./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1151327899 <...> [pid 8306] <... open resumed>) = 4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8308] <... open resumed>) = 4 [pid 8306] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] <... umount2 resumed>) = 0 [pid 5064] newfstatat(AT_FDCWD, "./325/file0", [pid 8308] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] umount2("./319/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8308] <... open resumed>) = 5 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8308] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8306] <... open resumed>) = 5 [pid 5065] newfstatat(AT_FDCWD, "./319/file0", [pid 8308] <... mmap resumed>) = 0x20000000 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8308] ftruncate(4, 33587195 [pid 5065] umount2("./319/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8308] <... ftruncate resumed>) = 0 [pid 8306] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8312] <... write resumed>) = 2097152 [pid 5065] openat(AT_FDCWD, "./319/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] openat(AT_FDCWD, "./325/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8308] unlink("./bus" [pid 5065] <... openat resumed>) = 4 [pid 5064] <... openat resumed>) = 4 [pid 8312] munmap(0x7f41e0600000, 138412032 [pid 5065] newfstatat(4, "", [pid 5064] newfstatat(4, "", [pid 8308] <... unlink resumed>) = 0 [pid 8306] <... mmap resumed>) = 0x20000000 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8308] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] getdents64(4, [pid 8308] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] getdents64(4, [pid 8312] <... munmap resumed>) = 0 [pid 8308] exit_group(0 [pid 8306] ftruncate(4, 33587195 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8312] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8308] <... exit_group resumed>) = ? [pid 5064] getdents64(4, [pid 8312] <... openat resumed>) = 4 [pid 5065] getdents64(4, [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8312] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 8306] <... ftruncate resumed>) = 0 [pid 8306] unlink("./bus" [pid 8308] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8308, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5065] close(4 [pid 8312] <... ioctl resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 8312] close(3 [pid 8306] <... unlink resumed>) = 0 [pid 5065] rmdir("./319/file0" [pid 5064] rmdir("./325/file0" [pid 8312] <... close resumed>) = 0 [pid 8306] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... rmdir resumed>) = 0 [pid 8312] close(4 [pid 8306] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] getdents64(3, [pid 8306] exit_group(0 [pid 8312] <... close resumed>) = 0 [pid 8312] mkdir("./file0", 0777 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] umount2("./321", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8312] <... mkdir resumed>) = 0 [pid 8306] <... exit_group resumed>) = ? [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] getdents64(3, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8312] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] openat(AT_FDCWD, "./321", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] close(3 [pid 5063] <... openat resumed>) = 3 [pid 5064] <... close resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 5065] close(3 [pid 5064] rmdir("./325" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, [pid 5065] rmdir("./319") = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./321/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] mkdir("./320", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./321/binderfs", [pid 5065] <... mkdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] mkdir("./326", 0777 [pid 5063] unlink("./321/binderfs" [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5063] <... unlink resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8306] +++ exited with 0 +++ [pid 5064] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8306, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5064] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5062] umount2("./320", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./320", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 300.116266][ T8312] loop0: detected capacity change from 0 to 4096 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8312] <... mount resumed>) = 0 [pid 8312] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8312] chdir("./file0") = 0 [pid 8312] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] umount2("./320/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8312] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8312] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5062] newfstatat(AT_FDCWD, "./320/binderfs", [pid 5063] umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] unlink("./320/binderfs" [pid 5063] newfstatat(AT_FDCWD, "./321/file0", [pid 8312] <... open resumed>) = 4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./321/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 8312] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8312] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] close(4) = 0 [pid 5063] rmdir("./321/file0") = 0 [pid 8312] <... mmap resumed>) = 0x20000000 [pid 5063] getdents64(3, [pid 5062] <... unlink resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 8312] ftruncate(4, 33587195 [pid 5063] rmdir("./321" [pid 5062] umount2("./320/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... rmdir resumed>) = 0 [pid 5063] mkdir("./322", 0777) = 0 [pid 8312] <... ftruncate resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [ 300.178955][ T8315] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8312] unlink("./bus" [pid 5062] <... umount2 resumed>) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 8316 attached [pid 8312] <... unlink resumed>) = 0 [pid 5062] umount2("./320/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8316 [pid 8312] sendfile(-1, -1, NULL, 281474978811909 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8316] set_robust_list(0x55555745a660, 24) = 0 [pid 8312] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] close(3 [pid 5062] newfstatat(AT_FDCWD, "./320/file0", [pid 8316] chdir("./326" [pid 8312] exit_group(0 [pid 5065] <... close resumed>) = 0 [pid 8312] <... exit_group resumed>) = ? [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 8317 attached [pid 8316] <... chdir resumed>) = 0 [pid 8312] +++ exited with 0 +++ [pid 5062] umount2("./320/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8317] set_robust_list(0x55555745a660, 24 [pid 8316] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8317 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8312, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8317] <... set_robust_list resumed>) = 0 [pid 8316] <... prctl resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8317] chdir("./320" [pid 8316] setpgid(0, 0 [pid 5062] openat(AT_FDCWD, "./320/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8317] <... chdir resumed>) = 0 [pid 8316] <... setpgid resumed>) = 0 [pid 8317] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... openat resumed>) = 4 [pid 8317] setpgid(0, 0) = 0 [pid 8316] <... openat resumed>) = 3 [pid 5062] newfstatat(4, "", [pid 5061] umount2("./326", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] getdents64(4, [pid 5061] openat(AT_FDCWD, "./326", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8316] write(3, "1000", 4 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8316] <... write resumed>) = 4 [pid 8316] close(3 [pid 5062] getdents64(4, [pid 5061] <... openat resumed>) = 3 [pid 8316] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] newfstatat(3, "", [pid 8317] <... openat resumed>) = 3 [pid 8316] symlink("/dev/binderfs", "./binderfs" [pid 5062] close(4 [pid 8317] write(3, "1000", 4 [pid 5062] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8317] <... write resumed>) = 4 [pid 8316] <... symlink resumed>) = 0 [pid 5062] rmdir("./320/file0" [pid 5061] getdents64(3, [pid 8317] close(3 [pid 8316] memfd_create("syzkaller", 0 [pid 8317] <... close resumed>) = 0 [pid 8316] <... memfd_create resumed>) = 3 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8317] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... rmdir resumed>) = 0 [pid 5061] umount2("./326/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8316] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8317] <... symlink resumed>) = 0 [pid 5062] getdents64(3, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8317] memfd_create("syzkaller", 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] newfstatat(AT_FDCWD, "./326/binderfs", [pid 8317] <... memfd_create resumed>) = 3 [pid 5062] close(3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8317] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... close resumed>) = 0 [pid 5061] unlink("./326/binderfs" [pid 8317] <... mmap resumed>) = 0x7f41e0600000 [pid 5062] rmdir("./320" [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... rmdir resumed>) = 0 [pid 5062] mkdir("./321", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] <... umount2 resumed>) = 0 [pid 8316] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3 [pid 5061] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] newfstatat(AT_FDCWD, "./326/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8318 [pid 5061] openat(AT_FDCWD, "./326/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 8318 attached [pid 5061] getdents64(4, [pid 8318] set_robust_list(0x55555745a660, 24 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8318] <... set_robust_list resumed>) = 0 [pid 5061] getdents64(4, [pid 8318] chdir("./322" [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8318] <... chdir resumed>) = 0 [pid 5061] close(4 [pid 8318] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] <... close resumed>) = 0 [pid 8318] <... prctl resumed>) = 0 [pid 8317] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5061] rmdir("./326/file0") = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8318] setpgid(0, 0 [pid 5061] close(3 [pid 8318] <... setpgid resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] rmdir("./326") = 0 [pid 5061] mkdir("./327", 0777) = 0 [pid 8318] <... openat resumed>) = 3 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8318] write(3, "1000", 4 [pid 5061] <... openat resumed>) = 3 [pid 8318] <... write resumed>) = 4 [pid 8318] close(3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8318] <... close resumed>) = 0 [pid 8318] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8318] memfd_create("syzkaller", 0 [pid 8316] <... write resumed>) = 2097152 [pid 8318] <... memfd_create resumed>) = 3 [pid 8318] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8316] munmap(0x7f41e0600000, 138412032) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 8316] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555745a650) = 8319 [pid 8316] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 8319 attached [pid 8319] set_robust_list(0x55555745a660, 24) = 0 [pid 8319] chdir("./321") = 0 [pid 8319] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8319] setpgid(0, 0) = 0 [pid 8319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8316] <... ioctl resumed>) = 0 [pid 8316] close(3 [pid 8319] <... openat resumed>) = 3 [pid 8319] write(3, "1000", 4) = 4 [pid 8319] close(3) = 0 [pid 8316] <... close resumed>) = 0 [pid 8319] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8316] close(4) = 0 [pid 8316] mkdir("./file0", 0777 [pid 8319] memfd_create("syzkaller", 0) = 3 [pid 8316] <... mkdir resumed>) = 0 [pid 8319] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8318] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8317] <... write resumed>) = 2097152 [pid 8316] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8319] <... mmap resumed>) = 0x7f41e0600000 [ 300.398133][ T8316] loop3: detected capacity change from 0 to 4096 [pid 8317] munmap(0x7f41e0600000, 138412032) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8317] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8319] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8317] <... openat resumed>) = 4 [pid 8317] ioctl(4, LOOP_SET_FD, 3 [pid 5061] close(3 [pid 8317] <... ioctl resumed>) = 0 [pid 8316] <... mount resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8316] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8317] close(3./strace-static-x86_64: Process 8321 attached [pid 8318] <... write resumed>) = 2097152 [pid 8317] <... close resumed>) = 0 [pid 8316] <... openat resumed>) = 3 [pid 8321] set_robust_list(0x55555745a660, 24 [pid 8316] chdir("./file0" [pid 8317] close(4 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8321 [pid 8321] <... set_robust_list resumed>) = 0 [pid 8317] <... close resumed>) = 0 [pid 8317] mkdir("./file0", 0777 [pid 8321] chdir("./327") = 0 [pid 8317] <... mkdir resumed>) = 0 [pid 8316] <... chdir resumed>) = 0 [pid 8321] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8317] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8316] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8321] <... prctl resumed>) = 0 [pid 8321] setpgid(0, 0 [pid 8316] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8321] <... setpgid resumed>) = 0 [pid 8318] munmap(0x7f41e0600000, 138412032 [pid 8316] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8318] <... munmap resumed>) = 0 [pid 8321] <... openat resumed>) = 3 [pid 8321] write(3, "1000", 4) = 4 [pid 8321] close(3) = 0 [pid 8321] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8318] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8316] <... open resumed>) = 4 [ 300.479041][ T8317] loop4: detected capacity change from 0 to 4096 [ 300.499088][ T8320] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8318] ioctl(4, LOOP_SET_FD, 3 [pid 8316] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8321] memfd_create("syzkaller", 0 [pid 8319] <... write resumed>) = 2097152 [pid 8321] <... memfd_create resumed>) = 3 [pid 8321] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8319] munmap(0x7f41e0600000, 138412032 [pid 8316] <... open resumed>) = 5 [pid 8321] <... mmap resumed>) = 0x7f41e0600000 [pid 8316] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8319] <... munmap resumed>) = 0 [pid 8318] <... ioctl resumed>) = 0 [pid 8317] <... mount resumed>) = 0 [pid 8317] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8317] chdir("./file0") = 0 [pid 8317] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8316] <... mmap resumed>) = 0x20000000 [pid 8317] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8317] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8316] ftruncate(4, 33587195 [pid 8318] close(3) = 0 [pid 8318] close(4) = 0 [pid 8318] mkdir("./file0", 0777) = 0 [pid 8318] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8319] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8316] <... ftruncate resumed>) = 0 [pid 8319] <... openat resumed>) = 4 [ 300.559863][ T8318] loop2: detected capacity change from 0 to 4096 [ 300.574001][ T8322] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8319] ioctl(4, LOOP_SET_FD, 3 [pid 8316] unlink("./bus" [pid 8317] <... open resumed>) = 4 [pid 8317] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8316] <... unlink resumed>) = 0 [pid 8319] <... ioctl resumed>) = 0 [pid 8317] <... open resumed>) = 5 [pid 8316] sendfile(-1, -1, NULL, 281474978811909 [pid 8319] close(3 [pid 8316] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8319] <... close resumed>) = 0 [pid 8317] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8316] exit_group(0 [pid 8319] close(4 [pid 8317] <... mmap resumed>) = 0x20000000 [pid 8316] <... exit_group resumed>) = ? [pid 8319] <... close resumed>) = 0 [pid 8319] mkdir("./file0", 0777 [pid 8317] ftruncate(4, 33587195) = 0 [pid 8321] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8319] <... mkdir resumed>) = 0 [pid 8317] unlink("./bus" [ 300.608847][ T8319] loop1: detected capacity change from 0 to 4096 [pid 8319] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8317] <... unlink resumed>) = 0 [pid 8317] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8318] <... mount resumed>) = 0 [pid 8317] exit_group(0 [pid 8318] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8317] <... exit_group resumed>) = ? [pid 8318] <... openat resumed>) = 3 [pid 8316] +++ exited with 0 +++ [pid 8318] chdir("./file0" [pid 8317] +++ exited with 0 +++ [pid 8318] <... chdir resumed>) = 0 [pid 8318] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8317, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 8318] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 8318] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] <... restart_syscall resumed>) = 0 [pid 5065] umount2("./320", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./320", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./320/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./320/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./320/binderfs") = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8316, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5065] umount2("./320/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0 [pid 5064] umount2("./326", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./326", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8318] <... open resumed>) = 4 [pid 5064] getdents64(3, [pid 8318] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8318] <... open resumed>) = 5 [pid 5064] umount2("./326/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8318] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8318] <... mmap resumed>) = 0x20000000 [pid 8318] ftruncate(4, 33587195 [pid 5064] newfstatat(AT_FDCWD, "./326/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 300.655735][ T8323] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] unlink("./326/binderfs" [pid 5065] umount2("./320/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... unlink resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8318] <... ftruncate resumed>) = 0 [pid 5065] newfstatat(AT_FDCWD, "./320/file0", [pid 8318] unlink("./bus" [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./320/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./320/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4 [pid 8321] <... write resumed>) = 2097152 [pid 5065] <... close resumed>) = 0 [pid 8321] munmap(0x7f41e0600000, 138412032 [pid 5065] rmdir("./320/file0" [pid 8319] <... mount resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 8319] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8318] <... unlink resumed>) = 0 [pid 8319] chdir("./file0") = 0 [pid 8318] sendfile(-1, -1, NULL, 281474978811909 [pid 8319] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8318] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] getdents64(3, [pid 8319] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8318] exit_group(0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8319] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8318] <... exit_group resumed>) = ? [pid 5065] close(3 [pid 8321] <... munmap resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 8321] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] rmdir("./320" [pid 5064] <... umount2 resumed>) = 0 [pid 8321] <... openat resumed>) = 4 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8321] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] mkdir("./321", 0777 [pid 8318] +++ exited with 0 +++ [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8321] <... ioctl resumed>) = 0 [pid 8319] <... open resumed>) = 4 [pid 5064] newfstatat(AT_FDCWD, "./326/file0", [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8318, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8321] close(3 [pid 8319] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] <... openat resumed>) = 3 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8321] <... close resumed>) = 0 [pid 8319] <... open resumed>) = 5 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8321] close(4 [pid 8319] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8321] <... close resumed>) = 0 [pid 8319] <... mmap resumed>) = 0x20000000 [pid 8321] mkdir("./file0", 0777 [pid 8319] ftruncate(4, 33587195 [pid 5064] openat(AT_FDCWD, "./326/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8321] <... mkdir resumed>) = 0 [pid 5064] <... openat resumed>) = 4 [pid 5063] umount2("./322", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./322", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8321] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8319] <... ftruncate resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] newfstatat(3, "", [pid 5064] getdents64(4, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8319] unlink("./bus" [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(3, [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] <... close resumed>) = 0 [pid 5063] umount2("./322/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] rmdir("./326/file0" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... rmdir resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./322/binderfs", [pid 5064] getdents64(3, [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] unlink("./322/binderfs" [pid 5064] close(3 [pid 5063] <... unlink resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./326" [pid 8319] <... unlink resumed>) = 0 [ 300.726242][ T8324] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 300.764222][ T8321] loop0: detected capacity change from 0 to 4096 [pid 5063] umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8319] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] <... rmdir resumed>) = 0 [pid 8319] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5064] mkdir("./327", 0777) = 0 [pid 8319] exit_group(0) = ? [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5065] <... ioctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5065] close(3 [pid 5063] umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] newfstatat(AT_FDCWD, "./322/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./322/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 8326 attached [pid 8321] <... mount resumed>) = 0 [pid 8319] +++ exited with 0 +++ [pid 8321] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8319, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 8321] <... openat resumed>) = 3 [pid 8321] chdir("./file0") = 0 [pid 8321] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8326 [pid 5063] <... openat resumed>) = 4 [pid 8326] set_robust_list(0x55555745a660, 24 [pid 8321] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8326] <... set_robust_list resumed>) = 0 [pid 5063] getdents64(4, [pid 8326] chdir("./321" [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] umount2("./321", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8326] <... chdir resumed>) = 0 [pid 5063] getdents64(4, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8326] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] openat(AT_FDCWD, "./321", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./321/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./321/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./321/binderfs") = 0 [pid 5062] umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8326] <... prctl resumed>) = 0 [pid 8321] <... open resumed>) = 4 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 8321] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] <... close resumed>) = 0 [pid 8326] setpgid(0, 0) = 0 [pid 8321] <... open resumed>) = 5 [pid 5063] rmdir("./322/file0") = 0 [ 300.834468][ T8325] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8321] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] getdents64(3, [pid 5062] <... umount2 resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8321] <... mmap resumed>) = 0x20000000 [pid 8326] <... openat resumed>) = 3 [pid 5063] close(3 [pid 5064] <... ioctl resumed>) = 0 [pid 8326] write(3, "1000", 4 [pid 8321] ftruncate(4, 33587195 [pid 5064] close(3 [pid 5063] <... close resumed>) = 0 [pid 5062] umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8326] <... write resumed>) = 4 [pid 5064] <... close resumed>) = 0 [pid 5063] rmdir("./322" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8326] close(3 [pid 8321] <... ftruncate resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... rmdir resumed>) = 0 [pid 8326] <... close resumed>) = 0 [pid 8321] unlink("./bus" [pid 5062] newfstatat(AT_FDCWD, "./321/file0", [pid 8326] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8326] <... symlink resumed>) = 0 [pid 5063] mkdir("./323", 0777 [pid 5062] umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./321/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 8327 attached [pid 8326] memfd_create("syzkaller", 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 8327] set_robust_list(0x55555745a660, 24 [pid 8321] <... unlink resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8327 [pid 8326] <... memfd_create resumed>) = 3 [pid 8327] <... set_robust_list resumed>) = 0 [pid 8326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] newfstatat(4, "", [pid 8327] chdir("./327" [pid 8326] <... mmap resumed>) = 0x7f41e0600000 [pid 8321] sendfile(-1, -1, NULL, 281474978811909 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8321] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8327] <... chdir resumed>) = 0 [pid 8327] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8327] setpgid(0, 0) = 0 [pid 5063] <... openat resumed>) = 3 [pid 8327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8321] exit_group(0) = ? [pid 5062] getdents64(4, [pid 8327] <... openat resumed>) = 3 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, [pid 8327] write(3, "1000", 4 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8327] <... write resumed>) = 4 [pid 5062] close(4 [pid 8327] close(3 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./321/file0" [pid 8327] <... close resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8326] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8327] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 8321] +++ exited with 0 +++ [pid 5062] <... close resumed>) = 0 [pid 8327] memfd_create("syzkaller", 0 [pid 5062] rmdir("./321") = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8321, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8327] <... memfd_create resumed>) = 3 [pid 5061] umount2("./327", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./327", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8327] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] <... openat resumed>) = 3 [pid 8327] <... mmap resumed>) = 0x7f41e0600000 [pid 5062] mkdir("./322", 0777 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 8326] <... write resumed>) = 2097152 [pid 5061] getdents64(3, [pid 8326] munmap(0x7f41e0600000, 138412032 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] umount2("./327/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... openat resumed>) = 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./327/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] unlink("./327/binderfs" [pid 8327] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8326] <... munmap resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 8326] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8326] <... openat resumed>) = 4 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./327/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8326] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 8328 attached ) = 0 [pid 5061] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./327/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./327/file0") = 0 [pid 8328] set_robust_list(0x55555745a660, 24 [pid 8327] <... write resumed>) = 2097152 [pid 8326] close(3 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8328 [pid 8326] <... close resumed>) = 0 [pid 8328] <... set_robust_list resumed>) = 0 [pid 5061] getdents64(3, [pid 8326] close(4 [pid 8328] chdir("./323" [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8328] <... chdir resumed>) = 0 [pid 8326] <... close resumed>) = 0 [pid 5061] close(3) = 0 [pid 8327] munmap(0x7f41e0600000, 138412032 [pid 5061] rmdir("./327" [pid 8328] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8327] <... munmap resumed>) = 0 [pid 8326] mkdir("./file0", 0777 [pid 5061] <... rmdir resumed>) = 0 [pid 8328] <... prctl resumed>) = 0 [pid 5061] mkdir("./328", 0777 [pid 8328] setpgid(0, 0 [pid 8326] <... mkdir resumed>) = 0 [pid 8328] <... setpgid resumed>) = 0 [pid 8328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8326] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] <... mkdir resumed>) = 0 [pid 8328] <... openat resumed>) = 3 [pid 8327] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8328] write(3, "1000", 4) = 4 [pid 8327] <... openat resumed>) = 4 [pid 8328] close(3 [ 301.009361][ T8326] loop4: detected capacity change from 0 to 4096 [pid 8327] ioctl(4, LOOP_SET_FD, 3 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8328] <... close resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 8328] symlink("/dev/binderfs", "./binderfs" [pid 5062] close(3 [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8328] <... symlink resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8327] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 8329 attached [pid 8328] memfd_create("syzkaller", 0 [pid 8329] set_robust_list(0x55555745a660, 24 [pid 8328] <... memfd_create resumed>) = 3 [pid 8327] close(3 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8329 [pid 8329] <... set_robust_list resumed>) = 0 [pid 8328] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8327] <... close resumed>) = 0 [pid 8327] close(4 [pid 8329] chdir("./322" [pid 8328] <... mmap resumed>) = 0x7f41e0600000 [pid 8327] <... close resumed>) = 0 [pid 8327] mkdir("./file0", 0777 [pid 8329] <... chdir resumed>) = 0 [pid 8329] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8329] setpgid(0, 0 [pid 8327] <... mkdir resumed>) = 0 [pid 8329] <... setpgid resumed>) = 0 [pid 8329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8329] write(3, "1000", 4) = 4 [pid 8329] close(3) = 0 [pid 8329] symlink("/dev/binderfs", "./binderfs") = 0 [ 301.056431][ T8327] loop3: detected capacity change from 0 to 4096 [pid 8327] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8329] memfd_create("syzkaller", 0 [pid 8326] <... mount resumed>) = 0 [pid 8326] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8326] chdir("./file0") = 0 [pid 8326] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8329] <... memfd_create resumed>) = 3 [pid 8328] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8326] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [ 301.096731][ T8330] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8326] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] <... ioctl resumed>) = 0 [pid 8327] <... mount resumed>) = 0 [pid 8327] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8327] chdir("./file0") = 0 [pid 8327] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8327] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8326] <... open resumed>) = 4 [pid 5061] close(3) = 0 [pid 8326] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8326] <... open resumed>) = 5 ./strace-static-x86_64: Process 8332 attached [pid 8329] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8326] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8332] set_robust_list(0x55555745a660, 24 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8332 [pid 8332] <... set_robust_list