close(3 [pid 6020] close(3 [pid 5002] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6022] <... setpgid resumed>) = 0 [pid 6021] <... close resumed>) = 0 [pid 6020] <... close resumed>) = 0 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6021] symlink("/dev/binderfs", "./binderfs" [pid 6020] symlink("/dev/binderfs", "./binderfs" [pid 5002] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6022] <... openat resumed>) = 3 [pid 6021] <... symlink resumed>) = 0 [pid 6020] <... symlink resumed>) = 0 [pid 5002] <... openat resumed>) = 3 [pid 6022] write(3, "1000", 4 [pid 6021] memfd_create("syzkaller", 0 [pid 6020] memfd_create("syzkaller", 0 [ 235.617852][ T6018] NILFS (loop4): recovery complete [pid 5002] fstat(3, [pid 6022] <... write resumed>) = 4 [pid 6021] <... memfd_create resumed>) = 3 [pid 6020] <... memfd_create resumed>) = 3 [pid 6018] <... mount resumed>) = 0 [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6022] close(3 [pid 6021] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6020] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] getdents64(3, [pid 6022] <... close resumed>) = 0 [pid 6021] <... mmap resumed>) = 0x7f18ca796000 [pid 6020] <... mmap resumed>) = 0x7f18ca796000 [pid 5002] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 6022] symlink("/dev/binderfs", "./binderfs" [pid 6020] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6018] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 5002] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6022] <... symlink resumed>) = 0 [pid 6018] <... openat resumed>) = 3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6022] memfd_create("syzkaller", 0 [pid 5002] lstat("./83/binderfs", [pid 6022] <... memfd_create resumed>) = 3 [pid 5002] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6022] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] unlink("./83/binderfs" [pid 6022] <... mmap resumed>) = 0x7f18ca796000 [pid 5002] <... unlink resumed>) = 0 [pid 6021] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6018] chdir("./file1" [ 235.644971][ T6023] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5002] umount2("./83/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6018] <... chdir resumed>) = 0 [pid 6018] ioctl(4, LOOP_CLR_FD) = 0 [pid 6018] close(4) = 0 [pid 6022] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6018] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 6018] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 6018] ftruncate(5, 33587195) = 0 [pid 6018] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 6018] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 6020] <... write resumed>) = 2097152 [pid 6018] <... open resumed>) = 7 [pid 6018] sendfile(6, 7, NULL, 281474978811909 [pid 6021] <... write resumed>) = 2097152 [pid 6021] munmap(0x7f18ca796000, 2097152) = 0 [pid 6020] munmap(0x7f18ca796000, 2097152 [pid 6021] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6020] <... munmap resumed>) = 0 [pid 6021] <... openat resumed>) = 4 [pid 6020] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6021] ioctl(4, LOOP_SET_FD, 3 [pid 6020] <... openat resumed>) = 4 [pid 6020] ioctl(4, LOOP_SET_FD, 3 [pid 6022] <... write resumed>) = 2097152 [pid 6022] munmap(0x7f18ca796000, 2097152) = 0 [pid 6021] <... ioctl resumed>) = 0 [pid 6020] <... ioctl resumed>) = 0 [pid 6022] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6021] close(3 [pid 6020] close(3 [pid 6022] <... openat resumed>) = 4 [pid 