resumed>) = 0 [pid 8326] <... mmap resumed>) = 0x20000000 [pid 8332] chdir("./328") = 0 [pid 8332] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8326] ftruncate(4, 33587195 [pid 8332] <... prctl resumed>) = 0 [pid 8332] setpgid(0, 0) = 0 [pid 8332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8332] write(3, "1000", 4) = 4 [pid 8326] <... ftruncate resumed>) = 0 [pid 8332] close(3) = 0 [pid 8332] symlink("/dev/binderfs", "./binderfs") = 0 [ 301.153454][ T8331] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8332] memfd_create("syzkaller", 0 [pid 8327] <... open resumed>) = 4 [pid 8332] <... memfd_create resumed>) = 3 [pid 8327] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8326] unlink("./bus" [pid 8327] <... open resumed>) = 5 [pid 8332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8327] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8326] <... unlink resumed>) = 0 [pid 8327] <... mmap resumed>) = 0x20000000 [pid 8326] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8327] ftruncate(4, 33587195 [pid 8328] <... write resumed>) = 2097152 [pid 8326] exit_group(0) = ? [pid 8328] munmap(0x7f41e0600000, 138412032 [pid 8327] <... ftruncate resumed>) = 0 [pid 8332] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8328] <... munmap resumed>) = 0 [pid 8327] unlink("./bus" [pid 8326] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8326, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 8328] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 8328] <... openat resumed>) = 4 [pid 5065] <... restart_syscall resumed>) = 0 [pid 8328] ioctl(4, LOOP_SET_FD, 3 [pid 8329] <... write resumed>) = 2097152 [pid 8328] <... ioctl resumed>) = 0 [pid 8327] <... unlink resumed>) = 0 [pid 5065] umount2("./321", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8328] close(3 [pid 8327] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8328] <... close resumed>) = 0 [pid 8327] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] openat(AT_FDCWD, "./321", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8329] munmap(0x7f41e0600000, 138412032) = 0 [pid 8328] close(4 [pid 8327] exit_group(0 [pid 5065] <... openat resumed>) = 3 [pid 8327] <... exit_group resumed>) = ? [pid 5065] newfstatat(3, "", [pid 8328] <... close resumed>) = 0 [pid 8329] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8332] <... write resumed>) = 2097152 [pid 8328] mkdir("./file0", 0777 [pid 8327] +++ exited with 0 +++ [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8327, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./321/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./327", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8328] <... mkdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8328] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./327", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] newfstatat(AT_FDCWD, "./321/binderfs", [pid 5064] <... openat resumed>) = 3 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] newfstatat(3, "", [pid 8329] <... openat resumed>) = 4 [pid 5065] unlink("./321/binderfs" [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8332] munmap(0x7f41e0600000, 138412032 [pid 8329] ioctl(4, LOOP_SET_FD, 3 [pid 5064] getdents64(3, [pid 8332] <... munmap resumed>) = 0 [pid 5065] <... unlink resumed>) = 0 [pid 8332] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8332] <... openat resumed>) = 4 [pid 5064] umount2("./327/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8332] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./327/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./327/binderfs") = 0 [pid 5064] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8329] <... ioctl resumed>) = 0 [pid 8329] close(3) = 0 [ 301.272764][ T8328] loop2: detected capacity change from 0 to 4096 [ 301.306347][ T8329] loop1: detected capacity change from 0 to 4096 [ 301.316017][ T8332] loop0: detected capacity change from 0 to 4096 [pid 8329] close(4) = 0 [pid 8329] mkdir("./file0", 0777) = 0 [pid 8332] <... ioctl resumed>) = 0 [pid 8328] <... mount resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 8328] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8328] chdir("./file0" [pid 8332] close(3 [pid 8329] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8328] <... chdir resumed>) = 0 [pid 8332] <... close resumed>) = 0 [pid 5065] umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8328] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8332] close(4 [pid 8328] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8332] <... close resumed>) = 0 [pid 8328] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] newfstatat(AT_FDCWD, "./321/file0", [pid 8332] mkdir("./file0", 0777 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 8332] <... mkdir resumed>) = 0 [pid 5065] umount2("./321/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./321/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8332] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... openat resumed>) = 4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./327/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(4, [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8328] <... open resumed>) = 4 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] openat(AT_FDCWD, "./327/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8328] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] getdents64(4, [pid 5064] <... openat resumed>) = 4 [pid 8328] <... open resumed>) = 5 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] newfstatat(4, "", [pid 8328] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./321/file0") = 0 [pid 8328] ftruncate(4, 33587195 [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [ 301.337933][ T8333] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8328] <... ftruncate resumed>) = 0 [pid 5065] getdents64(3, [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8328] unlink("./bus" [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5065] close(3 [pid 5064] rmdir("./327/file0" [pid 5065] <... close resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5065] rmdir("./321") = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./327" [pid 8329] <... mount resumed>) = 0 [pid 8328] <... unlink resumed>) = 0 [pid 5065] mkdir("./322", 0777 [pid 5064] <... rmdir resumed>) = 0 [pid 8329] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8328] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 5064] mkdir("./328", 0777 [pid 8329] <... openat resumed>) = 3 [pid 8329] chdir("./file0" [pid 8328] exit_group(0 [pid 5064] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8328] <... exit_group resumed>) = ? [pid 8329] <... chdir resumed>) = 0 [pid 8329] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8329] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8328] +++ exited with 0 +++ [pid 8332] <... mount resumed>) = 0 [pid 8332] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8332] chdir("./file0") = 0 [pid 8332] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] <... mkdir resumed>) = 0 [pid 8332] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8332] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8329] <... open resumed>) = 4 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8329] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8328, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5065] <... openat resumed>) = 3 [pid 8329] <... open resumed>) = 5 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8329] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] umount2("./323", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8332] <... open resumed>) = 4 [pid 8329] <... mmap resumed>) = 0x20000000 [pid 5063] openat(AT_FDCWD, "./323", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8332] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8329] ftruncate(4, 33587195 [pid 5063] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8332] <... open resumed>) = 5 [pid 8329] <... ftruncate resumed>) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8332] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] umount2("./323/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./323/binderfs", [pid 8332] <... mmap resumed>) = 0x20000000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8332] ftruncate(4, 33587195 [pid 5063] unlink("./323/binderfs" [pid 8329] unlink("./bus" [pid 5063] <... unlink resumed>) = 0 [pid 8332] <... ftruncate resumed>) = 0 [pid 5063] umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8329] <... unlink resumed>) = 0 [ 301.415633][ T8334] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 301.436310][ T8335] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8329] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8332] unlink("./bus" [pid 5064] <... ioctl resumed>) = 0 [pid 8329] exit_group(0) = ? [pid 5064] close(3 [pid 8332] <... unlink resumed>) = 0 [pid 8332] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] <... close resumed>) = 0 [pid 8332] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8332] exit_group(0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8332] <... exit_group resumed>) = ? ./strace-static-x86_64: Process 8336 attached [pid 8329] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8329, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8336 [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 8336] set_robust_list(0x55555745a660, 24) = 0 [pid 5062] umount2("./322", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8336] chdir("./328" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./322", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8336] <... chdir resumed>) = 0 [pid 8336] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8336] setpgid(0, 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 8336] <... setpgid resumed>) = 0 [pid 8336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(3, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8336] <... openat resumed>) = 3 [pid 5063] newfstatat(AT_FDCWD, "./323/file0", [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8336] write(3, "1000", 4 [pid 8332] +++ exited with 0 +++ [pid 5065] <... ioctl resumed>) = 0 [pid 5063] umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./322/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8336] <... write resumed>) = 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8332, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5062] newfstatat(AT_FDCWD, "./322/binderfs", [pid 8336] close(3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8336] <... close resumed>) = 0 [pid 5062] unlink("./322/binderfs" [pid 8336] symlink("/dev/binderfs", "./binderfs" [pid 5062] <... unlink resumed>) = 0 [pid 8336] <... symlink resumed>) = 0 [pid 5065] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8336] memfd_create("syzkaller", 0 [pid 5063] openat(AT_FDCWD, "./323/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8336] <... memfd_create resumed>) = 3 [pid 5063] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", [pid 8336] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] umount2("./328", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8336] <... mmap resumed>) = 0x7f41e0600000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(4, [pid 5061] openat(AT_FDCWD, "./328", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./328/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./328/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./328/binderfs") = 0 [pid 5061] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8337 attached [pid 8337] set_robust_list(0x55555745a660, 24 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8337 [pid 5063] getdents64(4, [pid 8337] <... set_robust_list resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 8337] chdir("./322" [pid 5063] <... close resumed>) = 0 [pid 8337] <... chdir resumed>) = 0 [pid 8337] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] rmdir("./323/file0" [pid 5062] <... umount2 resumed>) = 0 [pid 8337] <... prctl resumed>) = 0 [pid 8337] setpgid(0, 0) = 0 [pid 8337] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5062] umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8337] write(3, "1000", 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8337] <... write resumed>) = 4 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./322/file0", [pid 8337] close(3) = 0 [pid 8337] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8336] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] getdents64(3, [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] close(3 [pid 5062] openat(AT_FDCWD, "./322/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8337] memfd_create("syzkaller", 0 [pid 5063] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5061] newfstatat(AT_FDCWD, "./328/file0", [pid 8337] <... memfd_create resumed>) = 3 [pid 5063] rmdir("./323" [pid 5062] newfstatat(4, "", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8337] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8337] <... mmap resumed>) = 0x7f41e0600000 [pid 5063] mkdir("./324", 0777 [pid 5062] getdents64(4, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./322/file0") = 0 [pid 5062] getdents64(3, [pid 5061] openat(AT_FDCWD, "./328/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 5063] <... mkdir resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5061] <... openat resumed>) = 4 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] rmdir("./322") = 0 [pid 5061] newfstatat(4, "", [pid 5063] <... openat resumed>) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] mkdir("./323", 0777 [pid 5061] getdents64(4, [pid 5062] <... mkdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5061] close(4 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./328/file0") = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./328") = 0 [pid 8336] <... write resumed>) = 2097152 [pid 5061] mkdir("./329", 0777 [pid 8336] munmap(0x7f41e0600000, 138412032 [pid 5061] <... mkdir resumed>) = 0 [pid 8336] <... munmap resumed>) = 0 [pid 8337] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8336] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8336] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... ioctl resumed>) = 0 [pid 8337] <... write resumed>) = 2097152 [pid 5063] close(3 [pid 8337] munmap(0x7f41e0600000, 138412032 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8338 attached , child_tidptr=0x55555745a650) = 8338 [pid 8338] set_robust_list(0x55555745a660, 24 [pid 8337] <... munmap resumed>) = 0 [pid 8338] <... set_robust_list resumed>) = 0 [pid 8338] chdir("./324") = 0 [pid 8337] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8336] <... ioctl resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 8338] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8337] <... openat resumed>) = 4 [pid 8336] close(3 [pid 5062] close(3 [pid 8338] <... prctl resumed>) = 0 [pid 8337] ioctl(4, LOOP_SET_FD, 3 [pid 8336] <... close resumed>) = 0 [pid 8336] close(4 [pid 8338] setpgid(0, 0 [pid 8337] <... ioctl resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8336] <... close resumed>) = 0 [pid 8338] <... setpgid resumed>) = 0 [pid 8337] close(3 [pid 8336] mkdir("./file0", 0777 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8338] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 8339 attached ) = 3 [pid 8337] <... close resumed>) = 0 [pid 8336] <... mkdir resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8339 [pid 5061] <... ioctl resumed>) = 0 [pid 8339] set_robust_list(0x55555745a660, 24 [pid 8338] write(3, "1000", 4 [pid 8337] close(4 [pid 8339] <... set_robust_list resumed>) = 0 [pid 8338] <... write resumed>) = 4 [pid 8336] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] close(3 [pid 8337] <... close resumed>) = 0 [pid 8337] mkdir("./file0", 0777 [pid 5061] <... close resumed>) = 0 [pid 8339] chdir("./323" [pid 8338] close(3 [pid 8337] <... mkdir resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8339] <... chdir resumed>) = 0 [pid 8338] <... close resumed>) = 0 [pid 8339] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8338] symlink("/dev/binderfs", "./binderfs" [pid 8337] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8339] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 8340 attached [pid 8339] setpgid(0, 0 [pid 8338] <... symlink resumed>) = 0 [pid 8340] set_robust_list(0x55555745a660, 24 [pid 8339] <... setpgid resumed>) = 0 [pid 8339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8340 [pid 8340] <... set_robust_list resumed>) = 0 [pid 8340] chdir("./329" [pid 8339] <... openat resumed>) = 3 [pid 8338] memfd_create("syzkaller", 0 [pid 8340] <... chdir resumed>) = 0 [pid 8339] write(3, "1000", 4 [pid 8338] <... memfd_create resumed>) = 3 [pid 8340] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8339] <... write resumed>) = 4 [ 301.694174][ T8336] loop3: detected capacity change from 0 to 4096 [ 301.719602][ T8337] loop4: detected capacity change from 0 to 4096 [pid 8338] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8340] <... prctl resumed>) = 0 [pid 8339] close(3 [pid 8338] <... mmap resumed>) = 0x7f41e0600000 [pid 8340] setpgid(0, 0 [pid 8339] <... close resumed>) = 0 [pid 8340] <... setpgid resumed>) = 0 [pid 8339] symlink("/dev/binderfs", "./binderfs" [pid 8340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8339] <... symlink resumed>) = 0 [pid 8340] write(3, "1000", 4 [pid 8339] memfd_create("syzkaller", 0 [pid 8336] <... mount resumed>) = 0 [pid 8336] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8336] chdir("./file0" [pid 8340] <... write resumed>) = 4 [pid 8339] <... memfd_create resumed>) = 3 [pid 8336] <... chdir resumed>) = 0 [pid 8340] close(3 [pid 8339] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8336] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8340] <... close resumed>) = 0 [pid 8339] <... mmap resumed>) = 0x7f41e0600000 [pid 8336] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8336] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8340] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8340] memfd_create("syzkaller", 0) = 3 [pid 8338] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8340] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8336] <... open resumed>) = 4 [ 301.789986][ T8341] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8336] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8339] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8336] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 8336] unlink("./bus" [pid 8337] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8337] chdir("./file0") = 0 [pid 8337] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8337] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8336] <... unlink resumed>) = 0 [pid 8336] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8336] exit_group(0) = ? [pid 8340] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8337] <... open resumed>) = 4 [pid 8337] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [ 301.867111][ T8342] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8337] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8336] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8336, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...> [pid 8337] <... mmap resumed>) = 0x20000000 [pid 5064] <... restart_syscall resumed>) = 0 [pid 8337] ftruncate(4, 33587195 [pid 5064] umount2("./328", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./328", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8337] <... ftruncate resumed>) = 0 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./328/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8337] unlink("./bus" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./328/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./328/binderfs" [pid 8337] <... unlink resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 8337] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8337] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8337] exit_group(0) = ? [pid 8338] <... write resumed>) = 2097152 [pid 8338] munmap(0x7f41e0600000, 138412032 [pid 5064] <... umount2 resumed>) = 0 [pid 8339] <... write resumed>) = 2097152 [pid 8339] munmap(0x7f41e0600000, 138412032 [pid 8340] <... write resumed>) = 2097152 [pid 8338] <... munmap resumed>) = 0 [pid 8337] +++ exited with 0 +++ [pid 5064] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8340] munmap(0x7f41e0600000, 138412032 [pid 8339] <... munmap resumed>) = 0 [pid 8338] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8337, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8339] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8338] <... openat resumed>) = 4 [pid 8340] <... munmap resumed>) = 0 [pid 8339] <... openat resumed>) = 4 [pid 8338] ioctl(4, LOOP_SET_FD, 3 [pid 5064] newfstatat(AT_FDCWD, "./328/file0", [pid 8340] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8339] ioctl(4, LOOP_SET_FD, 3 [pid 5065] umount2("./322", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8340] <... openat resumed>) = 4 [pid 5064] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8340] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./328/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./328/file0" [pid 5065] openat(AT_FDCWD, "./322", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8340] <... ioctl resumed>) = 0 [pid 8339] <... ioctl resumed>) = 0 [pid 8338] <... ioctl resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5064] <... rmdir resumed>) = 0 [pid 8340] close(3 [pid 8339] close(3 [pid 8338] close(3 [pid 5065] newfstatat(3, "", [pid 5064] getdents64(3, [pid 8340] <... close resumed>) = 0 [pid 8339] <... close resumed>) = 0 [pid 8338] <... close resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8340] close(4 [pid 8339] close(4 [pid 8338] close(4 [pid 5065] getdents64(3, [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8340] <... close resumed>) = 0 [pid 8339] <... close resumed>) = 0 [pid 8338] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] close(3 [pid 8340] mkdir("./file0", 0777 [pid 8339] mkdir("./file0", 0777 [pid 8338] mkdir("./file0", 0777 [pid 5065] umount2("./322/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... close resumed>) = 0 [pid 8340] <... mkdir resumed>) = 0 [pid 8339] <... mkdir resumed>) = 0 [pid 5064] rmdir("./328" [pid 8338] <... mkdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./322/binderfs", [pid 8339] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8338] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./322/binderfs" [pid 8340] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... unlink resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] mkdir("./329", 0777 [ 301.984482][ T8338] loop2: detected capacity change from 0 to 4096 [ 301.987321][ T8340] loop0: detected capacity change from 0 to 4096 [ 301.991408][ T8339] loop1: detected capacity change from 0 to 4096 [pid 5065] umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... mkdir resumed>) = 0 [pid 8340] <... mount resumed>) = 0 [pid 8340] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8340] chdir("./file0") = 0 [pid 8340] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8340] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8339] <... mount resumed>) = 0 [pid 8339] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8338] <... mount resumed>) = 0 [pid 8338] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8339] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = 0 [pid 8339] chdir("./file0") = 0 [pid 8338] <... openat resumed>) = 3 [pid 5065] umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8339] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8338] chdir("./file0" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8340] <... open resumed>) = 4 [pid 8339] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8338] <... chdir resumed>) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 8340] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8340] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] close(3 [pid 8339] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8338] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] newfstatat(AT_FDCWD, "./322/file0", [pid 8340] <... ftruncate resumed>) = 0 [ 302.048167][ T8343] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 302.062533][ T8344] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 302.077689][ T8345] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8338] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... close resumed>) = 0 [pid 8338] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] umount2("./322/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8346 attached [pid 8340] unlink("./bus" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./322/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8346 [pid 8346] set_robust_list(0x55555745a660, 24 [pid 8340] <... unlink resumed>) = 0 [pid 8339] <... open resumed>) = 4 [pid 8338] <... open resumed>) = 4 [pid 5065] <... openat resumed>) = 4 [pid 8346] <... set_robust_list resumed>) = 0 [pid 8339] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8338] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] newfstatat(4, "", [pid 8340] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8340] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] getdents64(4, [pid 8340] exit_group(0 [pid 8339] <... open resumed>) = 5 [pid 8340] <... exit_group resumed>) = ? [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8346] chdir("./329" [pid 8338] <... open resumed>) = 5 [pid 5065] getdents64(4, [pid 8339] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 8339] <... mmap resumed>) = 0x20000000 [pid 5065] rmdir("./322/file0") = 0 [pid 8346] <... chdir resumed>) = 0 [pid 8339] ftruncate(4, 33587195 [pid 8346] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8338] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8346] setpgid(0, 0) = 0 [pid 8339] <... ftruncate resumed>) = 0 [pid 8338] <... mmap resumed>) = 0x20000000 [pid 5065] getdents64(3, [pid 8346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8340] +++ exited with 0 +++ [pid 8339] unlink("./bus" [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8346] <... openat resumed>) = 3 [pid 5065] close(3 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8340, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8346] write(3, "1000", 4 [pid 8338] ftruncate(4, 33587195 [pid 5065] <... close resumed>) = 0 [pid 5061] umount2("./329", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8346] <... write resumed>) = 4 [pid 5065] rmdir("./322" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8346] close(3 [pid 5065] <... rmdir resumed>) = 0 [pid 8338] <... ftruncate resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./329", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8346] <... close resumed>) = 0 [pid 5065] mkdir("./323", 0777 [pid 8346] symlink("/dev/binderfs", "./binderfs" [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", [pid 8346] <... symlink resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8346] memfd_create("syzkaller", 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] <... mkdir resumed>) = 0 [pid 8346] <... memfd_create resumed>) = 3 [pid 5061] umount2("./329/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8346] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8346] <... mmap resumed>) = 0x7f41e0600000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./329/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./329/binderfs") = 0 [pid 5061] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8338] unlink("./bus" [pid 8339] <... unlink resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5061] <... umount2 resumed>) = 0 [pid 8339] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5061] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8339] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8339] exit_group(0 [pid 8338] <... unlink resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./329/file0", [pid 8346] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8339] <... exit_group resumed>) = ? [pid 8338] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8338] exit_group(0) = ? [pid 8339] +++ exited with 0 +++ [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8339, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5062] umount2("./323", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./323", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] openat(AT_FDCWD, "./329/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] newfstatat(3, "", [pid 5061] <... openat resumed>) = 4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] newfstatat(4, "", [pid 5062] getdents64(3, [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] getdents64(4, [pid 8338] +++ exited with 0 +++ [pid 5062] umount2("./323/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(4, [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8338, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5062] newfstatat(AT_FDCWD, "./323/binderfs", [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] umount2("./324", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] close(4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] unlink("./323/binderfs" [pid 5061] <... close resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 5061] rmdir("./329/file0" [pid 5063] openat(AT_FDCWD, "./324", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, [pid 8346] <... write resumed>) = 2097152 [pid 5063] <... openat resumed>) = 3 [pid 5062] umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(3, "", [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8346] munmap(0x7f41e0600000, 138412032 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./329" [pid 8346] <... munmap resumed>) = 0 [pid 5063] getdents64(3, [pid 5061] <... rmdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] mkdir("./330", 0777) = 0 [pid 8346] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... ioctl resumed>) = 0 [pid 5063] umount2("./324/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = 0 [pid 8346] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8346] ioctl(4, LOOP_SET_FD, 3 [pid 5063] newfstatat(AT_FDCWD, "./324/binderfs", [pid 5065] close(3 [pid 5062] umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... openat resumed>) = 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... close resumed>) = 0 [pid 8346] <... ioctl resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] newfstatat(AT_FDCWD, "./323/file0", [pid 5061] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 8347 attached [pid 8346] close(3 [pid 5063] unlink("./324/binderfs" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8347] set_robust_list(0x55555745a660, 24 [pid 8346] <... close resumed>) = 0 [pid 8346] close(4) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5062] umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./323/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8347] <... set_robust_list resumed>) = 0 [pid 8346] mkdir("./file0", 0777 [pid 5062] newfstatat(4, "", [pid 8347] chdir("./323" [pid 8346] <... mkdir resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8347 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8347] <... chdir resumed>) = 0 [pid 8346] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8347] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] getdents64(4, [pid 8347] <... prctl resumed>) = 0 [pid 8347] setpgid(0, 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8347] <... setpgid resumed>) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./323/file0") = 0 [ 302.277267][ T8346] loop3: detected capacity change from 0 to 4096 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8347] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... umount2 resumed>) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./323" [pid 5063] umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... rmdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./324/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] mkdir("./324", 0777 [pid 5063] umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./324/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8347] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 4 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8346] <... mount resumed>) = 0 [pid 8347] write(3, "1000", 4) = 4 [pid 8346] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] newfstatat(4, "", [pid 5062] <... openat resumed>) = 3 [pid 8347] close(3 [pid 8346] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8347] <... close resumed>) = 0 [pid 8346] chdir("./file0" [pid 5063] getdents64(4, [pid 8347] symlink("/dev/binderfs", "./binderfs" [pid 8346] <... chdir resumed>) = 0 [pid 8347] <... symlink resumed>) = 0 [pid 8346] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8346] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8347] memfd_create("syzkaller", 0 [pid 8346] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] getdents64(4, [pid 8347] <... memfd_create resumed>) = 3 [pid 8347] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8347] <... mmap resumed>) = 0x7f41e0600000 [pid 5063] close(4) = 0 [pid 5063] rmdir("./324/file0") = 0 [pid 5063] getdents64(3, [pid 8346] <... open resumed>) = 4 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8346] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] close(3 [pid 8346] <... open resumed>) = 5 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./324") = 0 [pid 8346] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] mkdir("./325", 0777) = 0 [pid 8346] <... mmap resumed>) = 0x20000000 [pid 8346] ftruncate(4, 33587195 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [ 302.322727][ T8348] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8347] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8346] <... ftruncate resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8346] unlink("./bus" [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8349 attached [pid 8346] <... unlink resumed>) = 0 [pid 8349] set_robust_list(0x55555745a660, 24 [pid 8346] sendfile(-1, -1, NULL, 281474978811909 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8349 [pid 8349] <... set_robust_list resumed>) = 0 [pid 8346] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8349] chdir("./330" [pid 8346] exit_group(0) = ? [pid 8349] <... chdir resumed>) = 0 [pid 8349] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 8349] setpgid(0, 0) = 0 [pid 8349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8349] write(3, "1000", 4 [pid 8347] <... write resumed>) = 2097152 [pid 5062] close(3 [pid 8349] <... write resumed>) = 4 [pid 8349] close(3 [pid 8346] +++ exited with 0 +++ [pid 5062] <... close resumed>) = 0 [pid 8349] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8349] symlink("/dev/binderfs", "./binderfs" [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8346, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8349] <... symlink resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 8349] memfd_create("syzkaller", 0) = 3 [pid 5064] umount2("./329", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8350 [pid 8349] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 8350 attached ) = 0x7f41e0600000 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8350] set_robust_list(0x55555745a660, 24 [pid 8347] munmap(0x7f41e0600000, 138412032 [pid 5064] openat(AT_FDCWD, "./329", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8350] <... set_robust_list resumed>) = 0 [pid 8347] <... munmap resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 8350] chdir("./324" [pid 5064] newfstatat(3, "", [pid 8350] <... chdir resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8350] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] getdents64(3, [pid 8350] <... prctl resumed>) = 0 [pid 8350] setpgid(0, 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8350] <... setpgid resumed>) = 0 [pid 8350] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] umount2("./329/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8350] <... openat resumed>) = 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] close(3 [pid 8350] write(3, "1000", 4 [pid 8347] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] newfstatat(AT_FDCWD, "./329/binderfs", [pid 8350] <... write resumed>) = 4 [pid 8347] <... openat resumed>) = 4 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... close resumed>) = 0 [pid 8350] close(3 [pid 8347] ioctl(4, LOOP_SET_FD, 3 [pid 5064] unlink("./329/binderfs" [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8350] <... close resumed>) = 0 [pid 8350] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 8351 attached ) = 0 [pid 8349] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8347] <... ioctl resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 8350] memfd_create("syzkaller", 0) = 3 [pid 8351] set_robust_list(0x55555745a660, 24 [pid 8350] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8347] close(3 [pid 5064] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8351 [pid 8350] <... mmap resumed>) = 0x7f41e0600000 [pid 8351] <... set_robust_list resumed>) = 0 [pid 8347] <... close resumed>) = 0 [pid 8351] chdir("./325" [pid 8347] close(4 [pid 8351] <... chdir resumed>) = 0 [pid 8347] <... close resumed>) = 0 [pid 8351] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8347] mkdir("./file0", 0777 [pid 8351] <... prctl resumed>) = 0 [pid 8347] <... mkdir resumed>) = 0 [pid 8351] setpgid(0, 0) = 0 [pid 8351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8347] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8351] <... openat resumed>) = 3 [pid 8351] write(3, "1000", 4) = 4 [pid 8351] close(3) = 0 [pid 8351] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8351] memfd_create("syzkaller", 0) = 3 [pid 8351] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5064] <... umount2 resumed>) = 0 [ 302.483256][ T8347] loop4: detected capacity change from 0 to 4096 [pid 5064] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8351] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8350] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8349] <... write resumed>) = 2097152 [pid 5064] newfstatat(AT_FDCWD, "./329/file0", [pid 8349] munmap(0x7f41e0600000, 138412032 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./329/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8349] <... munmap resumed>) = 0 [pid 5064] <... openat resumed>) = 4 [pid 8349] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] newfstatat(4, "", [pid 8349] <... openat resumed>) = 4 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, [pid 8349] ioctl(4, LOOP_SET_FD, 3 [pid 8347] <... mount resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8347] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8347] chdir("./file0") = 0 [pid 8347] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8349] <... ioctl resumed>) = 0 [pid 8347] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] getdents64(4, [pid 8349] close(3 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8349] <... close resumed>) = 0 [pid 5064] close(4) = 0 [pid 8351] <... write resumed>) = 2097152 [pid 8349] close(4 [pid 5064] rmdir("./329/file0") = 0 [pid 8349] <... close resumed>) = 0 [pid 8349] mkdir("./file0", 0777 [pid 5064] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8349] <... mkdir resumed>) = 0 [pid 5064] close(3) = 0 [pid 8351] munmap(0x7f41e0600000, 138412032 [pid 8349] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] rmdir("./329" [pid 8351] <... munmap resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] mkdir("./330", 0777) = 0 [pid 8351] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 8351] <... openat resumed>) = 4 [pid 8347] <... open resumed>) = 4 [pid 5064] ioctl(3, LOOP_CLR_FD [ 302.576628][ T8352] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 302.598971][ T8349] loop0: detected capacity change from 0 to 4096 [pid 8351] ioctl(4, LOOP_SET_FD, 3 [pid 8350] <... write resumed>) = 2097152 [pid 8347] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8347] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8350] munmap(0x7f41e0600000, 138412032 [pid 8347] <... mmap resumed>) = 0x20000000 [pid 8350] <... munmap resumed>) = 0 [pid 8347] ftruncate(4, 33587195 [pid 8350] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8347] <... ftruncate resumed>) = 0 [pid 8351] <... ioctl resumed>) = 0 [pid 8347] unlink("./bus" [pid 8351] close(3) = 0 [pid 8350] ioctl(4, LOOP_SET_FD, 3 [pid 8351] close(4 [pid 8349] <... mount resumed>) = 0 [pid 8351] <... close resumed>) = 0 [pid 8351] mkdir("./file0", 0777 [pid 8349] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8351] <... mkdir resumed>) = 0 [pid 8351] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8349] <... openat resumed>) = 3 [pid 8349] chdir("./file0") = 0 [pid 8349] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8347] <... unlink resumed>) = 0 [pid 8347] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8347] exit_group(0) = ? [pid 8349] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 302.645393][ T8351] loop2: detected capacity change from 0 to 4096 [ 302.666122][ T8353] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 302.666731][ T8350] loop1: detected capacity change from 0 to 4096 [pid 8349] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] <... ioctl resumed>) = 0 [pid 8350] <... ioctl resumed>) = 0 [pid 8349] <... open resumed>) = 4 [pid 5064] close(3 [pid 8347] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8347, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5065] umount2("./323", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./323", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, [pid 8349] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./323/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./323/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./323/binderfs" [pid 8349] <... open resumed>) = 5 [pid 5065] <... unlink resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8350] close(3) = 0 [pid 8350] close(4 [pid 8349] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8355 [pid 8350] <... close resumed>) = 0 [pid 8350] mkdir("./file0", 0777./strace-static-x86_64: Process 8355 attached [pid 5065] umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8355] set_robust_list(0x55555745a660, 24 [pid 8349] <... mmap resumed>) = 0x20000000 [pid 8355] <... set_robust_list resumed>) = 0 [pid 8350] <... mkdir resumed>) = 0 [pid 8349] ftruncate(4, 33587195 [pid 8355] chdir("./330" [pid 8351] <... mount resumed>) = 0 [pid 8351] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8350] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8355] <... chdir resumed>) = 0 [pid 8351] <... openat resumed>) = 3 [pid 8355] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8351] chdir("./file0" [pid 8355] <... prctl resumed>) = 0 [pid 8351] <... chdir resumed>) = 0 [pid 8355] setpgid(0, 0 [pid 8351] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8355] <... setpgid resumed>) = 0 [pid 8351] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8351] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8355] <... openat resumed>) = 3 [pid 8349] <... ftruncate resumed>) = 0 [pid 8355] write(3, "1000", 4 [pid 8351] <... open resumed>) = 4 [pid 8349] unlink("./bus" [pid 8351] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8355] <... write resumed>) = 4 [pid 8355] close(3) = 0 [pid 8355] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8351] <... open resumed>) = 5 [pid 8349] <... unlink resumed>) = 0 [pid 8349] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... umount2 resumed>) = 0 [ 302.737832][ T8354] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8351] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = -1 EBADF (Bad file descriptor) [pid 8349] exit_group(0 [pid 8355] memfd_create("syzkaller", 0 [pid 8351] ftruncate(4, 33587195 [pid 8349] <... exit_group resumed>) = ? [pid 8355] <... memfd_create resumed>) = 3 [pid 8355] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5065] umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./323/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8350] <... mount resumed>) = 0 [pid 5065] umount2("./323/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./323/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, [pid 8351] <... ftruncate resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8351] unlink("./bus" [pid 8350] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8349] +++ exited with 0 +++ [pid 5065] getdents64(4, [pid 8350] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8349, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 8350] chdir("./file0" [pid 5065] close(4 [pid 8350] <... chdir resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 8350] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] rmdir("./323/file0" [pid 8350] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] <... rmdir resumed>) = 0 [pid 5061] umount2("./330", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8350] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./330", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] getdents64(3, [pid 5061] <... openat resumed>) = 3 [pid 8351] <... unlink resumed>) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8351] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] close(3 [pid 5061] newfstatat(3, "", [pid 8351] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] <... close resumed>) = 0 [pid 8351] exit_group(0 [pid 5065] rmdir("./323" [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8351] <... exit_group resumed>) = ? [pid 5065] <... rmdir resumed>) = 0 [pid 8350] <... open resumed>) = 4 [pid 5061] getdents64(3, [pid 8350] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8350] <... open resumed>) = 5 [ 302.801535][ T8356] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] mkdir("./324", 0777 [pid 5061] umount2("./330/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8350] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] <... mkdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8355] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8351] +++ exited with 0 +++ [pid 8350] <... mmap resumed>) = 0x20000000 [pid 8350] ftruncate(4, 33587195) = 0 [pid 8350] unlink("./bus" [pid 5061] newfstatat(AT_FDCWD, "./330/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8351, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5061] unlink("./330/binderfs") = 0 [pid 8350] <... unlink resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] umount2("./325", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8350] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8350] exit_group(0 [pid 5065] <... openat resumed>) = 3 [pid 8350] <... exit_group resumed>) = ? [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] openat(AT_FDCWD, "./325", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8350] +++ exited with 0 +++ [pid 5063] getdents64(3, [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8350, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./325/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./324", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./324", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] newfstatat(AT_FDCWD, "./325/binderfs", [pid 5061] <... umount2 resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] newfstatat(3, "", [pid 5061] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] unlink("./325/binderfs" [pid 5062] getdents64(3, [pid 5063] <... unlink resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./330/file0", [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./324/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./324/binderfs", [pid 5061] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] unlink("./324/binderfs" [pid 5061] openat(AT_FDCWD, "./330/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8355] <... write resumed>) = 2097152 [pid 5062] <... unlink resumed>) = 0 [pid 5061] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = 0 [pid 5062] umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(4, "", [pid 8355] munmap(0x7f41e0600000, 138412032 [pid 5063] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] newfstatat(AT_FDCWD, "./325/file0", [pid 5061] getdents64(4, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] close(4) = 0 [pid 5061] rmdir("./330/file0" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... rmdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./325/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5061] close(3) = 0 [pid 5061] rmdir("./330") = 0 [ 302.858696][ T28] kauditd_printk_skb: 106 callbacks suppressed [ 302.858714][ T28] audit: type=1800 audit(1708423455.390:4909): pid=8350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop1" ino=18 res=0 errno=0 [pid 8355] <... munmap resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 5062] <... umount2 resumed>) = 0 [pid 5061] mkdir("./331", 0777 [pid 8355] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... mkdir resumed>) = 0 [pid 8355] <... openat resumed>) = 4 [pid 5063] getdents64(4, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 8355] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] newfstatat(AT_FDCWD, "./324/file0", [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5063] getdents64(4, [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./325/file0") = 0 [pid 5062] umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(3, [pid 5062] openat(AT_FDCWD, "./324/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5063] close(3 [pid 5062] newfstatat(4, "", [pid 5063] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] rmdir("./325" [pid 5062] getdents64(4, [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] mkdir("./326", 0777 [pid 5062] close(4 [pid 5063] <... mkdir resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./324/file0") = 0 [pid 5062] getdents64(3, [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5062] close(3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] <... close resumed>) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 5062] rmdir("./324") = 0 [pid 5062] mkdir("./325", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8355] <... ioctl resumed>) = 0 [pid 5065] close(3 [pid 8355] close(3 [pid 5062] <... openat resumed>) = 3 [pid 5065] <... close resumed>) = 0 [pid 8355] <... close resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8355] close(4 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... ioctl resumed>) = 0 [ 302.947734][ T8355] loop3: detected capacity change from 0 to 4096 [pid 5061] close(3./strace-static-x86_64: Process 8357 attached [pid 8355] <... close resumed>) = 0 [pid 8357] set_robust_list(0x55555745a660, 24 [pid 8355] mkdir("./file0", 0777 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8357 [pid 8357] <... set_robust_list resumed>) = 0 [pid 8355] <... mkdir resumed>) = 0 [pid 8357] chdir("./324" [pid 8355] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8357] <... chdir resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8357] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8357] setpgid(0, 0./strace-static-x86_64: Process 8358 attached [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8358 [pid 8358] set_robust_list(0x55555745a660, 24 [pid 8357] <... setpgid resumed>) = 0 [pid 8358] <... set_robust_list resumed>) = 0 [pid 8358] chdir("./331" [pid 8357] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8358] <... chdir resumed>) = 0 [pid 8357] <... openat resumed>) = 3 [pid 8358] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8357] write(3, "1000", 4 [pid 8358] setpgid(0, 0 [pid 8357] <... write resumed>) = 4 [pid 8358] <... setpgid resumed>) = 0 [pid 8357] close(3 [pid 8358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8357] <... close resumed>) = 0 [pid 8357] symlink("/dev/binderfs", "./binderfs" [pid 8358] write(3, "1000", 4) = 4 [pid 8358] close(3) = 0 [pid 8357] <... symlink resumed>) = 0 [pid 8358] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8358] memfd_create("syzkaller", 0) = 3 [pid 8358] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8357] memfd_create("syzkaller", 0 [pid 8355] <... mount resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 8355] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8357] <... memfd_create resumed>) = 3 [pid 8355] <... openat resumed>) = 3 [pid 5063] close(3 [pid 5062] close(3 [pid 8357] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8355] chdir("./file0" [pid 5063] <... close resumed>) = 0 [pid 8357] <... mmap resumed>) = 0x7f41e0600000 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8355] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 8360 attached [pid 8355] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8360 [pid 8355] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8360] set_robust_list(0x55555745a660, 24) = 0 [pid 8355] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8360] chdir("./326") = 0 [pid 8360] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8360] setpgid(0, 0) = 0 [pid 8360] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... close resumed>) = 0 [pid 8360] <... openat resumed>) = 3 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8361 attached , child_tidptr=0x55555745a650) = 8361 [pid 8361] set_robust_list(0x55555745a660, 24) = 0 [pid 8361] chdir("./325") = 0 [pid 8361] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8361] setpgid(0, 0) = 0 [pid 8361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8361] write(3, "1000", 4) = 4 [pid 8361] close(3 [pid 8360] write(3, "1000", 4 [pid 8361] <... close resumed>) = 0 [pid 8360] <... write resumed>) = 4 [pid 8361] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8360] close(3 [ 303.068175][ T8359] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8361] memfd_create("syzkaller", 0) = 3 [pid 8361] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8360] <... close resumed>) = 0 [pid 8355] <... open resumed>) = 4 [pid 8360] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8358] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8355] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8360] memfd_create("syzkaller", 0 [pid 8357] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8355] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8360] <... memfd_create resumed>) = 3 [pid 8355] <... mmap resumed>) = 0x20000000 [pid 8360] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8355] ftruncate(4, 33587195 [pid 8360] <... mmap resumed>) = 0x7f41e0600000 [ 303.122413][ T28] audit: type=1800 audit(1708423455.650:4910): pid=8355 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [pid 8361] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8355] <... ftruncate resumed>) = 0 [pid 8360] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8355] unlink("./bus") = 0 [pid 8355] sendfile(-1, -1, NULL, 281474978811909 [pid 8358] <... write resumed>) = 2097152 [pid 8357] <... write resumed>) = 2097152 [pid 8355] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8357] munmap(0x7f41e0600000, 138412032 [pid 8355] exit_group(0 [pid 8358] munmap(0x7f41e0600000, 138412032 [pid 8357] <... munmap resumed>) = 0 [pid 8355] <... exit_group resumed>) = ? [pid 8358] <... munmap resumed>) = 0 [pid 8358] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 303.200221][ T28] audit: type=1800 audit(1708423455.670:4911): pid=8355 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [pid 8358] ioctl(4, LOOP_SET_FD, 3 [pid 8357] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8355] +++ exited with 0 +++ [pid 8357] ioctl(4, LOOP_SET_FD, 3 [pid 8358] <... ioctl resumed>) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8355, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5064] umount2("./330", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8358] close(3 [pid 5064] openat(AT_FDCWD, "./330", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8360] <... write resumed>) = 2097152 [pid 8358] <... close resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 8360] munmap(0x7f41e0600000, 138412032 [pid 8358] close(4 [pid 8357] <... ioctl resumed>) = 0 [pid 5064] newfstatat(3, "", [pid 8358] <... close resumed>) = 0 [pid 8358] mkdir("./file0", 0777) = 0 [pid 8358] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8361] <... write resumed>) = 2097152 [pid 8360] <... munmap resumed>) = 0 [pid 8357] close(3 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8361] munmap(0x7f41e0600000, 138412032 [pid 8357] <... close resumed>) = 0 [pid 5064] getdents64(3, [pid 8361] <... munmap resumed>) = 0 [pid 8360] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8357] close(4 [pid 8360] <... openat resumed>) = 4 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [ 303.244379][ T8358] loop0: detected capacity change from 0 to 4096 [ 303.259224][ T8357] loop4: detected capacity change from 0 to 4096 [ 303.271086][ T28] audit: type=1800 audit(1708423455.700:4912): pid=8355 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [pid 5064] umount2("./330/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8357] <... close resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8361] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8361] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8360] ioctl(4, LOOP_SET_FD, 3 [pid 5064] newfstatat(AT_FDCWD, "./330/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8361] close(3 [pid 8357] mkdir("./file0", 0777) = 0 [pid 8361] <... close resumed>) = 0 [pid 8361] close(4 [pid 5064] unlink("./330/binderfs" [pid 8361] <... close resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 8361] mkdir("./file0", 0777 [pid 5064] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8361] <... mkdir resumed>) = 0 [pid 8357] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8361] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8360] <... ioctl resumed>) = 0 [pid 8358] <... mount resumed>) = 0 [pid 8360] close(3 [pid 8358] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8360] <... close resumed>) = 0 [pid 8358] <... openat resumed>) = 3 [pid 8360] close(4 [pid 8358] chdir("./file0" [pid 8360] <... close resumed>) = 0 [pid 8358] <... chdir resumed>) = 0 [pid 8360] mkdir("./file0", 0777) = 0 [pid 8358] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8360] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8358] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 303.309819][ T8362] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 303.319671][ T8361] loop1: detected capacity change from 0 to 4096 [ 303.328635][ T8360] loop2: detected capacity change from 0 to 4096 [pid 8358] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8357] <... mount resumed>) = 0 [pid 8357] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8357] chdir("./file0") = 0 [pid 8358] <... open resumed>) = 4 [pid 8357] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8358] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8357] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8358] <... open resumed>) = 5 [pid 5064] <... umount2 resumed>) = 0 [pid 8358] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 5064] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8361] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8361] <... openat resumed>) = 3 [pid 8360] <... mount resumed>) = 0 [pid 5064] newfstatat(AT_FDCWD, "./330/file0", [pid 8361] chdir("./file0" [pid 8360] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8361] <... chdir resumed>) = 0 [pid 8360] <... openat resumed>) = 3 [pid 5064] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8361] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8360] chdir("./file0" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8361] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8360] <... chdir resumed>) = 0 [pid 8358] +++ exited with 0 +++ [pid 5064] openat(AT_FDCWD, "./330/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8361] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8360] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] <... openat resumed>) = 4 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8358, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 8360] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8357] <... open resumed>) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8360] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8357] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] getdents64(4, [pid 5061] umount2("./331", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8361] <... open resumed>) = 4 [pid 8357] <... open resumed>) = 5 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8361] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] getdents64(4, [pid 5061] openat(AT_FDCWD, "./331", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] <... openat resumed>) = 3 [pid 8361] <... open resumed>) = 5 [pid 8357] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] close(4 [pid 5061] newfstatat(3, "", [pid 5064] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] rmdir("./330/file0" [pid 5061] getdents64(3, [pid 8361] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... rmdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8361] <... mmap resumed>) = 0x20000000 [pid 8357] <... mmap resumed>) = 0x20000000 [pid 5064] getdents64(3, [pid 5061] umount2("./331/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] close(3 [pid 5061] newfstatat(AT_FDCWD, "./331/binderfs", [pid 5064] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] rmdir("./330" [pid 5061] unlink("./331/binderfs" [pid 5064] <... rmdir resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [ 303.431607][ T8365] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8357] ftruncate(4, 33587195 [pid 5064] mkdir("./331", 0777 [pid 5061] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8361] ftruncate(4, 33587195 [pid 8360] <... open resumed>) = 4 [pid 8357] <... ftruncate resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 8360] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8357] unlink("./bus" [pid 8360] <... open resumed>) = 5 [pid 8360] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8357] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] <... openat resumed>) = 3 [pid 8357] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5061] <... umount2 resumed>) = 0 [pid 8361] <... ftruncate resumed>) = 0 [pid 8357] exit_group(0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8357] <... exit_group resumed>) = ? [pid 8360] unlink("./bus" [pid 5061] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./331/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./331/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8361] unlink("./bus" [pid 8360] <... unlink resumed>) = 0 [ 303.483667][ T28] audit: type=1800 audit(1708423455.930:4914): pid=8358 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 303.506404][ T28] audit: type=1800 audit(1708423455.930:4915): pid=8358 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [pid 5061] <... openat resumed>) = 4 [pid 8360] sendfile(-1, -1, NULL, 281474978811909 [pid 5061] newfstatat(4, "", [pid 8360] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8360] exit_group(0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8360] <... exit_group resumed>) = ? [pid 8357] +++ exited with 0 +++ [pid 