6021] <... close resumed>) = 0 [pid 6022] ioctl(4, LOOP_SET_FD, 3 [pid 6020] <... close resumed>) = 0 [pid 6021] mkdir("./file1", 0777) = 0 [pid 6020] mkdir("./file1", 0777) = 0 [pid 6021] mount("/dev/loop2", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 6020] mount("/dev/loop3", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5002] <... umount2 resumed>) = 0 [pid 5002] umount2("./83/file1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5002] lstat("./83/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6022] <... ioctl resumed>) = 0 [ 235.819406][ T6021] loop2: detected capacity change from 0 to 4096 [ 235.827467][ T6020] loop3: detected capacity change from 0 to 4096 [ 235.858571][ T6022] loop0: detected capacity change from 0 to 4096 [pid 5002] umount2("./83/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6022] close(3 [pid 5002] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6022] <... close resumed>) = 0 [pid 5002] openat(AT_FDCWD, "./83/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6022] mkdir("./file1", 0777 [pid 5002] <... openat resumed>) = 4 [pid 6022] <... mkdir resumed>) = 0 [pid 5002] fstat(4, [pid 6022] mount("/dev/loop0", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 5002] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5002] getdents64(4, 0x555556f84720 /* 2 entries */, 32768) = 48 [pid 5002] getdents64(4, 0x555556f84720 /* 0 entries */, 32768) = 0 [pid 5002] close(4) = 0 [pid 5002] rmdir("./83/file1") = 0 [pid 5002] getdents64(3, 0x555556f7c6e0 /* 0 entries */, 32768) = 0 [pid 5002] close(3) = 0 [pid 5002] rmdir("./83") = 0 [pid 5002] mkdir("./84", 0777) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5002] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5002] close(3) = 0 [pid 5002] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556f7b690) = 6024 [ 235.888620][ T6021] NILFS (loop2): invalid segment: Checksum error in segment payload [ 235.898009][ T6020] NILFS (loop3): invalid segment: Checksum error in segment payload [ 235.908121][ T6020] NILFS (loop3): trying rollback from an earlier position [ 235.916797][ T6021] NILFS (loop2): trying rollback from an earlier position ./strace-static-x86_64: Process 6024 attached [pid 6024] chdir("./84") = 0 [pid 6024] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6024] setpgid(0, 0) = 0 [pid 6016] <... sendfile resumed>) = 1048576 [pid 6024] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6016] exit_group(0 [pid 6024] <... openat resumed>) = 3 [pid 6016] <... exit_group resumed>) = ? [pid 6024] write(3, "1000", 4 [pid 6016] +++ exited with 0 +++ [pid 6024] <... write resumed>) = 4 [pid 6024] close(3) = 0 [pid 6024] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6024] memfd_create("syzkaller", 0) = 3 [pid 6024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca796000 [ 235.954745][ T6022] NILFS (loop0): invalid segment: Checksum error in segment payload [ 235.968362][ T6021] NILFS (loop2): recovery complete [ 235.974423][ T6020] NILFS (loop3): recovery complete [pid 6021] <... mount resumed>) = 0 [pid 6021] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4998] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6016, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 6021] <... openat resumed>) = 3 [pid 6020] <... mount resumed>) = 0 [pid 4998] restart_syscall(<... resuming interrupted clone ...