5061] getdents64(4, [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8357, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, [pid 5065] umount2("./324", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8361] <... unlink resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] close(4 [pid 5065] openat(AT_FDCWD, "./324", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5061] rmdir("./331/file0" [pid 5065] newfstatat(3, "", [pid 5061] <... rmdir resumed>) = 0 [pid 8361] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 5065] getdents64(3, [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] close(3 [pid 5065] umount2("./324/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] <... close resumed>) = 0 [pid 5065] newfstatat(AT_FDCWD, "./324/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./324/binderfs" [pid 5061] rmdir("./331" [pid 5065] <... unlink resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5065] umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8361] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [ 303.530651][ T28] audit: type=1800 audit(1708423455.980:4916): pid=8357 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop4" ino=18 res=0 errno=0 [pid 5061] mkdir("./332", 0777) = 0 [pid 8361] exit_group(0) = ? [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 303.568209][ T28] audit: type=1800 audit(1708423455.990:4917): pid=8357 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop4" ino=18 res=0 errno=0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8361] +++ exited with 0 +++ [pid 8360] +++ exited with 0 +++ [pid 5064] <... ioctl resumed>) = 0 [pid 5064] close(3 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8361, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5064] <... close resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8360, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5063] umount2("./326", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./326", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./326/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./326/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./326/binderfs") = 0 [pid 5063] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] umount2("./325", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./325", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... openat resumed>) = 3 [pid 5065] newfstatat(AT_FDCWD, "./324/file0", [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8366 [pid 5062] newfstatat(3, "", [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] umount2("./324/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(3, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 303.611716][ T28] audit: type=1800 audit(1708423455.990:4918): pid=8361 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop1" ino=18 res=0 errno=0 ./strace-static-x86_64: Process 8366 attached [pid 5065] openat(AT_FDCWD, "./324/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] <... ioctl resumed>) = 0 [pid 5062] umount2("./325/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./326/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./326/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... openat resumed>) = 4 [pid 5063] <... openat resumed>) = 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] close(3 [pid 8366] set_robust_list(0x55555745a660, 24 [pid 5065] newfstatat(4, "", [pid 5063] newfstatat(4, "", [pid 5062] newfstatat(AT_FDCWD, "./325/binderfs", [pid 8366] <... set_robust_list resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... close resumed>) = 0 [pid 8366] chdir("./331" [pid 5065] getdents64(4, [pid 5063] getdents64(4, [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8366] <... chdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] unlink("./325/binderfs" [pid 8366] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] getdents64(4, [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8366] <... prctl resumed>) = 0 [pid 5063] close(4 [pid 5062] <... unlink resumed>) = 0 [pid 8366] setpgid(0, 0 [pid 5065] close(4 [pid 5063] <... close resumed>) = 0 [pid 5062] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8367 attached [pid 8366] <... setpgid resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5063] rmdir("./326/file0" [pid 8367] set_robust_list(0x55555745a660, 24 [pid 8366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] rmdir("./324/file0" [pid 5063] <... rmdir resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8367 [pid 8367] <... set_robust_list resumed>) = 0 [pid 8367] chdir("./332" [pid 8366] <... openat resumed>) = 3 [pid 5065] <... rmdir resumed>) = 0 [pid 8366] write(3, "1000", 4 [pid 5065] getdents64(3, [pid 8367] <... chdir resumed>) = 0 [pid 8366] <... write resumed>) = 4 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(3, [pid 8367] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] close(3 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8367] <... prctl resumed>) = 0 [pid 8366] close(3 [pid 5065] <... close resumed>) = 0 [pid 5063] close(3 [pid 8367] setpgid(0, 0 [pid 8366] <... close resumed>) = 0 [pid 5065] rmdir("./324" [pid 8367] <... setpgid resumed>) = 0 [pid 8366] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... close resumed>) = 0 [pid 8367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... rmdir resumed>) = 0 [pid 5063] rmdir("./326" [pid 8366] <... symlink resumed>) = 0 [pid 5065] mkdir("./325", 0777 [pid 5063] <... rmdir resumed>) = 0 [pid 8367] <... openat resumed>) = 3 [pid 5065] <... mkdir resumed>) = 0 [pid 8367] write(3, "1000", 4 [pid 8366] memfd_create("syzkaller", 0 [pid 5063] mkdir("./327", 0777 [pid 8367] <... write resumed>) = 4 [pid 8367] close(3 [pid 8366] <... memfd_create resumed>) = 3 [pid 8366] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8367] <... close resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] <... mkdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 8367] symlink("/dev/binderfs", "./binderfs" [pid 8366] <... mmap resumed>) = 0x7f41e0600000 [pid 5062] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8367] <... symlink resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 8367] memfd_create("syzkaller", 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8367] <... memfd_create resumed>) = 3 [pid 8366] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] newfstatat(AT_FDCWD, "./325/file0", [pid 8367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8367] <... mmap resumed>) = 0x7f41e0600000 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8366] <... write resumed>) = 2097152 [pid 5062] openat(AT_FDCWD, "./325/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... ioctl resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./325/file0") = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8367] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] close(3 [pid 5062] close(3 [pid 8366] munmap(0x7f41e0600000, 138412032 [pid 5065] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8366] <... munmap resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] rmdir("./325") = 0 [pid 5062] mkdir("./326", 0777) = 0 [pid 8366] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 8368 attached [pid 8368] set_robust_list(0x55555745a660, 24) = 0 [pid 8368] chdir("./325") = 0 [pid 8368] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8366] <... openat resumed>) = 4 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8368 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8368] setpgid(0, 0) = 0 [pid 5062] <... openat resumed>) = 3 [pid 8368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8366] ioctl(4, LOOP_SET_FD, 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8368] <... openat resumed>) = 3 [pid 8366] <... ioctl resumed>) = 0 [pid 8368] write(3, "1000", 4 [pid 5063] <... ioctl resumed>) = 0 [pid 8368] <... write resumed>) = 4 [pid 8366] close(3 [pid 8368] close(3 [pid 8366] <... close resumed>) = 0 [pid 8368] <... close resumed>) = 0 [pid 8366] close(4 [pid 8368] symlink("/dev/binderfs", "./binderfs" [pid 8366] <... close resumed>) = 0 [pid 5063] close(3 [pid 8368] <... symlink resumed>) = 0 [pid 8366] mkdir("./file0", 0777 [pid 5063] <... close resumed>) = 0 [pid 8368] memfd_create("syzkaller", 0 [pid 8366] <... mkdir resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8368] <... memfd_create resumed>) = 3 [pid 8366] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, ""./strace-static-x86_64: Process 8369 attached [pid 8368] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8369] set_robust_list(0x55555745a660, 24) = 0 [pid 8368] <... mmap resumed>) = 0x7f41e0600000 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8369 [pid 8369] chdir("./327") = 0 [pid 8369] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8367] <... write resumed>) = 2097152 [pid 8369] setpgid(0, 0) = 0 [pid 8367] munmap(0x7f41e0600000, 138412032 [ 303.819503][ T8366] loop3: detected capacity change from 0 to 4096 [pid 8369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8367] <... munmap resumed>) = 0 [pid 8369] <... openat resumed>) = 3 [pid 8367] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] <... ioctl resumed>) = 0 [pid 8369] write(3, "1000", 4 [pid 8367] <... openat resumed>) = 4 [pid 8369] <... write resumed>) = 4 [pid 8367] ioctl(4, LOOP_SET_FD, 3 [pid 8369] close(3) = 0 [pid 5062] close(3 [pid 8369] symlink("/dev/binderfs", "./binderfs" [pid 8367] <... ioctl resumed>) = 0 [pid 8369] <... symlink resumed>) = 0 [pid 8368] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8367] close(3 [pid 8366] <... mount resumed>) = 0 [pid 8366] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8369] memfd_create("syzkaller", 0 [pid 8367] <... close resumed>) = 0 [pid 8366] <... openat resumed>) = 3 [pid 5062] <... close resumed>) = 0 [pid 8366] chdir("./file0" [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8366] <... chdir resumed>) = 0 [pid 8366] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8367] close(4) = 0 [pid 8366] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8367] mkdir("./file0", 0777 [pid 8366] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8371 [pid 8369] <... memfd_create resumed>) = 3 [pid 8367] <... mkdir resumed>) = 0 [pid 8369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8367] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, ""./strace-static-x86_64: Process 8371 attached [pid 8369] <... mmap resumed>) = 0x7f41e0600000 [pid 8371] set_robust_list(0x55555745a660, 24) = 0 [pid 8371] chdir("./326") = 0 [ 303.896889][ T8367] loop0: detected capacity change from 0 to 4096 [ 303.898778][ T8370] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8371] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8371] setpgid(0, 0) = 0 [pid 8371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8366] <... open resumed>) = 4 [pid 8366] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8366] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 3 [pid 8366] unlink("./bus" [pid 8371] write(3, "1000", 4) = 4 [pid 8371] close(3 [pid 8367] <... mount resumed>) = 0 [pid 8366] <... unlink resumed>) = 0 [pid 8366] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8366] exit_group(0) = ? [pid 8371] <... close resumed>) = 0 [pid 8367] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8371] symlink("/dev/binderfs", "./binderfs" [pid 8367] <... openat resumed>) = 3 [pid 8371] <... symlink resumed>) = 0 [pid 8367] chdir("./file0" [pid 8369] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8367] <... chdir resumed>) = 0 [pid 8371] memfd_create("syzkaller", 0) = 3 [pid 8367] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8368] <... write resumed>) = 2097152 [pid 8367] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8366] +++ exited with 0 +++ [pid 8371] <... mmap resumed>) = 0x7f41e0600000 [pid 8367] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8366, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5064] umount2("./331", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./331", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./331/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./331/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 303.962551][ T8372] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8368] munmap(0x7f41e0600000, 138412032 [pid 5064] unlink("./331/binderfs") = 0 [pid 5064] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8368] <... munmap resumed>) = 0 [pid 8367] <... open resumed>) = 4 [pid 8368] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8367] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8368] <... openat resumed>) = 4 [pid 8368] ioctl(4, LOOP_SET_FD, 3 [pid 8367] <... open resumed>) = 5 [pid 8367] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 8367] sendfile(-1, -1, NULL, 281474978811909 [pid 8368] close(3 [pid 8367] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8368] <... close resumed>) = 0 [pid 8367] exit_group(0 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./331/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./331/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8367] <... exit_group resumed>) = ? [pid 5064] <... openat resumed>) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, [pid 8368] close(4 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8371] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8369] <... write resumed>) = 2097152 [pid 8368] <... close resumed>) = 0 [pid 8367] +++ exited with 0 +++ [pid 8369] munmap(0x7f41e0600000, 138412032 [pid 8368] mkdir("./file0", 0777 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8367, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 8368] <... mkdir resumed>) = 0 [ 304.044970][ T8368] loop4: detected capacity change from 0 to 4096 [pid 5064] close(4 [pid 5061] umount2("./332", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8369] <... munmap resumed>) = 0 [pid 8368] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] rmdir("./331/file0" [pid 5061] openat(AT_FDCWD, "./332", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, [pid 5061] <... openat resumed>) = 3 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] newfstatat(3, "", [pid 8369] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8369] ioctl(4, LOOP_SET_FD, 3 [pid 5061] getdents64(3, [pid 5064] close(3 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8369] <... ioctl resumed>) = 0 [pid 5061] umount2("./332/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8369] close(3) = 0 [pid 5064] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./332/binderfs", [pid 5064] rmdir("./331" [pid 8369] close(4) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 8369] mkdir("./file0", 0777 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8369] <... mkdir resumed>) = 0 [pid 5061] unlink("./332/binderfs") = 0 [pid 5061] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8369] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] mkdir("./332", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8371] <... write resumed>) = 2097152 [pid 5061] <... umount2 resumed>) = 0 [pid 5061] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./332/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 304.111006][ T8369] loop2: detected capacity change from 0 to 4096 [ 304.150520][ T8373] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5061] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8371] munmap(0x7f41e0600000, 138412032 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./332/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./332/file0") = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./332") = 0 [pid 5061] mkdir("./333", 0777 [pid 8371] <... munmap resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 8371] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8368] <... mount resumed>) = 0 [pid 8371] <... openat resumed>) = 4 [pid 8371] ioctl(4, LOOP_SET_FD, 3 [pid 8368] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8371] <... ioctl resumed>) = 0 [pid 8369] <... mount resumed>) = 0 [pid 8368] <... openat resumed>) = 3 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8371] close(3 [pid 8369] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8368] chdir("./file0" [pid 8371] <... close resumed>) = 0 [pid 8369] <... openat resumed>) = 3 [pid 8368] <... chdir resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 8371] close(4 [pid 8369] chdir("./file0" [pid 8371] <... close resumed>) = 0 [pid 8369] <... chdir resumed>) = 0 [pid 8368] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8371] mkdir("./file0", 0777 [pid 8369] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8368] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8369] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8368] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8371] <... mkdir resumed>) = 0 [pid 8368] <... open resumed>) = 4 [pid 8368] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8371] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [ 304.162166][ T8374] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 304.186707][ T8371] loop1: detected capacity change from 0 to 4096 [pid 8368] <... open resumed>) = 5 [pid 8369] <... open resumed>) = 4 [pid 5064] <... ioctl resumed>) = 0 [pid 8368] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8369] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8368] <... mmap resumed>) = 0x20000000 [pid 8369] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8369] unlink("./bus" [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8368] <... ftruncate resumed>) = 0 ./strace-static-x86_64: Process 8375 attached [pid 8369] <... unlink resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8369] sendfile(-1, -1, NULL, 281474978811909 [pid 8375] set_robust_list(0x55555745a660, 24 [pid 8369] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8375] <... set_robust_list resumed>) = 0 [pid 8369] exit_group(0 [pid 8375] chdir("./332" [pid 8369] <... exit_group resumed>) = ? [pid 8375] <... chdir resumed>) = 0 [pid 8375] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8375] setpgid(0, 0 [pid 8368] unlink("./bus" [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8375 [pid 8375] <... setpgid resumed>) = 0 [pid 8375] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8375] write(3, "1000", 4) = 4 [pid 8375] close(3) = 0 [pid 8369] +++ exited with 0 +++ [pid 5061] close(3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8369, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 8375] symlink("/dev/binderfs", "./binderfs" [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8375] <... symlink resumed>) = 0 [pid 8368] <... unlink resumed>) = 0 [pid 8368] sendfile(-1, -1, NULL, 281474978811909./strace-static-x86_64: Process 8377 attached [pid 8375] memfd_create("syzkaller", 0 [pid 8368] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5063] umount2("./327", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8377 [pid 8377] set_robust_list(0x55555745a660, 24) = 0 [pid 8375] <... memfd_create resumed>) = 3 [pid 8368] exit_group(0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8368] <... exit_group resumed>) = ? [pid 5063] openat(AT_FDCWD, "./327", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./327/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./327/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./327/binderfs") = 0 [pid 5063] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8377] chdir("./333" [pid 8375] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8377] <... chdir resumed>) = 0 [pid 8377] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8375] <... mmap resumed>) = 0x7f41e0600000 [pid 8377] <... prctl resumed>) = 0 [pid 8377] setpgid(0, 0 [pid 8371] <... mount resumed>) = 0 [pid 8371] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8377] <... setpgid resumed>) = 0 [pid 8375] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8371] chdir("./file0" [pid 8368] +++ exited with 0 +++ [pid 5063] <... umount2 resumed>) = 0 [pid 8377] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8368, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 8371] <... chdir resumed>) = 0 [pid 8377] <... openat resumed>) = 3 [pid 8371] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] <... restart_syscall resumed>) = 0 [pid 8371] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8371] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8377] write(3, "1000", 4 [pid 5065] umount2("./325", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8377] <... write resumed>) = 4 [pid 5065] openat(AT_FDCWD, "./325", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8377] close(3) = 0 [pid 5065] <... openat resumed>) = 3 [pid 8377] symlink("/dev/binderfs", "./binderfs" [pid 5065] newfstatat(3, "", [pid 8377] <... symlink resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./325/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./325/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./325/binderfs") = 0 [pid 8377] memfd_create("syzkaller", 0 [pid 5065] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./327/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8377] <... memfd_create resumed>) = 3 [pid 8371] <... open resumed>) = 4 [pid 5063] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8377] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8371] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8377] <... mmap resumed>) = 0x7f41e0600000 [pid 8371] <... open resumed>) = 5 [ 304.310002][ T8376] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] openat(AT_FDCWD, "./327/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8371] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] <... openat resumed>) = 4 [pid 8371] <... mmap resumed>) = 0x20000000 [pid 8371] ftruncate(4, 33587195 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8371] <... ftruncate resumed>) = 0 [pid 5063] close(4 [pid 8371] unlink("./bus" [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./327/file0") = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8371] <... unlink resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 8377] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8371] sendfile(-1, -1, NULL, 281474978811909 [pid 5063] close(3 [pid 5065] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8371] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8371] exit_group(0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./325/file0", [pid 8371] <... exit_group resumed>) = ? [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... close resumed>) = 0 [pid 8375] <... write resumed>) = 2097152 [pid 5065] umount2("./325/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] rmdir("./327" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... rmdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./325/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] mkdir("./328", 0777 [pid 5065] <... openat resumed>) = 4 [pid 5063] <... mkdir resumed>) = 0 [pid 8375] munmap(0x7f41e0600000, 138412032 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] getdents64(4, [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8371] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8371, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8375] <... munmap resumed>) = 0 [pid 5065] getdents64(4, [pid 8375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8375] <... openat resumed>) = 4 [pid 5065] close(4 [pid 8375] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./325/file0" [pid 5062] umount2("./326", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./326", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./326/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8377] <... write resumed>) = 2097152 [pid 8375] <... ioctl resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, [pid 8377] munmap(0x7f41e0600000, 138412032 [pid 8375] close(3 [pid 8377] <... munmap resumed>) = 0 [pid 8375] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] newfstatat(AT_FDCWD, "./326/binderfs", [pid 5065] close(3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8375] close(4 [pid 5065] <... close resumed>) = 0 [pid 5062] unlink("./326/binderfs" [pid 8377] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8375] <... close resumed>) = 0 [pid 5065] rmdir("./325" [pid 8377] <... openat resumed>) = 4 [pid 5065] <... rmdir resumed>) = 0 [pid 8375] mkdir("./file0", 0777 [pid 5062] <... unlink resumed>) = 0 [pid 5065] mkdir("./326", 0777 [pid 5063] <... ioctl resumed>) = 0 [pid 5062] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... mkdir resumed>) = 0 [pid 8377] ioctl(4, LOOP_SET_FD, 3 [pid 8375] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [ 304.416147][ T8375] loop3: detected capacity change from 0 to 4096 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8375] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, ""./strace-static-x86_64: Process 8378 attached [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8378 [pid 5062] <... umount2 resumed>) = 0 [pid 8378] set_robust_list(0x55555745a660, 24 [pid 8377] <... ioctl resumed>) = 0 [pid 8378] <... set_robust_list resumed>) = 0 [pid 8377] close(3 [pid 5062] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8378] chdir("./328") = 0 [pid 8378] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8377] <... close resumed>) = 0 [pid 8378] <... prctl resumed>) = 0 [pid 8378] setpgid(0, 0 [pid 8377] close(4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8378] <... setpgid resumed>) = 0 [pid 8377] <... close resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./326/file0", [pid 8378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8377] mkdir("./file0", 0777 [pid 8375] <... mount resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8378] <... openat resumed>) = 3 [pid 8375] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8377] <... mkdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8375] <... openat resumed>) = 3 [pid 8378] write(3, "1000", 4 [pid 5062] openat(AT_FDCWD, "./326/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8375] chdir("./file0") = 0 [pid 5062] <... openat resumed>) = 4 [pid 8378] <... write resumed>) = 4 [pid 8375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5062] newfstatat(4, "", [pid 8378] close(3) = 0 [pid 8377] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8375] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8378] symlink("/dev/binderfs", "./binderfs" [pid 8375] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8378] <... symlink resumed>) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 8378] memfd_create("syzkaller", 0 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8378] <... memfd_create resumed>) = 3 [pid 5062] close(4) = 0 [pid 8378] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8375] <... open resumed>) = 4 [pid 5062] rmdir("./326/file0" [pid 8378] <... mmap resumed>) = 0x7f41e0600000 [pid 8375] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] <... rmdir resumed>) = 0 [ 304.464607][ T8377] loop0: detected capacity change from 0 to 4096 [ 304.492451][ T8379] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8375] <... open resumed>) = 5 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 5062] rmdir("./326" [pid 5065] close(3) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8375] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8375] <... mmap resumed>) = 0x20000000 [pid 5062] mkdir("./327", 0777) = 0 [pid 8375] ftruncate(4, 33587195 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 8380 attached [pid 8380] set_robust_list(0x55555745a660, 24 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8380 [pid 8380] <... set_robust_list resumed>) = 0 [pid 8380] chdir("./326" [pid 8375] <... ftruncate resumed>) = 0 [pid 8380] <... chdir resumed>) = 0 [pid 8380] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8380] setpgid(0, 0 [pid 8375] unlink("./bus" [pid 8380] <... setpgid resumed>) = 0 [pid 8380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8380] write(3, "1000", 4) = 4 [pid 8375] <... unlink resumed>) = 0 [pid 8380] close(3) = 0 [pid 8380] symlink("/dev/binderfs", "./binderfs" [pid 8375] sendfile(-1, -1, NULL, 281474978811909 [pid 8380] <... symlink resumed>) = 0 [pid 8375] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8375] exit_group(0) = ? [pid 8380] memfd_create("syzkaller", 0) = 3 [pid 8380] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8378] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8377] <... mount resumed>) = 0 [pid 8377] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8377] chdir("./file0") = 0 [pid 8377] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8375] +++ exited with 0 +++ [pid 8377] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8377] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8375, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [ 304.591119][ T8381] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] umount2("./332", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... ioctl resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./332", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./332/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./332/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./332/binderfs") = 0 [pid 5064] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8377] <... open resumed>) = 4 [pid 8377] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] close(3) = 0 [pid 8377] <... open resumed>) = 5 [pid 8377] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555745a650) = 8382 [pid 8377] <... mmap resumed>) = 0x20000000 ./strace-static-x86_64: Process 8382 attached [pid 8382] set_robust_list(0x55555745a660, 24) = 0 [pid 8377] ftruncate(4, 33587195 [pid 8382] chdir("./327" [pid 8380] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8382] <... chdir resumed>) = 0 [pid 8377] <... ftruncate resumed>) = 0 [pid 8382] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8378] <... write resumed>) = 2097152 [pid 8382] <... prctl resumed>) = 0 [pid 8378] munmap(0x7f41e0600000, 138412032 [pid 8377] unlink("./bus" [pid 8382] setpgid(0, 0) = 0 [pid 8382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] <... umount2 resumed>) = 0 [pid 8382] <... openat resumed>) = 3 [pid 5064] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8382] write(3, "1000", 4 [pid 8378] <... munmap resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8382] <... write resumed>) = 4 [pid 8378] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] newfstatat(AT_FDCWD, "./332/file0", [pid 8382] close(3 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8382] <... close resumed>) = 0 [pid 8382] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5064] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8377] <... unlink resumed>) = 0 [pid 8382] memfd_create("syzkaller", 0 [pid 8377] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./332/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, [pid 8382] <... memfd_create resumed>) = 3 [pid 8377] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8382] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8378] <... openat resumed>) = 4 [pid 8377] exit_group(0 [pid 8382] <... mmap resumed>) = 0x7f41e0600000 [pid 8378] ioctl(4, LOOP_SET_FD, 3 [pid 8377] <... exit_group resumed>) = ? [pid 5064] close(4) = 0 [pid 5064] rmdir("./332/file0") = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./332") = 0 [pid 8378] <... ioctl resumed>) = 0 [pid 8377] +++ exited with 0 +++ [pid 5064] mkdir("./333", 0777 [pid 8380] <... write resumed>) = 2097152 [pid 8378] close(3 [pid 5064] <... mkdir resumed>) = 0 [pid 8378] <... close resumed>) = 0 [pid 8378] close(4 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8377, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5061] umount2("./333", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8378] <... close resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] openat(AT_FDCWD, "./333", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8380] munmap(0x7f41e0600000, 138412032 [pid 5064] <... openat resumed>) = 3 [pid 5061] <... openat resumed>) = 3 [pid 8380] <... munmap resumed>) = 0 [pid 8378] mkdir("./file0", 0777 [pid 5061] newfstatat(3, "", [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8378] <... mkdir resumed>) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./333/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8378] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8380] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] newfstatat(AT_FDCWD, "./333/binderfs", [pid 8380] <... openat resumed>) = 4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./333/binderfs" [pid 8380] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... unlink resumed>) = 0 [pid 8382] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5061] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8380] <... ioctl resumed>) = 0 [pid 8380] close(3) = 0 [pid 8380] close(4) = 0 [pid 8380] mkdir("./file0", 0777) = 0 [ 304.723909][ T8378] loop2: detected capacity change from 0 to 4096 [ 304.762517][ T8380] loop4: detected capacity change from 0 to 4096 [pid 5061] <... umount2 resumed>) = 0 [pid 8380] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./333/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./333/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] <... ioctl resumed>) = 0 [pid 8382] <... write resumed>) = 2097152 [pid 5061] newfstatat(4, "", [pid 5064] close(3 [pid 8378] <... mount resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8378] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] getdents64(4, [pid 8378] <... openat resumed>) = 3 ./strace-static-x86_64: Process 8384 attached [pid 8382] munmap(0x7f41e0600000, 138412032 [pid 8378] chdir("./file0" [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8384 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8384] set_robust_list(0x55555745a660, 24 [pid 8382] <... munmap resumed>) = 0 [pid 8378] <... chdir resumed>) = 0 [pid 8384] <... set_robust_list resumed>) = 0 [pid 8384] chdir("./333" [pid 8378] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5061] getdents64(4, [pid 8378] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8378] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] close(4 [pid 8384] <... chdir resumed>) = 0 [pid 8382] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8384] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8382] <... openat resumed>) = 4 [pid 5061] <... close resumed>) = 0 [pid 8384] <... prctl resumed>) = 0 [ 304.813787][ T8383] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8382] ioctl(4, LOOP_SET_FD, 3 [pid 5061] rmdir("./333/file0" [pid 8384] setpgid(0, 0 [pid 8382] <... ioctl resumed>) = 0 [pid 8378] <... open resumed>) = 4 [pid 8384] <... setpgid resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8378] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] getdents64(3, [pid 8384] <... openat resumed>) = 3 [pid 8378] <... open resumed>) = 5 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8384] write(3, "1000", 4 [pid 8378] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] close(3 [pid 8384] <... write resumed>) = 4 [pid 8384] close(3) = 0 [pid 8384] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5061] <... close resumed>) = 0 [pid 8384] memfd_create("syzkaller", 0 [pid 8378] <... mmap resumed>) = 0x20000000 [pid 5061] rmdir("./333" [pid 8384] <... memfd_create resumed>) = 3 [pid 8384] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8382] close(3) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8382] close(4) = 0 [pid 8382] mkdir("./file0", 0777) = 0 [pid 8382] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8380] <... mount resumed>) = 0 [pid 8378] ftruncate(4, 33587195 [pid 5061] mkdir("./334", 0777 [pid 8380] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8378] <... ftruncate resumed>) = 0 [pid 8380] <... openat resumed>) = 3 [pid 5061] <... mkdir resumed>) = 0 [pid 8380] chdir("./file0" [ 304.857883][ T8382] loop1: detected capacity change from 0 to 4096 [ 304.869498][ T8385] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8378] unlink("./bus" [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8384] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8380] <... chdir resumed>) = 0 [pid 8380] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... openat resumed>) = 3 [pid 8380] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8380] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8378] <... unlink resumed>) = 0 [pid 8378] sendfile(-1, -1, NULL, 281474978811909 [pid 8382] <... mount resumed>) = 0 [pid 8382] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8382] chdir("./file0") = 0 [pid 8378] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8378] exit_group(0 [pid 8382] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8382] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8378] <... exit_group resumed>) = ? [pid 8380] <... open resumed>) = 4 [pid 8380] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8380] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8382] <... open resumed>) = 4 [pid 8382] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8380] <... ftruncate resumed>) = 0 [pid 8380] unlink("./bus" [pid 8382] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8382] ftruncate(4, 33587195 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./328", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8384] <... write resumed>) = 2097152 [pid 8382] <... ftruncate resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 8384] munmap(0x7f41e0600000, 138412032 [pid 8382] unlink("./bus" [pid 8380] <... unlink resumed>) = 0 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 8380] sendfile(-1, -1, NULL, 281474978811909 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8380] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [ 304.929907][ T8386] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] umount2("./328/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8380] exit_group(0 [pid 5061] <... ioctl resumed>) = 0 [pid 8384] <... munmap resumed>) = 0 [pid 8380] <... exit_group resumed>) = ? [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8384] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] newfstatat(AT_FDCWD, "./328/binderfs", [pid 5061] close(3 [pid 8384] <... openat resumed>) = 4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... close resumed>) = 0 [pid 8384] ioctl(4, LOOP_SET_FD, 3 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] unlink("./328/binderfs") = 0 [pid 5063] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8382] <... unlink resumed>) = 0 [pid 8382] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8382] exit_group(0) = ? ./strace-static-x86_64: Process 8387 attached [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8387 [pid 8387] set_robust_list(0x55555745a660, 24) = 0 [pid 8387] chdir("./334") = 0 [pid 8384] <... ioctl resumed>) = 0 [pid 8380] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8380, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5063] <... umount2 resumed>) = 0 [pid 8387] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8382] +++ exited with 0 +++ [pid 8387] setpgid(0, 0 [pid 8384] close(3 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8382, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 8387] <... setpgid resumed>) = 0 [pid 8384] <... close resumed>) = 0 [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 8384] close(4 [pid 5062] <... restart_syscall resumed>) = 0 [pid 8387] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8384] <... close resumed>) = 0 [pid 8384] mkdir("./file0", 0777 [pid 5065] umount2("./326", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8384] <... mkdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./327", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8387] <... openat resumed>) = 3 [pid 8384] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8387] write(3, "1000", 4 [pid 5065] openat(AT_FDCWD, "./326", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8387] <... write resumed>) = 4 [pid 5065] <... openat resumed>) = 3 [pid 8387] close(3 [pid 5065] newfstatat(3, "", [pid 5062] openat(AT_FDCWD, "./327", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8387] <... close resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8387] symlink("/dev/binderfs", "./binderfs" [pid 5065] getdents64(3, [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8387] <... symlink resumed>) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] newfstatat(AT_FDCWD, "./328/file0", [pid 5065] umount2("./326/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] newfstatat(AT_FDCWD, "./326/binderfs", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(3, "", [pid 5063] openat(AT_FDCWD, "./328/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 8387] memfd_create("syzkaller", 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(3, [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 305.003737][ T8384] loop3: detected capacity change from 0 to 4096 [pid 5063] getdents64(4, [pid 5065] unlink("./326/binderfs" [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8387] <... memfd_create resumed>) = 3 [pid 5065] <... unlink resumed>) = 0 [pid 5063] close(4 [pid 8387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 8387] <... mmap resumed>) = 0x7f41e0600000 [pid 5063] rmdir("./328/file0" [pid 5062] umount2("./327/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./328" [pid 5062] newfstatat(AT_FDCWD, "./327/binderfs", [pid 5063] <... rmdir resumed>) = 0 [pid 5063] mkdir("./329", 0777) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] unlink("./327/binderfs" [pid 5065] <... umount2 resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] <... unlink resumed>) = 0 [pid 5062] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8384] <... mount resumed>) = 0 [pid 8384] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8384] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8384] chdir("./file0" [pid 5065] newfstatat(AT_FDCWD, "./326/file0", [pid 8384] <... chdir resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8384] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] umount2("./326/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = 0 [pid 8384] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./326/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8384] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./326/file0") = 0 [pid 8384] <... open resumed>) = 4 [ 305.087469][ T8388] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8384] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8384] <... open resumed>) = 5 [pid 5065] close(3) = 0 [pid 5062] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] rmdir("./326" [pid 5062] newfstatat(AT_FDCWD, "./327/file0", [pid 5065] <... rmdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./327/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8384] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] <... openat resumed>) = 4 [pid 8384] <... mmap resumed>) = 0x20000000 [pid 5062] newfstatat(4, "", [pid 5065] mkdir("./327", 0777 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] getdents64(4, [pid 5065] <... openat resumed>) = 3 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5062] close(4) = 0 [pid 5062] rmdir("./327/file0") = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./327") = 0 [pid 5062] mkdir("./328", 0777 [pid 8384] ftruncate(4, 33587195 [pid 5062] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8384] <... ftruncate resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8384] unlink("./bus" [pid 8387] <... write resumed>) = 2097152 [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8387] munmap(0x7f41e0600000, 138412032./strace-static-x86_64: Process 8389 attached ) = 0 [pid 8389] set_robust_list(0x55555745a660, 24) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8389 [pid 8389] chdir("./329" [pid 8387] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8389] <... chdir resumed>) = 0 [pid 8389] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8387] <... openat resumed>) = 4 [pid 8384] <... unlink resumed>) = 0 [pid 8389] <... prctl resumed>) = 0 [pid 8384] sendfile(-1, -1, NULL, 281474978811909 [pid 8389] setpgid(0, 0 [pid 8387] ioctl(4, LOOP_SET_FD, 3 [pid 8384] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8389] <... setpgid resumed>) = 0 [pid 8384] exit_group(0) = ? [pid 8389] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8387] <... ioctl resumed>) = 0 [pid 8389] write(3, "1000", 4 [pid 8387] close(3 [pid 8389] <... write resumed>) = 4 [pid 8387] <... close resumed>) = 0 [pid 8389] close(3 [pid 8387] close(4 [pid 8389] <... close resumed>) = 0 [pid 8387] <... close resumed>) = 0 [pid 8389] symlink("/dev/binderfs", "./binderfs" [pid 8387] mkdir("./file0", 0777 [pid 8389] <... symlink resumed>) = 0 [pid 8387] <... mkdir resumed>) = 0 [pid 8384] +++ exited with 0 +++ [pid 8389] memfd_create("syzkaller", 0 [pid 8387] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8384, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=9 /* 0.09 s */} --- [pid 5064] umount2("./333", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8389] <... memfd_create resumed>) = 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./333", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./333/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 305.192578][ T8387] loop0: detected capacity change from 0 to 4096 [pid 5064] newfstatat(AT_FDCWD, "./333/binderfs", [pid 5062] close(3) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 8389] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] unlink("./333/binderfs" [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8391 attached [pid 8387] <... mount resumed>) = 0 [pid 8391] set_robust_list(0x55555745a660, 24 [pid 8387] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... unlink resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8392 [pid 8391] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 8392 attached [pid 8391] chdir("./328" [pid 8387] <... openat resumed>) = 3 [pid 5064] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8391 [pid 8392] set_robust_list(0x55555745a660, 24 [pid 8391] <... chdir resumed>) = 0 [pid 8392] <... set_robust_list resumed>) = 0 [pid 8391] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8392] chdir("./327" [pid 8391] <... prctl resumed>) = 0 [pid 8392] <... chdir resumed>) = 0 [pid 8387] chdir("./file0" [pid 8392] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8391] setpgid(0, 0 [pid 8387] <... chdir resumed>) = 0 [pid 8391] <... setpgid resumed>) = 0 [pid 8392] <... prctl resumed>) = 0 [pid 8391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8387] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8392] setpgid(0, 0 [pid 8391] <... openat resumed>) = 3 [pid 8392] <... setpgid resumed>) = 0 [pid 8391] write(3, "1000", 4 [pid 8392] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8391] <... write resumed>) = 4 [pid 8387] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8387] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8392] <... openat resumed>) = 3 [pid 8391] close(3) = 0 [pid 8391] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8392] write(3, "1000", 4) = 4 [pid 8392] close(3) = 0 [pid 8391] memfd_create("syzkaller", 0 [pid 8392] symlink("/dev/binderfs", "./binderfs" [pid 8391] <... memfd_create resumed>) = 3 [pid 8392] <... symlink resumed>) = 0 [pid 8392] memfd_create("syzkaller", 0 [pid 8391] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8392] <... memfd_create resumed>) = 3 [pid 8392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5064] <... umount2 resumed>) = 0 [pid 5064] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 305.268136][ T8390] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] newfstatat(AT_FDCWD, "./333/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8387] <... open resumed>) = 4 [pid 8387] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8387] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] openat(AT_FDCWD, "./333/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8387] <... mmap resumed>) = 0x20000000 [pid 5064] <... openat resumed>) = 4 [pid 5064] newfstatat(4, "", [pid 8389] <... write resumed>) = 2097152 [pid 8387] ftruncate(4, 33587195 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, [pid 8387] <... ftruncate resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8387] unlink("./bus" [pid 5064] getdents64(4, [pid 8389] munmap(0x7f41e0600000, 138412032 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8389] <... munmap resumed>) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./333/file0") = 0 [pid 5064] getdents64(3, [pid 8387] <... unlink resumed>) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8387] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] close(3 [pid 8387] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5064] <... close resumed>) = 0 [pid 8387] exit_group(0) = ? [pid 8391] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8389] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] rmdir("./333") = 0 [pid 5064] mkdir("./334", 0777 [pid 8389] <... openat resumed>) = 4 [pid 5064] <... mkdir resumed>) = 0 [pid 8389] ioctl(4, LOOP_SET_FD, 3 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8387] +++ exited with 0 +++ [pid 5064] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8387, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 8389] <... ioctl resumed>) = 0 [pid 8392] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5061] <... restart_syscall resumed>) = 0 [pid 5061] umount2("./334", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./334", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./334/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8389] close(3 [pid 5061] newfstatat(AT_FDCWD, "./334/binderfs", [pid 8389] <... close resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8389] close(4 [pid 5061] unlink("./334/binderfs" [pid 8389] <... close resumed>) = 0 [pid 8391] <... write resumed>) = 2097152 [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8389] mkdir("./file0", 0777) = 0 [pid 8391] munmap(0x7f41e0600000, 138412032 [pid 8389] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8391] <... munmap resumed>) = 0 [pid 8391] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8392] <... write resumed>) = 2097152 [ 305.373747][ T8389] loop2: detected capacity change from 0 to 4096 [pid 8391] <... openat resumed>) = 4 [pid 8392] munmap(0x7f41e0600000, 138412032 [pid 5061] <... umount2 resumed>) = 0 [pid 8391] ioctl(4, LOOP_SET_FD, 3 [pid 8392] <... munmap resumed>) = 0 [pid 8392] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5061] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./334/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8392] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./334/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8389] <... mount resumed>) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 5061] getdents64(4, [pid 8389] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./334/file0" [pid 8389] <... openat resumed>) = 3 [pid 5061] <... rmdir resumed>) = 0 [pid 8389] chdir("./file0" [pid 5061] getdents64(3, [pid 8389] <... chdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8391] <... ioctl resumed>) = 0 [pid 8389] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5061] close(3 [pid 8391] close(3 [pid 8389] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... close resumed>) = 0 [pid 8391] <... close resumed>) = 0 [pid 8389] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] rmdir("./334") = 0 [pid 8392] <... ioctl resumed>) = 0 [pid 8391] close(4 [pid 5061] mkdir("./335", 0777 [pid 8391] <... close resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 8391] mkdir("./file0", 0777 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8391] <... mkdir resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8391] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] close(3 [pid 8392] close(3) = 0 [pid 5064] <... close resumed>) = 0 [pid 8392] close(4 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8392] <... close resumed>) = 0 [pid 8392] mkdir("./file0", 0777 [pid 8389] <... open resumed>) = 4 [pid 8389] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000./strace-static-x86_64: Process 8395 attached [pid 8392] <... mkdir resumed>) = 0 [pid 8389] <... open resumed>) = 5 [ 305.444185][ T8391] loop1: detected capacity change from 0 to 4096 [ 305.457853][ T8393] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 305.468822][ T8392] loop4: detected capacity change from 0 to 4096 [pid 8395] set_robust_list(0x55555745a660, 24 [pid 8392] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8395] <... set_robust_list resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8395 [pid 8395] chdir("./334") = 0 [pid 8395] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8389] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 8391] <... mount resumed>) = 0 [pid 8391] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8391] chdir("./file0") = 0 [pid 8391] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8395] setpgid(0, 0 [pid 8391] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8389] ftruncate(4, 33587195 [pid 8395] <... setpgid resumed>) = 0 [pid 8395] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8391] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8395] <... openat resumed>) = 3 [pid 8395] write(3, "1000", 4) = 4 [pid 8395] close(3) = 0 [pid 8391] <... open resumed>) = 4 [pid 8391] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8395] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8391] <... open resumed>) = 5 [pid 8391] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8389] <... ftruncate resumed>) = 0 [pid 8395] <... memfd_create resumed>) = 3 [pid 8395] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8391] unlink("./bus" [ 305.527075][ T8394] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8389] unlink("./bus" [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3) = 0 [pid 8389] <... unlink resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8389] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8389] exit_group(0./strace-static-x86_64: Process 8397 attached [pid 8391] <... unlink resumed>) = 0 [pid 8389] <... exit_group resumed>) = ? [pid 8397] set_robust_list(0x55555745a660, 24 [pid 8391] sendfile(-1, -1, NULL, 281474978811909 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8397 [pid 8391] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8391] exit_group(0) = ? [pid 8397] <... set_robust_list resumed>) = 0 [pid 8397] chdir("./335" [pid 8392] <... mount resumed>) = 0 [pid 8397] <... chdir resumed>) = 0 [pid 8392] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8397] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8392] <... openat resumed>) = 3 [pid 8391] +++ exited with 0 +++ [pid 8392] chdir("./file0" [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8391, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 8392] <... chdir resumed>) = 0 [pid 8389] +++ exited with 0 +++ [pid 5062] <... restart_syscall resumed>) = 0 [pid 8392] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8397] <... prctl resumed>) = 0 [pid 8397] setpgid(0, 0 [pid 5062] umount2("./328", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8397] <... setpgid resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8389, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=8 /* 0.08 s */} --- [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8397] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8392] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] umount2("./329", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "./328", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8397] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8397] write(3, "1000", 4 [pid 5063] openat(AT_FDCWD, "./329", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... openat resumed>) = 3 [pid 8397] <... write resumed>) = 4 [pid 5062] newfstatat(3, "", [pid 8397] close(3 [pid 8392] <... open resumed>) = 4 [pid 5063] <... openat resumed>) = 3 [pid 8392] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] newfstatat(3, "", [pid 8397] <... close resumed>) = 0 [pid 8392] <... open resumed>) = 5 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8397] symlink("/dev/binderfs", "./binderfs" [pid 8392] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8397] <... symlink resumed>) = 0 [pid 5062] getdents64(3, [pid 8397] memfd_create("syzkaller", 0 [pid 8392] <... mmap resumed>) = 0x20000000 [pid 5063] getdents64(3, [pid 8397] <... memfd_create resumed>) = 3 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [ 305.581956][ T8396] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8392] ftruncate(4, 33587195 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8397] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] umount2("./329/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./328/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./329/binderfs", [pid 8397] <... mmap resumed>) = 0x7f41e0600000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./329/binderfs" [pid 8392] <... ftruncate resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./328/binderfs", [pid 5063] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8392] unlink("./bus" [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./328/binderfs") = 0 [pid 5062] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8392] <... unlink resumed>) = 0 [pid 8392] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8392] exit_group(0) = ? [pid 8395] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8392] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8392, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...> [pid 5062] <... umount2 resumed>) = 0 [pid 5065] <... restart_syscall resumed>) = 0 [pid 5065] umount2("./327", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./327", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./327/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(AT_FDCWD, "./328/file0", [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] newfstatat(AT_FDCWD, "./327/binderfs", [pid 5062] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./327/binderfs" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... unlink resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./328/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(4, "", [pid 5065] <... umount2 resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 8397] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./329/file0", [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./328/file0" [pid 5065] newfstatat(AT_FDCWD, "./327/file0", [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] close(3 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./327/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./329/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] openat(AT_FDCWD, "./327/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5063] <... openat resumed>) = 4 [pid 5062] rmdir("./328" [pid 5065] newfstatat(4, "", [pid 5063] newfstatat(4, "", [pid 5062] <... rmdir resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, [pid 5063] getdents64(4, [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] mkdir("./329", 0777 [pid 5065] getdents64(4, [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] <... mkdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(4, [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] close(4 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5065] <... close resumed>) = 0 [pid 5063] close(4 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5065] rmdir("./327/file0" [pid 5063] <... close resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5063] rmdir("./329/file0") = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(3, [pid 5065] close(3 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5065] <... close resumed>) = 0 [pid 5063] rmdir("./329") = 0 [pid 5065] rmdir("./327" [pid 5063] mkdir("./330", 0777 [pid 5065] <... rmdir resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 8395] <... write resumed>) = 2097152 [pid 5065] mkdir("./328", 0777 [pid 8395] munmap(0x7f41e0600000, 138412032 [pid 8397] <... write resumed>) = 2097152 [pid 5065] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8397] munmap(0x7f41e0600000, 138412032 [pid 5065] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8395] <... munmap resumed>) = 0 [pid 8397] <... munmap resumed>) = 0 [pid 8397] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8395] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8397] <... openat resumed>) = 4 [pid 8395] <... openat resumed>) = 4 [pid 8395] ioctl(4, LOOP_SET_FD, 3 [pid 8397] ioctl(4, LOOP_SET_FD, 3 [pid 8395] <... ioctl resumed>) = 0 [pid 8395] close(3) = 0 [pid 8395] close(4 [pid 8397] <... ioctl resumed>) = 0 [pid 8395] <... close resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 8397] close(3 [pid 8395] mkdir("./file0", 0777 [pid 5063] <... ioctl resumed>) = 0 [pid 8397] <... close resumed>) = 0 [pid 8395] <... mkdir resumed>) = 0 [pid 8397] close(4 [pid 8395] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8397] <... close resumed>) = 0 [pid 8397] mkdir("./file0", 0777 [pid 5062] close(3 [pid 8397] <... mkdir resumed>) = 0 [pid 5062] <... close resumed>) = 0 [ 305.764317][ T8395] loop3: detected capacity change from 0 to 4096 [ 305.764715][ T8397] loop0: detected capacity change from 0 to 4096 [pid 8397] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] close(3 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8398 attached , child_tidptr=0x55555745a650) = 8399 ./strace-static-x86_64: Process 8399 attached [pid 8398] set_robust_list(0x55555745a660, 24 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8398 [pid 8398] <... set_robust_list resumed>) = 0 [pid 8399] set_robust_list(0x55555745a660, 24 [pid 8398] chdir("./329" [pid 5065] <... ioctl resumed>) = 0 [pid 8399] <... set_robust_list resumed>) = 0 [pid 8398] <... chdir resumed>) = 0 [pid 8398] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8398] setpgid(0, 0) = 0 [pid 8398] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8399] chdir("./330") = 0 [pid 8398] <... openat resumed>) = 3 [pid 8399] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8399] setpgid(0, 0) = 0 [pid 8398] write(3, "1000", 4) = 4 [pid 8398] close(3) = 0 [pid 8399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8398] symlink("/dev/binderfs", "./binderfs" [pid 8399] <... openat resumed>) = 3 [pid 8398] <... symlink resumed>) = 0 [pid 8399] write(3, "1000", 4 [pid 8398] memfd_create("syzkaller", 0 [pid 5065] close(3 [pid 8398] <... memfd_create resumed>) = 3 [pid 5065] <... close resumed>) = 0 [pid 8399] <... write resumed>) = 4 [pid 8398] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8399] close(3) = 0 [pid 8398] <... mmap resumed>) = 0x7f41e0600000 [pid 8399] symlink("/dev/binderfs", "./binderfs" [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8399] <... symlink resumed>) = 0 [pid 8399] memfd_create("syzkaller", 0 [pid 8395] <... mount resumed>) = 0 [pid 8399] <... memfd_create resumed>) = 3 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8402 [pid 8395] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8399] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8397] <... mount resumed>) = 0 [pid 8399] <... mmap resumed>) = 0x7f41e0600000 [pid 8397] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8395] <... openat