> [pid 6021] chdir("./file1" [pid 6020] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY [pid 4998] <... restart_syscall resumed>) = 0 [pid 6021] <... chdir resumed>) = 0 [pid 6020] <... openat resumed>) = 3 [pid 6021] ioctl(4, LOOP_CLR_FD [pid 6020] chdir("./file1" [pid 6021] <... ioctl resumed>) = 0 [pid 6020] <... chdir resumed>) = 0 [pid 6021] close(4 [pid 6020] ioctl(4, LOOP_CLR_FD [pid 4998] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6021] <... close resumed>) = 0 [pid 6021] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6020] <... ioctl resumed>) = 0 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6020] close(4 [pid 4998] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6021] <... open resumed>) = 4 [pid 6021] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 6020] <... close resumed>) = 0 [pid 4998] <... openat resumed>) = 3 [pid 6021] <... open resumed>) = 5 [pid 6020] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6021] ftruncate(5, 33587195 [pid 4998] fstat(3, [pid 6020] <... open resumed>) = 4 [pid 6021] <... ftruncate resumed>) = 0 [pid 6020] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 4998] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6021] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 6020] <... open resumed>) = 5 [pid 4998] getdents64(3, [pid 6021] <... open resumed>) = 6 [pid 6020] ftruncate(5, 33587195 [pid 6021] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 6020] <... ftruncate resumed>) = 0 [pid 4998] <... getdents64 resumed>0x555556f7c6e0 /* 4 entries */, 32768) = 112 [pid 6024] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 6021] <... open resumed>) = 7 [pid 6020] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 4998] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6021] sendfile(6, 7, NULL, 281474978811909 [pid 6020] <... open resumed>) = 6 [pid 6020] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 4998] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6020] <... open resumed>) = 7 [pid 4998] lstat("./82/binderfs", [pid 6020] sendfile(6, 7, NULL, 281474978811909 [pid 4998] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4998] unlink("./82/binderfs") = 0 [ 235.995135][ T6025] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.006380][ T6022] NILFS (loop0): trying rollback from an earlier position [ 236.014174][ T6026] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.029006][ T6022] NILFS (loop0): recovery complete [pid 4998] umount2("./82/file1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6022] <... mount resumed>) = 0 [pid 6022] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 6022] chdir("./file1") = 0 [pid 6022] ioctl(4, LOOP_CLR_FD) = 0 [pid 6022] close(4) = 0 [pid 6022] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [pid 6022] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 5 [pid 6022] ftruncate(5, 33587195) = 0 [pid 6022] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 6022] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 7 [ 236.093032][ T6027] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 6022] sendfile(6, 7, NULL, 281474978811909 [pid 6024] <... write resumed>) = 2097152 [pid 6024] munmap(0x7f18ca796000, 2097152) = 0 [pid 6024] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6024] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6024] close(3) = 0 [pid 6024] mkdir("./file1", 0777) = 0 [ 236.178398][ T6024] loop5: detected capacity change from 0 to 4096 [pid 6024] mount("/dev/loop5", "./file1", "nilfs2", MS_NODIRATIME|MS_REC, "" [pid 4998] <... umount2 resumed>) = 0 [ 236.285399][ T6027] ------------[ cut here ]------------ [ 236.291230][ T6027] WARNING: CPU: 1 PID: 6027 at fs/nilfs2/btree.c:2283 nilfs_btree_assign+0xab6/0xd20 [ 236.301152][ T6027] Modules linked in: [ 236.305130][ T6027] CPU: 1 PID: 6027 Comm: segctord Not tainted 6.4.0-rc1-syzkaller #0 [ 236.313265][ T6027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 236.323401][ T6027] RIP: 0010:nilfs_btree_assign+0xab6/0xd20 [ 236.329264][ T6027] Code: 00 0f 85 7e 02 00 00 44 89 f0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f6 62 3e fe 4c 8b 7c 24 38 eb a6 e8 ea 62 3e fe <0f> 0b 41 be fe ff ff ff eb 97 44 89 f1 80 e1 07 80 c1 03 38 c1 0f [ 236.348994][ T6027] RSP: 0018:ffffc90005e67580 EFLAGS: 00010293 [ 236.355160][ T6027] RAX: ffffffff834d0456 RBX: ffff88806f646698 RCX: ffff888028dcbb80 [ 236.363233][ T6027] RDX: 0000000000000000 RSI: 00000000fffffffe RDI: 00000000fffffffe [ 236.371245][ T6027] RBP: ffffc90005e676b0 R08: ffffffff834cfd9b R09: ffffed100d8ad21e [ 236.379310][ T6027] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 236.387540][ T6027] R13: ffff88802b337800 R14: 00000000fffffffe R15: 1ffff92000bccec0 [ 236.395594][ T6027] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 236.404604][ T6027] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.411317][ T6027] CR2: 00007ffd990d3000 CR3: 0000000079f42000 CR4: 00000000003506e0 [ 236.419417][ T6027] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 236.423615][ T6024] NILFS (loop5): invalid segment: Checksum error in segment payload [ 236.427544][ T6027] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 236.443569][ T6027] Call Trace: [ 236.446897][ T6027] [ 236.449857][ T6027] ? read_lock_is_recursive+0x20/0x20 [ 236.455870][ T6027] ? __might_sleep+0xc0/0xc0 [ 236.460552][ T6027] ? __down_write_common+0x161/0x200 [ 236.465934][ T6027] ? nilfs_btree_lookup_dirty_buffers+0xf20/0xf20 [ 236.472401][ T6027] ? clear_nonspinnable+0x60/0x60 [ 236.477529][ T6027] nilfs_bmap_assign+0x8b/0x160 [ 236.477539][ T6024] NILFS (loop5): trying rollback from an earlier position [ 236.477564][ T6027] nilfs_segctor_do_construct+0x37aa/0x6d30 [ 236.495610][ T6027] ? nilfs_transaction_unlock+0x210/0x210 [ 236.501515][ T6027] ? __up_read+0x690/0x690 [ 236.506099][ T6027] ? nilfs_segctor_confirm+0x24c/0x2d0 [ 236.511794][ T6027] ? do_raw_spin_lock+0x14d/0x3a0 [ 236.517001][ T6027] ? __lock_acquire+0x2000/0x2000 [ 236.522181][ T6027] ? do_raw_spin_unlock+0x13b/0x8b0 [ 236.527482][ T6027] ? _raw_spin_unlock+0x28/0x40 [ 236.532572][ T6027] ? nilfs_segctor_confirm+0x24c/0x2d0 [ 236.533113][ T6024] NILFS (loop5): recovery complete [ 236.538111][ T6027] nilfs_segctor_construct+0x145/0x8c0 [ 236.548679][ T6027] ? trace_nilfs2_transaction_transition+0x9a/0x1f0 [ 236.555397][ T6027] nilfs_segctor_thread+0x53a/0x1140 [ 236.560945][ T6027] ? nilfs_construction_timeout+0x40/0x40 [ 236.566874][ T6027] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 236.572903][ T6027] ? _raw_spin_unlock+0x40/0x40 [ 236.577806][ T6027] ? _raw_spin_unlock+0x40/0x40 [ 236.582701][ T6027] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 236.588814][ T6027] ? __kthread_parkme+0x164/0x1c0 [ 236.593959][ T6027] kthread+0x2b8/0x350 [ 236.598084][ T6027] ? nilfs_construction_timeout+0x40/0x40 [ 236.603891][ T6027] ? kthread_blkcg+0xd0/0xd0 [ 236.608621][ T6027] ret_from_fork+0x1f/0x30 [ 236.613897][ T6027] [ 236.616948][ T6027] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 236.624264][ T6027] CPU: 