resumed>) = 3 [pid 8395] chdir("./file0") = 0 [pid 8395] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) ./strace-static-x86_64: Process 8402 attached [pid 8395] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8402] set_robust_list(0x55555745a660, 24 [pid 8397] <... openat resumed>) = 3 [pid 8402] <... set_robust_list resumed>) = 0 [pid 8402] chdir("./328" [pid 8397] chdir("./file0") = 0 [pid 8402] <... chdir resumed>) = 0 [pid 8397] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8402] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8397] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8397] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8402] <... prctl resumed>) = 0 [pid 8402] setpgid(0, 0) = 0 [ 305.870295][ T8400] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 305.883495][ T8401] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8402] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8395] <... open resumed>) = 4 [pid 8402] write(3, "1000", 4 [pid 8395] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8402] <... write resumed>) = 4 [pid 8395] <... open resumed>) = 5 [pid 8402] close(3 [pid 8395] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8402] <... close resumed>) = 0 [pid 8399] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8395] <... mmap resumed>) = 0x20000000 [pid 8402] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8402] memfd_create("syzkaller", 0) = 3 [pid 8398] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8395] ftruncate(4, 33587195 [pid 8397] <... open resumed>) = 4 [pid 8402] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8397] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8395] <... ftruncate resumed>) = 0 [pid 8402] <... mmap resumed>) = 0x7f41e0600000 [pid 8397] <... open resumed>) = 5 [pid 8395] unlink("./bus" [pid 8399] <... write resumed>) = 2097152 [pid 8397] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8399] munmap(0x7f41e0600000, 138412032 [pid 8397] <... mmap resumed>) = 0x20000000 [pid 8395] <... unlink resumed>) = 0 [pid 8395] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8395] exit_group(0) = ? [pid 8399] <... munmap resumed>) = 0 [pid 8397] ftruncate(4, 33587195 [pid 8399] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8399] ioctl(4, LOOP_SET_FD, 3 [pid 8395] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8395, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./334", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./334", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./334/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./334/binderfs", [pid 8399] <... ioctl resumed>) = 0 [pid 8397] <... ftruncate resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./334/binderfs") = 0 [pid 5064] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8397] unlink("./bus" [pid 8399] close(3 [pid 8402] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8399] <... close resumed>) = 0 [pid 8399] close(4 [pid 8397] <... unlink resumed>) = 0 [pid 8397] sendfile(-1, -1, NULL, 281474978811909 [pid 8399] <... close resumed>) = 0 [pid 8397] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8399] mkdir("./file0", 0777 [pid 8398] <... write resumed>) = 2097152 [pid 8397] exit_group(0 [pid 5064] <... umount2 resumed>) = 0 [pid 8399] <... mkdir resumed>) = 0 [pid 8399] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8398] munmap(0x7f41e0600000, 138412032 [pid 8397] <... exit_group resumed>) = ? [pid 5064] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./334/file0", [pid 8398] <... munmap resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8398] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8398] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 305.999982][ T8399] loop2: detected capacity change from 0 to 4096 [pid 5064] openat(AT_FDCWD, "./334/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, [pid 8397] +++ exited with 0 +++ [pid 8398] <... ioctl resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8398] close(3 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8397, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 8398] <... close resumed>) = 0 [pid 5064] getdents64(4, [pid 8398] close(4 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8398] <... close resumed>) = 0 [pid 8398] mkdir("./file0", 0777) = 0 [pid 8398] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] umount2("./335", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./335", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8402] <... write resumed>) = 2097152 [pid 5064] close(4) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5064] rmdir("./334/file0") = 0 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, [pid 5061] getdents64(3, [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] close(3 [pid 5061] umount2("./335/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8402] munmap(0x7f41e0600000, 138412032 [pid 5064] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] rmdir("./334" [pid 5061] newfstatat(AT_FDCWD, "./335/binderfs", [pid 8402] <... munmap resumed>) = 0 [pid 8399] <... mount resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 8402] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8399] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8402] <... openat resumed>) = 4 [ 306.055213][ T8398] loop1: detected capacity change from 0 to 4096 [ 306.086617][ T8403] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8399] <... openat resumed>) = 3 [pid 8402] ioctl(4, LOOP_SET_FD, 3 [pid 8399] chdir("./file0" [pid 5064] mkdir("./335", 0777 [pid 5061] unlink("./335/binderfs" [pid 8399] <... chdir resumed>) = 0 [pid 8399] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8399] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 8399] <... open resumed>) = 4 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8399] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8402] <... ioctl resumed>) = 0 [pid 8399] <... open resumed>) = 5 [pid 8402] close(3) = 0 [pid 8399] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8402] close(4 [pid 8399] <... mmap resumed>) = 0x20000000 [pid 8402] <... close resumed>) = 0 [pid 8402] mkdir("./file0", 0777) = 0 [pid 8402] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8399] ftruncate(4, 33587195 [pid 8398] <... mount resumed>) = 0 [pid 8398] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8398] chdir("./file0") = 0 [pid 8398] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8398] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8399] <... ftruncate resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 8399] unlink("./bus" [pid 8398] <... open resumed>) = 4 [pid 5061] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8398] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./335/file0", [pid 8398] <... open resumed>) = 5 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./335/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8398] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] <... openat resumed>) = 4 [pid 8398] <... mmap resumed>) = 0x20000000 [ 306.115390][ T8402] loop4: detected capacity change from 0 to 4096 [ 306.138646][ T8404] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5061] newfstatat(4, "", [pid 8399] <... unlink resumed>) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] close(3 [pid 5061] getdents64(4, [pid 5064] <... close resumed>) = 0 [pid 8399] sendfile(-1, -1, NULL, 281474978811909 [pid 8398] ftruncate(4, 33587195 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8399] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8399] exit_group(0) = ? [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 ./strace-static-x86_64: Process 8405 attached [pid 8398] <... ftruncate resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8405 [pid 5061] rmdir("./335/file0" [pid 8405] set_robust_list(0x55555745a660, 24 [pid 8398] unlink("./bus" [pid 5061] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, [pid 8399] +++ exited with 0 +++ [pid 8405] <... set_robust_list resumed>) = 0 [pid 8405] chdir("./335") = 0 [pid 8405] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8405] setpgid(0, 0) = 0 [pid 8405] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8405] write(3, "1000", 4) = 4 [pid 8405] close(3) = 0 [pid 8405] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8405] memfd_create("syzkaller", 0) = 3 [pid 8405] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./335") = 0 [pid 8398] <... unlink resumed>) = 0 [pid 5061] mkdir("./336", 0777 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8399, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 8398] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8398] exit_group(0) = ? [pid 5063] umount2("./330", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... mkdir resumed>) = 0 [pid 8402] <... mount resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8402] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "./330", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... openat resumed>) = 3 [pid 8402] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8402] chdir("./file0") = 0 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8402] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] getdents64(3, [pid 8402] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8402] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] umount2("./330/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8398] +++ exited with 0 +++ [pid 5063] newfstatat(AT_FDCWD, "./330/binderfs", [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8398, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./330/binderfs" [pid 5062] umount2("./329", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... unlink resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8402] <... open resumed>) = 4 [pid 5063] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "./329", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", [pid 8402] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8402] <... open resumed>) = 5 [ 306.218960][ T8406] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./329/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8405] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8402] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8402] <... mmap resumed>) = 0x20000000 [pid 5063] <... umount2 resumed>) = 0 [pid 8402] ftruncate(4, 33587195 [pid 5063] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(AT_FDCWD, "./329/binderfs", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./330/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5062] unlink("./329/binderfs" [pid 5061] close(3 [pid 5062] <... unlink resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8402] <... ftruncate resumed>) = 0 [pid 8402] unlink("./bus" [pid 5062] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./330/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./330/file0") = 0 [pid 8402] <... unlink resumed>) = 0 [pid 8402] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8402] exit_group(0) = ? [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8407 [pid 5063] close(3) = 0 [pid 5063] rmdir("./330"./strace-static-x86_64: Process 8407 attached ) = 0 [pid 5063] mkdir("./331", 0777 [pid 8407] set_robust_list(0x55555745a660, 24 [pid 5063] <... mkdir resumed>) = 0 [pid 8407] <... set_robust_list resumed>) = 0 [pid 8407] chdir("./336") = 0 [pid 8407] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8405] <... write resumed>) = 2097152 [pid 8402] +++ exited with 0 +++ [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... umount2 resumed>) = 0 [pid 8407] setpgid(0, 0 [pid 8405] munmap(0x7f41e0600000, 138412032 [pid 5063] <... openat resumed>) = 3 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8402, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 8407] <... setpgid resumed>) = 0 [pid 8407] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] umount2("./328", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8407] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8405] <... munmap resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./328", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8407] write(3, "1000", 4 [pid 8405] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... openat resumed>) = 3 [pid 8407] <... write resumed>) = 4 [pid 8405] <... openat resumed>) = 4 [pid 5065] newfstatat(3, "", [pid 5062] newfstatat(AT_FDCWD, "./329/file0", [pid 8407] close(3 [pid 8405] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8407] <... close resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./328/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./328/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8407] symlink("/dev/binderfs", "./binderfs" [pid 8405] <... ioctl resumed>) = 0 [pid 5062] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] unlink("./328/binderfs" [pid 8407] <... symlink resumed>) = 0 [pid 8405] close(3 [pid 5065] <... unlink resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8405] <... close resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./329/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8407] memfd_create("syzkaller", 0 [pid 8405] close(4 [pid 5065] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8407] <... memfd_create resumed>) = 3 [pid 8405] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 8407] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8405] mkdir("./file0", 0777 [pid 5062] newfstatat(4, "", [pid 8407] <... mmap resumed>) = 0x7f41e0600000 [pid 8405] <... mkdir resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./329/file0") = 0 [pid 8405] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./329") = 0 [pid 5062] mkdir("./330", 0777 [pid 5065] <... umount2 resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5065] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 306.357915][ T8405] loop3: detected capacity change from 0 to 4096 [pid 5065] newfstatat(AT_FDCWD, "./328/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./328/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./328/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8407] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] close(4) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555745a650) = 8409 ./strace-static-x86_64: Process 8409 attached [pid 5062] <... ioctl resumed>) = 0 [pid 8409] set_robust_list(0x55555745a660, 24 [pid 8405] <... mount resumed>) = 0 [pid 5065] rmdir("./328/file0" [pid 8409] <... set_robust_list resumed>) = 0 [pid 8405] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... rmdir resumed>) = 0 [pid 8409] chdir("./331" [pid 8405] <... openat resumed>) = 3 [pid 8409] <... chdir resumed>) = 0 [pid 8405] chdir("./file0" [pid 8409] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8405] <... chdir resumed>) = 0 [pid 5062] close(3 [pid 8409] <... prctl resumed>) = 0 [pid 8405] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] getdents64(3, [pid 8409] setpgid(0, 0 [pid 8405] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... close resumed>) = 0 [pid 8409] <... setpgid resumed>) = 0 [pid 8405] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8409] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8409] <... openat resumed>) = 3 [pid 5065] close(3 [pid 8409] write(3, "1000", 4 [pid 5065] <... close resumed>) = 0 ./strace-static-x86_64: Process 8410 attached [pid 8409] <... write resumed>) = 4 [ 306.439935][ T8408] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] rmdir("./328" [pid 8410] set_robust_list(0x55555745a660, 24 [pid 8409] close(3 [pid 5065] <... rmdir resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8410 [pid 8409] <... close resumed>) = 0 [pid 8405] <... open resumed>) = 4 [pid 8409] symlink("/dev/binderfs", "./binderfs" [pid 8405] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8410] <... set_robust_list resumed>) = 0 [pid 8409] <... symlink resumed>) = 0 [pid 8405] <... open resumed>) = 5 [pid 5065] mkdir("./329", 0777 [pid 8410] chdir("./330" [pid 8409] memfd_create("syzkaller", 0 [pid 8405] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] <... mkdir resumed>) = 0 [pid 8410] <... chdir resumed>) = 0 [pid 8409] <... memfd_create resumed>) = 3 [pid 8407] <... write resumed>) = 2097152 [pid 8405] <... mmap resumed>) = 0x20000000 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8410] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8409] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8410] <... prctl resumed>) = 0 [pid 8409] <... mmap resumed>) = 0x7f41e0600000 [pid 8407] munmap(0x7f41e0600000, 138412032 [pid 8405] ftruncate(4, 33587195 [pid 5065] <... openat resumed>) = 3 [pid 8410] setpgid(0, 0) = 0 [pid 8410] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8410] <... openat resumed>) = 3 [pid 8410] write(3, "1000", 4) = 4 [pid 8410] close(3) = 0 [pid 8410] symlink("/dev/binderfs", "./binderfs" [pid 8407] <... munmap resumed>) = 0 [pid 8405] <... ftruncate resumed>) = 0 [pid 8410] <... symlink resumed>) = 0 [pid 8410] memfd_create("syzkaller", 0) = 3 [pid 8410] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8407] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8410] <... mmap resumed>) = 0x7f41e0600000 [pid 8407] <... openat resumed>) = 4 [pid 8405] unlink("./bus" [pid 8407] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 8409] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8407] close(3 [pid 8405] <... unlink resumed>) = 0 [pid 8405] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8405] exit_group(0) = ? [pid 8407] <... close resumed>) = 0 [pid 8410] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8407] close(4) = 0 [pid 8407] mkdir("./file0", 0777) = 0 [pid 8405] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8405, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5064] umount2("./335", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./335", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8407] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] <... openat resumed>) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./335/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./335/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./335/binderfs") = 0 [ 306.531343][ T8407] loop0: detected capacity change from 0 to 4096 [pid 5064] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8409] <... write resumed>) = 2097152 [pid 8409] munmap(0x7f41e0600000, 138412032 [pid 5065] <... ioctl resumed>) = 0 [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8412 attached [pid 8412] set_robust_list(0x55555745a660, 24) = 0 [pid 8412] chdir("./329" [pid 8410] <... write resumed>) = 2097152 [pid 8409] <... munmap resumed>) = 0 [pid 8407] <... mount resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8412 [pid 8412] <... chdir resumed>) = 0 [pid 8407] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8412] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8410] munmap(0x7f41e0600000, 138412032 [pid 8407] <... openat resumed>) = 3 [pid 8407] chdir("./file0" [pid 8412] <... prctl resumed>) = 0 [pid 8410] <... munmap resumed>) = 0 [pid 8409] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8407] <... chdir resumed>) = 0 [pid 8407] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8412] setpgid(0, 0 [pid 5064] <... umount2 resumed>) = 0 [pid 8407] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8412] <... setpgid resumed>) = 0 [pid 8409] <... openat resumed>) = 4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8412] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 306.601552][ T8411] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] newfstatat(AT_FDCWD, "./335/file0", [pid 8409] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8412] <... openat resumed>) = 3 [pid 8410] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5064] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8410] <... openat resumed>) = 4 [pid 5064] openat(AT_FDCWD, "./335/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8410] ioctl(4, LOOP_SET_FD, 3 [pid 5064] getdents64(4, [pid 8412] write(3, "1000", 4) = 4 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8412] close(3) = 0 [pid 8412] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8412] memfd_create("syzkaller", 0) = 3 [pid 5064] getdents64(4, [pid 8412] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8412] <... mmap resumed>) = 0x7f41e0600000 [pid 5064] close(4 [pid 8410] <... ioctl resumed>) = 0 [pid 8409] <... ioctl resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 8410] close(3 [pid 8409] close(3 [pid 8407] <... open resumed>) = 4 [pid 5064] rmdir("./335/file0" [pid 8410] <... close resumed>) = 0 [pid 8409] <... close resumed>) = 0 [pid 8407] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] <... rmdir resumed>) = 0 [pid 8410] close(4 [pid 8409] close(4 [pid 8407] <... open resumed>) = 5 [pid 5064] getdents64(3, [pid 8409] <... close resumed>) = 0 [pid 8410] <... close resumed>) = 0 [pid 8409] mkdir("./file0", 0777 [pid 8407] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8409] <... mkdir resumed>) = 0 [pid 5064] close(3 [pid 8410] mkdir("./file0", 0777 [pid 8409] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8407] <... mmap resumed>) = 0x20000000 [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./335" [pid 8410] <... mkdir resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 8407] ftruncate(4, 33587195 [pid 5064] mkdir("./336", 0777 [pid 8410] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8407] <... ftruncate resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8407] unlink("./bus" [pid 5064] <... openat resumed>) = 3 [ 306.643426][ T8409] loop2: detected capacity change from 0 to 4096 [ 306.662857][ T8410] loop1: detected capacity change from 0 to 4096 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8412] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8410] <... mount resumed>) = 0 [pid 8407] <... unlink resumed>) = 0 [pid 8410] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8407] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8410] <... openat resumed>) = 3 [pid 8407] exit_group(0) = ? [pid 8410] chdir("./file0") = 0 [pid 8410] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8410] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8407] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8407, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5061] umount2("./336", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./336", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8410] <... open resumed>) = 4 [pid 8410] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] umount2("./336/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8409] <... mount resumed>) = 0 [pid 8409] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8409] chdir("./file0") = 0 [pid 8409] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [ 306.724337][ T8413] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 306.753187][ T8414] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8409] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8410] <... open resumed>) = 5 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8410] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] newfstatat(AT_FDCWD, "./336/binderfs", [pid 8410] <... mmap resumed>) = 0x20000000 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8412] <... write resumed>) = 2097152 [pid 8409] <... open resumed>) = 4 [pid 5061] unlink("./336/binderfs" [pid 8412] munmap(0x7f41e0600000, 138412032 [pid 8410] ftruncate(4, 33587195 [pid 8409] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] <... ioctl resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 8409] <... open resumed>) = 5 [pid 5061] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8409] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8410] <... ftruncate resumed>) = 0 ./strace-static-x86_64: Process 8415 attached [pid 8409] ftruncate(4, 33587195 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8415 [pid 8415] set_robust_list(0x55555745a660, 24 [pid 8412] <... munmap resumed>) = 0 [pid 8415] <... set_robust_list resumed>) = 0 [pid 8412] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... umount2 resumed>) = 0 [pid 8412] <... openat resumed>) = 4 [pid 8409] <... ftruncate resumed>) = 0 [pid 8412] ioctl(4, LOOP_SET_FD, 3 [pid 5061] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8410] unlink("./bus" [pid 8415] chdir("./336" [pid 8412] <... ioctl resumed>) = 0 [pid 8409] unlink("./bus" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./336/file0", [pid 8415] <... chdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8415] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5061] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8415] setpgid(0, 0) = 0 [pid 8415] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./336/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8415] <... openat resumed>) = 3 [pid 8412] close(3 [pid 5061] <... openat resumed>) = 4 [pid 8415] write(3, "1000", 4 [pid 8412] <... close resumed>) = 0 [pid 5061] newfstatat(4, "", [pid 8412] close(4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8412] <... close resumed>) = 0 [pid 8415] <... write resumed>) = 4 [pid 8410] <... unlink resumed>) = 0 [pid 8409] <... unlink resumed>) = 0 [pid 5061] getdents64(4, [pid 8410] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8412] mkdir("./file0", 0777 [pid 8415] close(3 [pid 8410] exit_group(0 [pid 8409] sendfile(-1, -1, NULL, 281474978811909 [pid 5061] getdents64(4, [pid 8410] <... exit_group resumed>) = ? [pid 8415] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 8412] <... mkdir resumed>) = 0 [pid 8409] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5061] <... close resumed>) = 0 [pid 8415] symlink("/dev/binderfs", "./binderfs" [pid 8412] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8409] exit_group(0 [pid 5061] rmdir("./336/file0" [pid 8409] <... exit_group resumed>) = ? [pid 5061] <... rmdir resumed>) = 0 [pid 8410] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8410, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 8415] <... symlink resumed>) = 0 [pid 5062] <... restart_syscall resumed>) = 0 [pid 5062] umount2("./330", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./330", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./330/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./330/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./330/binderfs") = 0 [pid 5062] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(3, [pid 8415] memfd_create("syzkaller", 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8415] <... memfd_create resumed>) = 3 [pid 5061] close(3 [ 306.847120][ T8412] loop4: detected capacity change from 0 to 4096 [pid 8415] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] <... close resumed>) = 0 [pid 8415] <... mmap resumed>) = 0x7f41e0600000 [pid 5061] rmdir("./336" [pid 5062] <... umount2 resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] mkdir("./337", 0777 [pid 5062] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... mkdir resumed>) = 0 [pid 8409] +++ exited with 0 +++ [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8409, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5062] newfstatat(AT_FDCWD, "./330/file0", [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5062] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./331", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "./330/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... openat resumed>) = 4 [pid 5063] openat(AT_FDCWD, "./331", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] newfstatat(4, "", [pid 5063] <... openat resumed>) = 3 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] newfstatat(3, "", [pid 5062] getdents64(4, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(3, [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] close(4 [pid 5063] umount2("./331/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... close resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] rmdir("./330/file0" [pid 5063] newfstatat(AT_FDCWD, "./331/binderfs", [pid 5062] <... rmdir resumed>) = 0 [pid 8415] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] getdents64(3, [pid 5063] unlink("./331/binderfs" [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./330") = 0 [pid 5062] mkdir("./331", 0777) = 0 [pid 8412] <... mount resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 8412] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8412] <... openat resumed>) = 3 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8412] chdir("./file0") = 0 [pid 8412] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8415] <... write resumed>) = 2097152 [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 8415] munmap(0x7f41e0600000, 138412032 [pid 8412] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8415] <... munmap resumed>) = 0 [pid 8412] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./331/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 306.934536][ T8416] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8415] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... ioctl resumed>) = 0 [pid 8415] <... openat resumed>) = 4 [pid 8415] ioctl(4, LOOP_SET_FD, 3 [pid 5063] openat(AT_FDCWD, "./331/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] close(3 [pid 5063] <... openat resumed>) = 4 [pid 5061] <... close resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8417 [pid 5063] getdents64(4, ./strace-static-x86_64: Process 8417 attached [pid 8415] <... ioctl resumed>) = 0 [pid 8417] set_robust_list(0x55555745a660, 24 [pid 8415] close(3 [pid 8417] <... set_robust_list resumed>) = 0 [pid 8415] <... close resumed>) = 0 [pid 8417] chdir("./337" [pid 8415] close(4 [pid 8417] <... chdir resumed>) = 0 [pid 8415] <... close resumed>) = 0 [pid 8417] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8415] mkdir("./file0", 0777 [pid 8417] <... prctl resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8417] setpgid(0, 0 [pid 8415] <... mkdir resumed>) = 0 [pid 8412] <... open resumed>) = 4 [pid 5063] close(4 [pid 8417] <... setpgid resumed>) = 0 [pid 8415] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8412] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8417] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8412] <... open resumed>) = 5 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./331/file0") = 0 [pid 8417] <... openat resumed>) = 3 [pid 8412] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] getdents64(3, [pid 8412] <... mmap resumed>) = 0x20000000 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./331" [pid 8417] write(3, "1000", 4 [pid 8412] ftruncate(4, 33587195 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] mkdir("./332", 0777 [pid 8417] <... write resumed>) = 4 [pid 8417] close(3) = 0 [pid 8417] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8412] <... ftruncate resumed>) = 0 [ 307.009587][ T8415] loop3: detected capacity change from 0 to 4096 [pid 5063] <... mkdir resumed>) = 0 [pid 8417] memfd_create("syzkaller", 0 [pid 8415] <... mount resumed>) = 0 [pid 8412] unlink("./bus" [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5062] <... ioctl resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8417] <... memfd_create resumed>) = 3 [pid 8415] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8417] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8412] <... unlink resumed>) = 0 [pid 8412] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8412] exit_group(0) = ? [pid 8417] <... mmap resumed>) = 0x7f41e0600000 [pid 8415] <... openat resumed>) = 3 [pid 8415] chdir("./file0" [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8419 attached [pid 8415] <... chdir resumed>) = 