1 PID: 6027 Comm: segctord Not tainted 6.4.0-rc1-syzkaller #0 [ 236.632372][ T6027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 236.642498][ T6027] Call Trace: [ 236.645822][ T6027] [ 236.649055][ T6027] dump_stack_lvl+0x1e7/0x2d0 [ 236.653844][ T6027] ? nf_tcp_handle_invalid+0x650/0x650 [ 236.659384][ T6027] ? panic+0x770/0x770 [ 236.663521][ T6027] ? vscnprintf+0x5d/0x80 [ 236.667957][ T6027] panic+0x30f/0x770 [ 236.671900][ T6027] ? __warn+0x171/0x4a0 [ 236.676197][ T6027] ? __memcpy_flushcache+0x2b0/0x2b0 [ 236.681638][ T6027] ? ret_from_fork+0x1f/0x30 [ 236.686287][ T6027] __warn+0x314/0x4a0 [ 236.690315][ T6027] ? nilfs_btree_assign+0xab6/0xd20 [ 236.695560][ T6027] report_bug+0x2b3/0x500 [ 236.699928][ T6027] ? nilfs_btree_assign+0xab6/0xd20 [ 236.705196][ T6027] handle_bug+0x3d/0x70 [ 236.709402][ T6027] exc_invalid_op+0x1a/0x50 [ 236.713949][ T6027] asm_exc_invalid_op+0x1a/0x20 [ 236.718892][ T6027] RIP: 0010:nilfs_btree_assign+0xab6/0xd20 [ 236.724714][ T6027] Code: 00 0f 85 7e 02 00 00 44 89 f0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f6 62 3e fe 4c 8b 7c 24 38 eb a6 e8 ea 62 3e fe <0f> 0b 41 be fe ff ff ff eb 97 44 89 f1 80 e1 07 80 c1 03 38 c1 0f [ 236.744334][ T6027] RSP: 0018:ffffc90005e67580 EFLAGS: 00010293 [ 236.750457][ T6027] RAX: ffffffff834d0456 RBX: ffff88806f646698 RCX: ffff888028dcbb80 [ 236.758454][ T6027] RDX: 0000000000000000 RSI: 00000000fffffffe RDI: 00000000fffffffe [ 236.766617][ T6027] RBP: ffffc90005e676b0 R08: ffffffff834cfd9b R09: ffffed100d8ad21e [ 236.774614][ T6027] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 236.782951][ T6027] R13: ffff88802b337800 R14: 00000000fffffffe R15: 1ffff92000bccec0 [ 236.791031][ T6027] ? nilfs_btree_assign+0x3fb/0xd20 [ 236.796331][ T6027] ? nilfs_btree_assign+0xab6/0xd20 [ 236.801549][ T6027] ? read_lock_is_recursive+0x20/0x20 [ 236.806941][ T6027] ? __might_sleep+0xc0/0xc0 [ 236.811553][ T6027] ? __down_write_common+0x161/0x200 [ 236.816853][ T6027] ? nilfs_btree_lookup_dirty_buffers+0xf20/0xf20 [ 236.823282][ T6027] ? clear_nonspinnable+0x60/0x60 [ 236.828328][ T6027] nilfs_bmap_assign+0x8b/0x160 [ 236.833909][ T6027] nilfs_segctor_do_construct+0x37aa/0x6d30 [ 236.839987][ T6027] ? nilfs_transaction_unlock+0x210/0x210 [ 236.845776][ T6027] ? __up_read+0x690/0x690 [ 236.850203][ T6027] ? nilfs_segctor_confirm+0x24c/0x2d0 [ 236.855672][ T6027] ? do_raw_spin_lock+0x14d/0x3a0 [ 236.860808][ T6027] ? __lock_acquire+0x2000/0x2000 [ 236.865864][ T6027] ? do_raw_spin_unlock+0x13b/0x8b0 [ 236.871085][ T6027] ? _raw_spin_unlock+0x28/0x40 [ 236.875951][ T6027] ? nilfs_segctor_confirm+0x24c/0x2d0 [ 236.881434][ T6027] nilfs_segctor_construct+0x145/0x8c0 [ 236.887022][ T6027] ? trace_nilfs2_transaction_transition+0x9a/0x1f0 [ 236.893632][ T6027] nilfs_segctor_thread+0x53a/0x1140 [ 236.898958][ T6027] ? nilfs_construction_timeout+0x40/0x40 [ 236.904706][ T6027] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 236.910607][ T6027] ? _raw_spin_unlock+0x40/0x40 [ 236.915479][ T6027] ? _raw_spin_unlock+0x40/0x40 [ 236.920354][ T6027] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 236.926355][ T6027] ? __kthread_parkme+0x164/0x1c0 [ 236.931396][ T6027] kthread+0x2b8/0x350 [ 236.935480][ T6027] ? nilfs_construction_timeout+0x40/0x40 [ 236.941210][ T6027] ? kthread_blkcg+0xd0/0xd0 [ 236.945819][ T6027] ret_from_fork+0x1f/0x30 [ 236.950261][ T6027] [ 236.953508][ T6027] Kernel Offset: disabled [ 236.957930][ T6027] Rebooting in 86400 seconds..