0 [pid 8412] +++ exited with 0 +++ [pid 8419] set_robust_list(0x55555745a660, 24 [pid 8415] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8412, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8419 [pid 8419] <... set_robust_list resumed>) = 0 [pid 8415] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8419] chdir("./331" [pid 8417] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8415] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8419] <... chdir resumed>) = 0 [pid 5065] umount2("./329", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8419] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8419] <... prctl resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./329", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8419] setpgid(0, 0 [pid 5065] <... openat resumed>) = 3 [ 307.057541][ T8418] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8419] <... setpgid resumed>) = 0 [pid 5065] newfstatat(3, "", [pid 8419] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8419] <... openat resumed>) = 3 [pid 5065] umount2("./329/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8415] <... open resumed>) = 4 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8419] write(3, "1000", 4 [pid 8415] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8419] <... write resumed>) = 4 [pid 5065] newfstatat(AT_FDCWD, "./329/binderfs", [pid 8419] close(3 [pid 8415] <... open resumed>) = 5 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8415] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8419] <... close resumed>) = 0 [pid 5065] unlink("./329/binderfs" [pid 8419] symlink("/dev/binderfs", "./binderfs" [pid 8415] <... mmap resumed>) = 0x20000000 [pid 5065] <... unlink resumed>) = 0 [pid 8415] ftruncate(4, 33587195 [pid 8419] <... symlink resumed>) = 0 [pid 5065] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8415] <... ftruncate resumed>) = 0 [pid 8415] unlink("./bus" [pid 8419] memfd_create("syzkaller", 0) = 3 [pid 8415] <... unlink resumed>) = 0 [pid 8419] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8415] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8419] <... mmap resumed>) = 0x7f41e0600000 [pid 8415] exit_group(0) = ? [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8415] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8415, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./336", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./336", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8417] <... write resumed>) = 2097152 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8419] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] umount2("./336/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8420 attached ) = -1 EINVAL (Invalid argument) [pid 8420] set_robust_list(0x55555745a660, 24) = 0 [pid 8417] munmap(0x7f41e0600000, 138412032 [pid 8420] chdir("./332" [pid 8417] <... munmap resumed>) = 0 [pid 8420] <... chdir resumed>) = 0 [pid 8420] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5064] newfstatat(AT_FDCWD, "./336/binderfs", [pid 8420] setpgid(0, 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8420] <... setpgid resumed>) = 0 [pid 8420] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] unlink("./336/binderfs" [pid 8420] <... openat resumed>) = 3 [pid 5064] <... unlink resumed>) = 0 [pid 8420] write(3, "1000", 4) = 4 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8420 [pid 8420] close(3) = 0 [pid 8417] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8420] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8417] <... openat resumed>) = 4 [pid 5064] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8420] memfd_create("syzkaller", 0 [pid 8417] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... umount2 resumed>) = 0 [pid 8420] <... memfd_create resumed>) = 3 [pid 5065] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8420] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./329/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./329/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./329/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8419] <... write resumed>) = 2097152 [pid 5065] <... openat resumed>) = 4 [pid 5064] <... umount2 resumed>) = 0 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./329/file0") = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 8417] <... ioctl resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./329" [pid 8417] close(3 [pid 5065] <... rmdir resumed>) = 0 [pid 8417] <... close resumed>) = 0 [pid 5064] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8417] close(4 [pid 5065] mkdir("./330", 0777 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8417] <... close resumed>) = 0 [pid 8417] mkdir("./file0", 0777 [pid 5064] newfstatat(AT_FDCWD, "./336/file0", [pid 5065] <... mkdir resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8417] <... mkdir resumed>) = 0 [pid 5064] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8417] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... openat resumed>) = 3 [pid 5064] openat(AT_FDCWD, "./336/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./336/file0" [pid 8419] munmap(0x7f41e0600000, 138412032) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 8419] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5064] getdents64(3, [pid 8419] <... openat resumed>) = 4 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [ 307.226582][ T8417] loop0: detected capacity change from 0 to 4096 [pid 5064] rmdir("./336" [pid 8420] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8419] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] mkdir("./337", 0777) = 0 [pid 8419] <... ioctl resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8419] close(3 [pid 5064] <... openat resumed>) = 3 [pid 8419] <... close resumed>) = 0 [pid 8419] close(4) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8419] mkdir("./file0", 0777) = 0 [pid 5065] <... ioctl resumed>) = 0 [ 307.289491][ T8419] loop1: detected capacity change from 0 to 4096 [ 307.329360][ T8421] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8419] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, ""./strace-static-x86_64: Process 8422 attached [pid 8422] set_robust_list(0x55555745a660, 24) = 0 [pid 8422] chdir("./330" [pid 8417] <... mount resumed>) = 0 [pid 8417] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8422 [pid 8420] <... write resumed>) = 2097152 [pid 8417] <... openat resumed>) = 3 [pid 8417] chdir("./file0") = 0 [pid 8422] <... chdir resumed>) = 0 [pid 8417] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8422] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8417] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8422] <... prctl resumed>) = 0 [pid 8417] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8422] setpgid(0, 0 [pid 8419] <... mount resumed>) = 0 [pid 8422] <... setpgid resumed>) = 0 [pid 8420] munmap(0x7f41e0600000, 138412032) = 0 [pid 8422] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 307.361189][ T8423] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8419] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8422] <... openat resumed>) = 3 [pid 8420] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8419] <... openat resumed>) = 3 [pid 8422] write(3, "1000", 4 [pid 8420] <... openat resumed>) = 4 [pid 8419] chdir("./file0" [pid 8422] <... write resumed>) = 4 [pid 8420] ioctl(4, LOOP_SET_FD, 3 [pid 8419] <... chdir resumed>) = 0 [pid 8422] close(3 [pid 8419] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5064] <... ioctl resumed>) = 0 [pid 8422] <... close resumed>) = 0 [pid 8419] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8417] <... open resumed>) = 4 [pid 5064] close(3 [pid 8422] symlink("/dev/binderfs", "./binderfs" [pid 8419] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] <... close resumed>) = 0 [pid 8422] <... symlink resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8422] memfd_create("syzkaller", 0 [pid 8417] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000./strace-static-x86_64: Process 8424 attached [pid 8422] <... memfd_create resumed>) = 3 [pid 8417] <... open resumed>) = 5 [pid 8422] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8424] set_robust_list(0x55555745a660, 24 [pid 8422] <... mmap resumed>) = 0x7f41e0600000 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8424 [pid 8424] <... set_robust_list resumed>) = 0 [pid 8420] <... ioctl resumed>) = 0 [pid 8419] <... open resumed>) = 4 [pid 8417] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8419] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8419] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8419] ftruncate(4, 33587195 [pid 8420] close(3) = 0 [pid 8417] <... mmap resumed>) = 0x20000000 [pid 8420] close(4 [pid 8424] <... chdir resumed>) = 0 [pid 8420] <... close resumed>) = 0 [pid 8424] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8419] <... ftruncate resumed>) = 0 [pid 8417] ftruncate(4, 33587195 [pid 8424] <... prctl resumed>) = 0 [pid 8420] mkdir("./file0", 0777 [pid 8424] setpgid(0, 0 [pid 8420] <... mkdir resumed>) = 0 [pid 8424] <... setpgid resumed>) = 0 [pid 8424] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8417] <... ftruncate resumed>) = 0 [pid 8419] unlink("./bus" [pid 8424] <... openat resumed>) = 3 [pid 8417] unlink("./bus" [pid 8424] write(3, "1000", 4) = 4 [pid 8420] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8424] close(3) = 0 [pid 8424] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8424] memfd_create("syzkaller", 0) = 3 [ 307.402873][ T8420] loop2: detected capacity change from 0 to 4096 [pid 8424] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8419] <... unlink resumed>) = 0 [pid 8419] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8419] exit_group(0 [pid 8417] <... unlink resumed>) = 0 [pid 8419] <... exit_group resumed>) = ? [pid 8417] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8417] exit_group(0) = ? [pid 8422] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8419] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8419, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5062] umount2("./331", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./331", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8420] <... mount resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 8420] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8424] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8420] <... openat resumed>) = 3 [pid 5062] getdents64(3, [pid 8420] chdir("./file0" [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8420] <... chdir resumed>) = 0 [pid 5062] umount2("./331/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8420] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8420] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] newfstatat(AT_FDCWD, "./331/binderfs", [pid 8420] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./331/binderfs") = 0 [pid 5062] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8417] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8417, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5061] umount2("./337", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./337", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [ 307.495947][ T8425] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5061] umount2("./337/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./337/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./337/binderfs") = 0 [pid 5061] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8424] <... write resumed>) = 2097152 [pid 8422] <... write resumed>) = 2097152 [pid 8420] <... open resumed>) = 4 [pid 5061] <... umount2 resumed>) = 0 [pid 8424] munmap(0x7f41e0600000, 138412032 [pid 8422] munmap(0x7f41e0600000, 138412032 [pid 8420] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./331/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8420] <... open resumed>) = 5 [pid 8424] <... munmap resumed>) = 0 [pid 8422] <... munmap resumed>) = 0 [pid 8420] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8424] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8422] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8424] <... openat resumed>) = 4 [pid 8420] <... mmap resumed>) = 0x20000000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8424] ioctl(4, LOOP_SET_FD, 3 [pid 8422] <... openat resumed>) = 4 [pid 8420] ftruncate(4, 33587195 [pid 5062] openat(AT_FDCWD, "./331/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] newfstatat(AT_FDCWD, "./337/file0", [pid 8422] ioctl(4, LOOP_SET_FD, 3 [pid 8424] <... ioctl resumed>) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8424] close(3 [pid 5061] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8424] <... close resumed>) = 0 [pid 5062] newfstatat(4, "", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8424] close(4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] openat(AT_FDCWD, "./337/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8424] <... close resumed>) = 0 [pid 8420] <... ftruncate resumed>) = 0 [pid 5062] getdents64(4, [pid 5061] <... openat resumed>) = 4 [pid 8424] mkdir("./file0", 0777 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] newfstatat(4, "", [pid 8424] <... mkdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, [pid 5062] getdents64(4, [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8424] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] getdents64(4, [pid 5062] close(4 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8422] <... ioctl resumed>) = 0 [pid 8420] unlink("./bus" [pid 5061] close(4 [pid 8422] close(3 [pid 8420] <... unlink resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8422] <... close resumed>) = 0 [pid 8420] sendfile(-1, -1, NULL, 281474978811909 [pid 5062] rmdir("./331/file0" [pid 5061] rmdir("./337/file0" [pid 8422] close(4 [pid 8420] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8422] <... close resumed>) = 0 [pid 8420] exit_group(0 [pid 5061] getdents64(3, [pid 8422] mkdir("./file0", 0777 [pid 8420] <... exit_group resumed>) = ? [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] getdents64(3, [pid 5061] close(3 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] <... close resumed>) = 0 [pid 5062] close(3 [pid 5061] rmdir("./337" [pid 5062] <... close resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] mkdir("./338", 0777 [pid 5062] rmdir("./331" [pid 5061] <... mkdir resumed>) = 0 [pid 8422] <... mkdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8422] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8420] +++ exited with 0 +++ [pid 5061] <... openat resumed>) = 3 [pid 5062] <... rmdir resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8420, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=3 /* 0.03 s */} --- [ 307.587695][ T8424] loop3: detected capacity change from 0 to 4096 [ 307.591266][ T8422] loop4: detected capacity change from 0 to 4096 [pid 5062] mkdir("./332", 0777 [pid 5063] umount2("./332", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... mkdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./332", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 8424] <... mount resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8424] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] umount2("./332/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8424] <... openat resumed>) = 3 [pid 8424] chdir("./file0") = 0 [pid 8424] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8424] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] newfstatat(AT_FDCWD, "./332/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./332/binderfs" [pid 8422] <... mount resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8424] <... open resumed>) = 4 [pid 8422] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5061] <... ioctl resumed>) = 0 [pid 8422] chdir("./file0" [pid 8424] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8422] <... chdir resumed>) = 0 [pid 8424] <... open resumed>) = 5 [pid 8422] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8422] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] close(3 [pid 8424] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8422] <... open resumed>) = 4 [pid 5061] <... close resumed>) = 0 [ 307.654849][ T8426] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 307.680188][ T8427] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8424] <... mmap resumed>) = 0x20000000 [pid 8422] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8428 ./strace-static-x86_64: Process 8428 attached [pid 8428] set_robust_list(0x55555745a660, 24) = 0 [pid 8428] chdir("./338" [pid 8424] ftruncate(4, 33587195 [pid 8422] <... open resumed>) = 5 [pid 8428] <... chdir resumed>) = 0 [pid 8428] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8428] setpgid(0, 0) = 0 [pid 8424] <... ftruncate resumed>) = 0 [pid 8422] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] <... umount2 resumed>) = 0 [pid 8428] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8424] unlink("./bus" [pid 8422] <... mmap resumed>) = 0x20000000 [pid 5063] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... ioctl resumed>) = 0 [pid 8422] ftruncate(4, 33587195 [pid 8428] write(3, "1000", 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8428] <... write resumed>) = 4 [pid 5063] newfstatat(AT_FDCWD, "./332/file0", [pid 8428] close(3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8428] <... close resumed>) = 0 [pid 8424] <... unlink resumed>) = 0 [pid 8422] <... ftruncate resumed>) = 0 [pid 5063] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] close(3 [pid 8428] symlink("/dev/binderfs", "./binderfs" [pid 8424] sendfile(-1, -1, NULL, 281474978811909 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... close resumed>) = 0 [pid 8428] <... symlink resumed>) = 0 [pid 8424] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8422] unlink("./bus" [pid 5063] openat(AT_FDCWD, "./332/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8424] exit_group(0 [pid 8428] memfd_create("syzkaller", 0 [pid 5063] <... openat resumed>) = 4 [pid 8424] <... exit_group resumed>) = ? [pid 5063] newfstatat(4, "", [pid 8428] <... memfd_create resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 8429 attached [pid 8428] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] getdents64(4, [pid 8429] set_robust_list(0x55555745a660, 24 [pid 8428] <... mmap resumed>) = 0x7f41e0600000 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8429] <... set_robust_list resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8429 [pid 5063] getdents64(4, [pid 8429] chdir("./332" [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 8422] <... unlink resumed>) = 0 [pid 5063] rmdir("./332/file0" [pid 8429] <... chdir resumed>) = 0 [pid 8422] sendfile(-1, -1, NULL, 281474978811909 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, [pid 8422] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 8429] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8422] exit_group(0 [pid 5063] rmdir("./332" [pid 8429] <... prctl resumed>) = 0 [pid 8422] <... exit_group resumed>) = ? [pid 8429] setpgid(0, 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8429] <... setpgid resumed>) = 0 [pid 5063] mkdir("./333", 0777 [pid 8429] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... mkdir resumed>) = 0 [pid 8429] <... openat resumed>) = 3 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8429] write(3, "1000", 4) = 4 [pid 8429] close(3 [pid 8424] +++ exited with 0 +++ [pid 8429] <... close resumed>) = 0 [pid 8429] symlink("/dev/binderfs", "./binderfs" [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8424, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=3 /* 0.03 s */} --- [pid 8429] <... symlink resumed>) = 0 [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] umount2("./337", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8429] memfd_create("syzkaller", 0 [pid 5064] openat(AT_FDCWD, "./337", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8429] <... memfd_create resumed>) = 3 [pid 8422] +++ exited with 0 +++ [pid 5064] <... openat resumed>) = 3 [pid 5064] newfstatat(3, "", [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8422, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8429] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./330", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./337/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8429] <... mmap resumed>) = 0x7f41e0600000 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./337/binderfs", [pid 5065] openat(AT_FDCWD, "./330", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] newfstatat(3, "", [pid 5064] unlink("./337/binderfs" [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] <... unlink resumed>) = 0 [pid 5065] umount2("./330/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./330/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] unlink("./330/binderfs") = 0 [pid 5065] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8428] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... umount2 resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5064] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./330/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] newfstatat(AT_FDCWD, "./337/file0", [pid 8429] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] umount2("./330/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] openat(AT_FDCWD, "./330/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... openat resumed>) = 4 [pid 5064] openat(AT_FDCWD, "./337/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] <... openat resumed>) = 4 [pid 5065] getdents64(4, [pid 5064] newfstatat(4, "", [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./330/file0") = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5065] getdents64(3, [pid 5064] getdents64(4, [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 8428] <... write resumed>) = 2097152 [pid 5065] close(3 [pid 5064] <... close resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... close resumed>) = 0 [pid 5064] rmdir("./337/file0" [pid 5065] rmdir("./330"./strace-static-x86_64: Process 8430 attached [pid 8429] <... write resumed>) = 2097152 [pid 8428] munmap(0x7f41e0600000, 138412032 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 8430] set_robust_list(0x55555745a660, 24) = 0 [pid 8430] chdir("./333") = 0 [pid 8430] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5064] getdents64(3, [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8430 [pid 8430] setpgid(0, 0 [pid 5065] mkdir("./331", 0777 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8430] <... setpgid resumed>) = 0 [pid 5064] close(3 [pid 8430] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8429] munmap(0x7f41e0600000, 138412032 [pid 8428] <... munmap resumed>) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 8430] <... openat resumed>) = 3 [pid 5064] rmdir("./337" [pid 8428] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 8428] <... openat resumed>) = 4 [pid 8428] ioctl(4, LOOP_SET_FD, 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8430] write(3, "1000", 4) = 4 [pid 8429] <... munmap resumed>) = 0 [pid 8428] <... ioctl resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 8430] close(3 [pid 8429] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8428] close(3 [pid 5064] mkdir("./338", 0777 [pid 8430] <... close resumed>) = 0 [pid 8430] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8429] <... openat resumed>) = 4 [pid 8428] <... close resumed>) = 0 [pid 8428] close(4 [pid 5064] <... mkdir resumed>) = 0 [pid 8429] ioctl(4, LOOP_SET_FD, 3 [pid 8430] memfd_create("syzkaller", 0 [pid 8428] <... close resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8430] <... memfd_create resumed>) = 3 [pid 8428] mkdir("./file0", 0777 [pid 5064] <... openat resumed>) = 3 [pid 8430] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8428] <... mkdir resumed>) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8430] <... mmap resumed>) = 0x7f41e0600000 [pid 8428] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8429] <... ioctl resumed>) = 0 [pid 8429] close(3) = 0 [pid 8429] close(4) = 0 [pid 8429] mkdir("./file0", 0777) = 0 [ 307.921893][ T8428] loop0: detected capacity change from 0 to 4096 [ 307.936290][ T8429] loop1: detected capacity change from 0 to 4096 [pid 8429] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8430] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... ioctl resumed>) = 0 [pid 5064] close(3) = 0 [pid 8428] <... mount resumed>) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8432 attached [pid 8428] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] close(3 [pid 8432] set_robust_list(0x55555745a660, 24 [pid 8428] <... openat resumed>) = 3 [pid 5065] <... close resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8432 [pid 8428] chdir("./file0") = 0 [pid 8432] <... set_robust_list resumed>) = 0 [pid 8428] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8428] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8428] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8432] chdir("./338" [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8433 [ 307.999201][ T8431] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds ./strace-static-x86_64: Process 8433 attached [pid 8432] <... chdir resumed>) = 0 [pid 8433] set_robust_list(0x55555745a660, 24 [pid 8432] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8433] <... set_robust_list resumed>) = 0 [pid 8432] setpgid(0, 0 [pid 8428] <... open resumed>) = 4 [pid 8430] <... write resumed>) = 2097152 [pid 8433] chdir("./331" [pid 8428] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8433] <... chdir resumed>) = 0 [pid 8432] <... setpgid resumed>) = 0 [pid 8430] munmap(0x7f41e0600000, 138412032 [pid 8428] <... open resumed>) = 5 [ 308.072158][ T28] kauditd_printk_skb: 99 callbacks suppressed [ 308.072175][ T28] audit: type=1800 audit(1708423460.600:5018): pid=8428 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 308.103063][ T8434] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8433] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8432] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8430] <... munmap resumed>) = 0 [pid 8428] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8430] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8430] ioctl(4, LOOP_SET_FD, 3 [pid 8433] <... prctl resumed>) = 0 [pid 8432] <... openat resumed>) = 3 [pid 8432] write(3, "1000", 4 [pid 8433] setpgid(0, 0 [pid 8430] <... ioctl resumed>) = 0 [pid 8433] <... setpgid resumed>) = 0 [pid 8432] <... write resumed>) = 4 [pid 8429] <... mount resumed>) = 0 [pid 8428] <... ftruncate resumed>) = 0 [pid 8432] close(3 [pid 8429] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8432] <... close resumed>) = 0 [pid 8432] symlink("/dev/binderfs", "./binderfs" [pid 8430] close(3) = 0 [pid 8430] close(4) = 0 [pid 8430] mkdir("./file0", 0777 [pid 8432] <... symlink resumed>) = 0 [pid 8430] <... mkdir resumed>) = 0 [pid 8433] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8432] memfd_create("syzkaller", 0 [pid 8430] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8429] <... openat resumed>) = 3 [pid 8428] unlink("./bus" [pid 8433] <... openat resumed>) = 3 [pid 8432] <... memfd_create resumed>) = 3 [pid 8433] write(3, "1000", 4 [pid 8432] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8429] chdir("./file0" [pid 8433] <... write resumed>) = 4 [pid 8429] <... chdir resumed>) = 0 [pid 8433] close(3 [pid 8432] <... mmap resumed>) = 0x7f41e0600000 [pid 8429] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8433] <... close resumed>) = 0 [pid 8429] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8433] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8429] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [ 308.120867][ T28] audit: type=1800 audit(1708423460.650:5019): pid=8428 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 308.125789][ T8430] loop2: detected capacity change from 0 to 4096 [ 308.149123][ T28] audit: type=1800 audit(1708423460.650:5020): pid=8428 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [pid 8433] memfd_create("syzkaller", 0) = 3 [pid 8429] <... open resumed>) = 4 [pid 8433] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8432] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8429] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8429] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0x7f41e0600000 [pid 8428] <... unlink resumed>) = 0 [pid 8428] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8428] exit_group(0) = ? [ 308.208493][ T28] audit: type=1800 audit(1708423460.730:5021): pid=8429 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 308.246045][ T8435] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8429] ftruncate(4, 33587195 [pid 8432] <... write resumed>) = 2097152 [pid 8432] munmap(0x7f41e0600000, 138412032 [pid 8430] <... mount resumed>) = 0 [pid 8430] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8430] chdir("./file0" [pid 8428] +++ exited with 0 +++ [pid 8433] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8430] <... chdir resumed>) = 0 [pid 8429] <... ftruncate resumed>) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8428, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 8430] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8429] unlink("./bus" [pid 8430] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8430] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] umount2("./338", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./338", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./338/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8432] <... munmap resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./338/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8432] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] unlink("./338/binderfs" [pid 8432] <... openat resumed>) = 4 [ 308.268042][ T28] audit: type=1800 audit(1708423460.760:5022): pid=8429 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 308.298226][ T28] audit: type=1800 audit(1708423460.770:5023): pid=8429 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop1" ino=18 res=0 errno=0 [pid 5061] <... unlink resumed>) = 0 [pid 8432] ioctl(4, LOOP_SET_FD, 3 [pid 5061] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8429] <... unlink resumed>) = 0 [pid 8429] sendfile(-1, -1, NULL, 281474978811909 [pid 8430] <... open resumed>) = 4 [pid 8429] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5061] <... umount2 resumed>) = 0 [pid 8430] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8429] exit_group(0) = ? [pid 8430] <... open resumed>) = 5 [pid 5061] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8430] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8430] <... mmap resumed>) = 0x20000000 [pid 5061] newfstatat(AT_FDCWD, "./338/file0", [pid 8430] ftruncate(4, 33587195 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8430] <... ftruncate resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8430] unlink("./bus" [pid 5061] openat(AT_FDCWD, "./338/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./338/file0" [pid 8432] <... ioctl resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8432] close(3) = 0 [pid 8432] close(4 [pid 5061] getdents64(3, [pid 8429] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8429, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [ 308.316340][ T8432] loop3: detected capacity change from 0 to 4096 [ 308.338014][ T28] audit: type=1800 audit(1708423460.860:5024): pid=8430 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop2" ino=18 res=0 errno=0 [pid 8432] <... close resumed>) = 0 [pid 8433] <... write resumed>) = 2097152 [pid 8430] <... unlink resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8430] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8430] exit_group(0) = ? [pid 5061] close(3 [pid 8432] mkdir("./file0", 0777 [pid 5061] <... close resumed>) = 0 [pid 8432] <... mkdir resumed>) = 0 [pid 5061] rmdir("./338" [pid 8433] munmap(0x7f41e0600000, 138412032 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] mkdir("./339", 0777 [pid 8432] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] <... mkdir resumed>) = 0 [pid 8430] +++ exited with 0 +++ [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 8433] <... munmap resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8430, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5062] umount2("./332", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8433] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8433] <... openat resumed>) = 4 [ 308.369106][ T28] audit: type=1800 audit(1708423460.870:5025): pid=8430 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 308.389683][ T28] audit: type=1800 audit(1708423460.870:5026): pid=8430 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop2" ino=18 res=0 errno=0 [pid 5062] openat(AT_FDCWD, "./332", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8433] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... openat resumed>) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, [pid 5063] umount2("./333", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./332/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8433] <... ioctl resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./333", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8433] close(3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 3 [pid 5062] newfstatat(AT_FDCWD, "./332/binderfs", [pid 8433] <... close resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 8433] close(4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8433] <... close resumed>) = 0 [pid 5062] unlink("./332/binderfs") = 0 [pid 8433] mkdir("./file0", 0777 [pid 5063] getdents64(3, [pid 5062] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8433] <... mkdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8433] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] umount2("./333/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./333/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./333/binderfs") = 0 [pid 5063] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./332/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 308.419192][ T8433] loop4: detected capacity change from 0 to 4096 [pid 5062] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./332/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./332/file0") = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./332") = 0 [pid 5062] mkdir("./333", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... openat resumed>) = 3 [pid 8432] <... mount resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8432] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] newfstatat(AT_FDCWD, "./333/file0", [pid 8433] <... mount resumed>) = 0 [pid 8432] <... openat resumed>) = 3 [pid 8432] chdir("./file0" [pid 8433] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8432] <... chdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8433] <... openat resumed>) = 3 [pid 8432] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8433] chdir("./file0" [pid 8432] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8433] <... chdir resumed>) = 0 [pid 8432] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8433] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8433] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 4 [pid 5063] openat(AT_FDCWD, "./333/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8433] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] <... ioctl resumed>) = 0 [pid 8433] <... open resumed>) = 5 [pid 5063] <... openat resumed>) = 4 [pid 8433] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [ 308.483386][ T8437] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 308.483815][ T8436] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5061] close(3 [pid 8433] <... mmap resumed>) = 0x20000000 [pid 5063] newfstatat(4, "", [pid 5061] <... close resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8438 attached [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8433] ftruncate(4, 33587195 [pid 8438] set_robust_list(0x55555745a660, 24 [pid 5063] getdents64(4, [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8438 [pid 8438] <... set_robust_list resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8438] chdir("./339" [pid 5063] getdents64(4, [pid 8438] <... chdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8438] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] close(4 [pid 8438] <... prctl resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 8438] setpgid(0, 0 [pid 5063] rmdir("./333/file0" [pid 8438] <... setpgid resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8438] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8433] <... ftruncate resumed>) = 0 [pid 8432] <... open resumed>) = 4 [pid 5063] getdents64(3, [pid 8438] write(3, "1000", 4 [pid 8432] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8438] <... write resumed>) = 4 [pid 8438] close(3 [pid 8433] unlink("./bus" [pid 8432] <... open resumed>) = 5 [pid 5063] close(3 [pid 8438] <... close resumed>) = 0 [pid 8438] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... close resumed>) = 0 [pid 8438] <... symlink resumed>) = 0 [pid 5063] rmdir("./333" [pid 8432] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] <... rmdir resumed>) = 0 [pid 5063] mkdir("./334", 0777) = 0 [pid 8432] <... mmap resumed>) = 0x20000000 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8438] memfd_create("syzkaller", 0 [pid 8433] <... unlink resumed>) = 0 [pid 8433] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8438] <... memfd_create resumed>) = 3 [ 308.539471][ T28] audit: type=1800 audit(1708423461.060:5027): pid=8433 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop4" ino=18 res=0 errno=0 [pid 8438] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8433] exit_group(0) = ? [pid 8432] ftruncate(4, 33587195 [pid 5062] <... ioctl resumed>) = 0 [pid 8433] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8433, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5062] close(3 [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] umount2("./331", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8439 attached [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8439 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8439] set_robust_list(0x55555745a660, 24 [pid 5065] openat(AT_FDCWD, "./331", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8439] <... set_robust_list resumed>) = 0 [pid 8439] chdir("./333" [pid 5065] <... openat resumed>) = 3 [pid 8439] <... chdir resumed>) = 0 [pid 8432] <... ftruncate resumed>) = 0 [pid 5065] newfstatat(3, "", [pid 8439] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8439] <... prctl resumed>) = 0 [pid 5065] getdents64(3, [pid 8439] setpgid(0, 0) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8439] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] umount2("./331/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8439] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./331/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8432] unlink("./bus" [pid 5065] unlink("./331/binderfs" [pid 8439] write(3, "1000", 4) = 4 [pid 5065] <... unlink resumed>) = 0 [pid 8439] close(3) = 0 [pid 8439] symlink("/dev/binderfs", "./binderfs" [pid 5065] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8439] <... symlink resumed>) = 0 [pid 8439] memfd_create("syzkaller", 0) = 3 [pid 8439] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8438] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8432] <... unlink resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 8432] sendfile(-1, -1, NULL, 281474978811909 [pid 8439] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8432] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8432] exit_group(0 [pid 5065] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8432] <... exit_group resumed>) = ? [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./331/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8432] +++ exited with 0 +++ [pid 5065] umount2("./331/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8432, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5065] openat(AT_FDCWD, "./331/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", [pid 5064] umount2("./338", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] getdents64(4, [pid 5064] openat(AT_FDCWD, "./338", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] <... openat resumed>) = 3 [pid 8439] <... write resumed>) = 2097152 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] newfstatat(3, "", [pid 8439] munmap(0x7f41e0600000, 138412032 [pid 5065] close(4 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] getdents64(3, [pid 5065] rmdir("./331/file0" [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, [pid 5064] umount2("./338/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] close(3 [pid 5064] newfstatat(AT_FDCWD, "./338/binderfs", [pid 5065] <... close resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] rmdir("./331" [pid 5064] unlink("./338/binderfs" [pid 8439] <... munmap resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 8439] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] mkdir("./332", 0777 [pid 5064] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8439] <... openat resumed>) = 4 [pid 8439] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] <... ioctl resumed>) = 0 [pid 8439] <... ioctl resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5063] close(3 [pid 8439] close(3 [pid 8438] <... write resumed>) = 2097152 [pid 5064] <... umount2 resumed>) = 0 [pid 8439] <... close resumed>) = 0 [pid 8438] munmap(0x7f41e0600000, 138412032 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] <... close resumed>) = 0 [pid 8439] close(4 [pid 8438] <... munmap resumed>) = 0 [pid 5064] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8439] <... close resumed>) = 0 [pid 8438] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8439] mkdir("./file0", 0777) = 0 [pid 5064] newfstatat(AT_FDCWD, "./338/file0", [pid 8438] <... openat resumed>) = 4 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8439] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [ 308.700496][ T8439] loop1: detected capacity change from 0 to 4096 [pid 5064] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8438] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./338/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 8440 attached [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8440 [pid 8440] set_robust_list(0x55555745a660, 24 [pid 8439] <... mount resumed>) = 0 [pid 8438] <... ioctl resumed>) = 0 [pid 5064] <... openat resumed>) = 4 [pid 5064] newfstatat(4, "", [pid 8440] <... set_robust_list resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, [pid 8440] chdir("./334" [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, [pid 8439] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8438] close(3 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8440] <... chdir resumed>) = 0 [pid 8439] <... openat resumed>) = 3 [pid 8438] <... close resumed>) = 0 [pid 5064] close(4 [pid 8440] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8439] chdir("./file0" [pid 8438] close(4 [pid 5064] <... close resumed>) = 0 [pid 8440] <... prctl resumed>) = 0 [pid 8439] <... chdir resumed>) = 0 [pid 8438] <... close resumed>) = 0 [pid 5064] rmdir("./338/file0" [pid 8440] setpgid(0, 0 [pid 8439] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8440] <... setpgid resumed>) = 0 [pid 8439] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8438] mkdir("./file0", 0777 [pid 5064] <... rmdir resumed>) = 0 [pid 8440] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8439] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8438] <... mkdir resumed>) = 0 [pid 8440] <... openat resumed>) = 3 [pid 8440] write(3, "1000", 4 [pid 8438] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] getdents64(3, [pid 8440] <... write resumed>) = 4 [pid 8440] close(3 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8440] <... close resumed>) = 0 [pid 5064] close(3 [pid 8440] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./338" [pid 8440] <... symlink resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] mkdir("./339", 0777 [pid 8440] memfd_create("syzkaller", 0 [pid 5064] <... mkdir resumed>) = 0 [ 308.752646][ T8438] loop0: detected capacity change from 0 to 4096 [ 308.763320][ T8441] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8440] <... memfd_create resumed>) = 3 [pid 5065] <... ioctl resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8440] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5064] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8439] <... open resumed>) = 4 [pid 8439] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8439] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 8439] ftruncate(4, 33587195 [pid 8438] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8438] chdir("./file0" [pid 5065] close(3 [pid 8438] <... chdir resumed>) = 0 [pid 8438] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8438] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8438] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000./strace-static-x86_64: Process 8443 attached [pid 8439] <... ftruncate resumed>) = 0 [pid 8438] <... open resumed>) = 4 [pid 8438] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8443 [pid 8443] set_robust_list(0x55555745a660, 24) = 0 [pid 8443] chdir("./332" [pid 8439] unlink("./bus" [pid 8438] <... open resumed>) = 5 [pid 8443] <... chdir resumed>) = 0 [pid 8438] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8443] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8438] <... mmap resumed>) = 0x20000000 [pid 5064] <... ioctl resumed>) = 0 [pid 8443] <... prctl resumed>) = 0 [ 308.830315][ T8442] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8443] setpgid(0, 0) = 0 [pid 8438] ftruncate(4, 33587195 [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8443] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8440] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8444 [pid 8443] write(3, "1000", 4 [pid 8438] <... ftruncate resumed>) = 0 [pid 8443] <... write resumed>) = 4 ./strace-static-x86_64: Process 8444 attached [pid 8444] set_robust_list(0x55555745a660, 24) = 0 [pid 8444] chdir("./339" [pid 8443] close(3 [pid 8439] <... unlink resumed>) = 0 [pid 8443] <... close resumed>) = 0 [pid 8443] symlink("/dev/binderfs", "./binderfs" [pid 8439] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8444] <... chdir resumed>) = 0 [pid 8443] <... symlink resumed>) = 0 [pid 8439] exit_group(0 [pid 8444] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8438] unlink("./bus" [pid 8444] setpgid(0, 0) = 0 [pid 8444] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8444] write(3, "1000", 4) = 4 [pid 8444] close(3) = 0 [pid 8444] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8444] memfd_create("syzkaller", 0) = 3 [pid 8443] memfd_create("syzkaller", 0 [pid 8439] <... exit_group resumed>) = ? [pid 8438] <... unlink resumed>) = 0 [pid 8438] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8438] exit_group(0) = ? [pid 8444] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8440] <... write resumed>) = 2097152 [pid 8440] munmap(0x7f41e0600000, 138412032 [pid 8443] <... memfd_create resumed>) = 3 [pid 8440] <... munmap resumed>) = 0 [pid 8443] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8438] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8438, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5061] umount2("./339", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./339", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8440] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5061] <... openat resumed>) = 3 [pid 8440] <... openat resumed>) = 4 [pid 5061] newfstatat(3, "", [pid 8440] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8439] +++ exited with 0 +++ [pid 5061] getdents64(3, [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8439, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 8440] <... ioctl resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8440] close(3) = 0 [pid 8440] close(4) = 0 [pid 8440] mkdir("./file0", 0777 [pid 5061] umount2("./339/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8440] <... mkdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./339/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./339/binderfs" [pid 5062] umount2("./333", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... unlink resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./333", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8440] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] <... openat resumed>) = 3 [pid 5062] newfstatat(3, "", [pid 5061] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./333/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./333/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8444] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] unlink("./333/binderfs" [pid 5061] <... umount2 resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [ 308.950634][ T8440] loop2: detected capacity change from 0 to 4096 [pid 8443] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./339/file0", [pid 8440] <... mount resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8440] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8440] chdir("./file0" [pid 5061] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8440] <... chdir resumed>) = 0 [pid 8440] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./339/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8440] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, [pid 5062] <... umount2 resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 5062] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8444] <... write resumed>) = 2097152 [pid 8440] <... open resumed>) = 4 [pid 5061] <... close resumed>) = 0 [ 309.007723][ T8445] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5061] rmdir("./339/file0" [pid 8444] munmap(0x7f41e0600000, 138412032 [pid 8443] <... write resumed>) = 2097152 [pid 8440] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8443] munmap(0x7f41e0600000, 138412032 [pid 8440] <... open resumed>) = 5 [pid 5061] <... rmdir resumed>) = 0 [pid 8444] <... munmap resumed>) = 0 [pid 8440] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] newfstatat(AT_FDCWD, "./333/file0", [pid 5061] getdents64(3, [pid 8443] <... munmap resumed>) = 0 [pid 8440] <... mmap resumed>) = 0x20000000 [pid 8444] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8443] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] close(3 [pid 8444] <... openat resumed>) = 4 [pid 8443] <... openat resumed>) = 4 [pid 8440] ftruncate(4, 33587195 [pid 5062] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... close resumed>) = 0 [pid 8443] ioctl(4, LOOP_SET_FD, 3 [pid 5061] rmdir("./339" [pid 8444] ioctl(4, LOOP_SET_FD, 3 [pid 8440] <... ftruncate resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./333/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", [pid 8443] <... ioctl resumed>) = 0 [pid 8440] unlink("./bus" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8443] close(3 [pid 5061] mkdir("./340", 0777 [pid 8443] <... close resumed>) = 0 [pid 5062] getdents64(4, [pid 5061] <... mkdir resumed>) = 0 [pid 8443] close(4 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8444] <... ioctl resumed>) = 0 [pid 8443] <... close resumed>) = 0 [pid 8440] <... unlink resumed>) = 0 [pid 8444] close(3 [pid 5061] <... openat resumed>) = 3 [pid 8440] sendfile(-1, -1, NULL, 281474978811909 [pid 8444] <... close resumed>) = 0 [pid 8443] mkdir("./file0", 0777 [pid 8440] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5062] getdents64(4, [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8444] close(4) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./333/file0" [pid 8440] exit_group(0 [pid 8444] mkdir("./file0", 0777) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8444] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] close(3 [pid 8440] <... exit_group resumed>) = ? [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./333") = 0 [pid 8443] <... mkdir resumed>) = 0 [pid 5062] mkdir("./334", 0777 [pid 8443] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] <... mkdir resumed>) = 0 [ 309.077806][ T8443] loop4: detected capacity change from 0 to 4096 [ 309.081032][ T8444] loop3: detected capacity change from 0 to 4096 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8444] <... mount resumed>) = 0 [pid 8444] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8444] chdir("./file0") = 0 [pid 8444] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8444] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8440] +++ exited with 0 +++ [pid 5061] <... ioctl resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8440, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5061] close(3) = 0 [pid 8443] <... mount resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8443] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] umount2("./334", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8448 attached [pid 8443] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8448 [pid 8443] chdir("./file0" [pid 5063] openat(AT_FDCWD, "./334", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8443] <... chdir resumed>) = 0 [pid 8443] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", [pid 8443] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8448] set_robust_list(0x55555745a660, 24 [pid 5063] getdents64(3, [pid 8448] <... set_robust_list resumed>) = 0 [pid 8448] chdir("./340" [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8448] <... chdir resumed>) = 0 [pid 5063] umount2("./334/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8448] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8443] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8448] setpgid(0, 0) = 0 [pid 8444] <... open resumed>) = 4 [pid 5063] newfstatat(AT_FDCWD, "./334/binderfs", [pid 8443] <... open resumed>) = 4 [pid 8444] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8448] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 309.141527][ T8446] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 309.144580][ T8447] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] unlink("./334/binderfs" [pid 8448] <... openat resumed>) = 3 [pid 5063] <... unlink resumed>) = 0 [pid 8444] <... open resumed>) = 5 [pid 8444] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8448] write(3, "1000", 4 [pid 8444] <... mmap resumed>) = 0x20000000 [pid 8443] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8448] <... write resumed>) = 4 [pid 8448] close(3) = 0 [pid 8443] <... open resumed>) = 5 [pid 8443] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8448] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8444] ftruncate(4, 33587195 [pid 8448] memfd_create("syzkaller", 0 [pid 8443] <... mmap resumed>) = 0x20000000 [pid 8448] <... memfd_create resumed>) = 3 [pid 8444] <... ftruncate resumed>) = 0 [pid 8443] ftruncate(4, 33587195 [pid 8448] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8444] unlink("./bus" [pid 8448] <... mmap resumed>) = 0x7f41e0600000 [pid 8443] <... ftruncate resumed>) = 0 [pid 8444] <... unlink resumed>) = 0 [pid 8444] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8444] exit_group(0) = ? [pid 8443] unlink("./bus" [pid 5062] <... ioctl resumed>) = 0 [pid 8444] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8444, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5063] <... umount2 resumed>) = 0 [pid 5064] umount2("./339", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./339", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, [pid 8443] <... unlink resumed>) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8443] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] umount2("./339/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8443] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] close(3 [pid 8443] exit_group(0 [pid 5064] newfstatat(AT_FDCWD, "./339/binderfs", [pid 8443] <... exit_group resumed>) = ? [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... close resumed>) = 0 [pid 5064] unlink("./339/binderfs") = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(AT_FDCWD, "./334/file0", [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8449 attached ) = -1 EINVAL (Invalid argument) [pid 8449] set_robust_list(0x55555745a660, 24) = 0 [pid 8449] chdir("./334") = 0 [pid 8449] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8449] setpgid(0, 0) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8449 [pid 8449] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] openat(AT_FDCWD, "./334/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", [pid 8449] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 8449] write(3, "1000", 4) = 4 [pid 8449] close(3) = 0 [pid 8449] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8449] <... symlink resumed>) = 0 [pid 5063] getdents64(4, [pid 8449] memfd_create("syzkaller", 0 [pid 8443] +++ exited with 0 +++ [pid 5064] <... umount2 resumed>) = 0 [pid 8449] <... memfd_create resumed>) = 3 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8443, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8448] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(4 [pid 5065] umount2("./332", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... close resumed>) = 0 [pid 8449] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] rmdir("./334/file0" [pid 5065] openat(AT_FDCWD, "./332", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] newfstatat(AT_FDCWD, "./339/file0", [pid 5065] <... openat resumed>) = 3 [pid 5065] newfstatat(3, "", [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(3, [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] openat(AT_FDCWD, "./339/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] umount2("./332/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] <... openat resumed>) = 4 [pid 5065] newfstatat(AT_FDCWD, "./332/binderfs", [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] getdents64(4, [pid 5065] unlink("./332/binderfs" [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] <... unlink resumed>) = 0 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] close(4 [pid 5063] <... rmdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] getdents64(3, [pid 5064] rmdir("./339/file0" [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5064] <... rmdir resumed>) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5063] <... close resumed>) = 0 [pid 5064] rmdir("./339" [pid 5063] rmdir("./334" [pid 5064] <... rmdir resumed>) = 0 [pid 8448] <... write resumed>) = 2097152 [pid 5063] <... rmdir resumed>) = 0 [pid 8448] munmap(0x7f41e0600000, 138412032 [pid 5065] <... umount2 resumed>) = 0 [pid 5064] mkdir("./340", 0777 [pid 5063] mkdir("./335", 0777) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 8448] <... munmap resumed>) = 0 [pid 5065] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... openat resumed>) = 3 [pid 5065] newfstatat(AT_FDCWD, "./332/file0", [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5065] umount2("./332/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5065] openat(AT_FDCWD, "./332/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8449] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8448] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] <... openat resumed>) = 4 [pid 5065] newfstatat(4, "", [pid 8448] <... openat resumed>) = 4 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8448] ioctl(4, LOOP_SET_FD, 3 [pid 5065] getdents64(4, [pid 8449] <... write resumed>) = 2097152 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8448] <... ioctl resumed>) = 0 [pid 8449] munmap(0x7f41e0600000, 138412032 [pid 8448] close(3 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8449] <... munmap resumed>) = 0 [pid 8448] <... close resumed>) = 0 [pid 8449] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8448] close(4) = 0 [pid 8449] <... openat resumed>) = 4 [pid 8448] mkdir("./file0", 0777) = 0 [pid 8449] ioctl(4, LOOP_SET_FD, 3 [pid 5065] close(4 [pid 5063] <... ioctl resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5063] close(3) = 0 [pid 8448] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] rmdir("./332/file0"./strace-static-x86_64: Process 8450 attached ) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 8450] set_robust_list(0x55555745a660, 24 [pid 5065] getdents64(3, [pid 5064] close(3 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8450 [pid 8450] <... set_robust_list resumed>) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] <... close resumed>) = 0 [pid 5065] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8451 attached [pid 8450] chdir("./335" [pid 5065] rmdir("./332" [pid 8451] set_robust_list(0x55555745a660, 24 [pid 8449] <... ioctl resumed>) = 0 [pid 8449] close(3) = 0 [pid 8449] close(4) = 0 [ 309.366055][ T8448] loop0: detected capacity change from 0 to 4096 [ 309.402222][ T8449] loop1: detected capacity change from 0 to 4096 [pid 8449] mkdir("./file0", 0777 [pid 8451] <... set_robust_list resumed>) = 0 [pid 8450] <... chdir resumed>) = 0 [pid 8449] <... mkdir resumed>) = 0 [pid 8448] <... mount resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 8451] chdir("./340" [pid 8448] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8451 [pid 8448] <... openat resumed>) = 3 [pid 8450] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8448] chdir("./file0" [pid 8451] <... chdir resumed>) = 0 [pid 8450] <... prctl resumed>) = 0 [pid 5065] mkdir("./333", 0777 [pid 8450] setpgid(0, 0 [pid 8449] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8448] <... chdir resumed>) = 0 [pid 8451] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8450] <... setpgid resumed>) = 0 [pid 8448] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] <... mkdir resumed>) = 0 [pid 8451] <... prctl resumed>) = 0 [pid 8450] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8448] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8451] setpgid(0, 0) = 0 [pid 8450] <... openat resumed>) = 3 [pid 8448] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] <... openat resumed>) = 3 [pid 8451] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8450] write(3, "1000", 4 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8450] <... write resumed>) = 4 [pid 8450] close(3) = 0 [pid 8450] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8451] <... openat resumed>) = 3 [pid 8450] memfd_create("syzkaller", 0 [pid 8448] <... open resumed>) = 4 [pid 8448] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8451] write(3, "1000", 4 [pid 8450] <... memfd_create resumed>) = 3 [pid 8449] <... mount resumed>) = 0 [pid 8451] <... write resumed>) = 4 [pid 8451] close(3 [pid 8450] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8449] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8451] <... close resumed>) = 0 [pid 8450] <... mmap resumed>) = 0x7f41e0600000 [pid 8449] <... openat resumed>) = 3 [pid 8451] symlink("/dev/binderfs", "./binderfs" [pid 8449] chdir("./file0" [pid 8451] <... symlink resumed>) = 0 [pid 8449] <... chdir resumed>) = 0 [pid 8448] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8451] memfd_create("syzkaller", 0 [pid 8449] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8448] <... mmap resumed>) = 0x20000000 [pid 8451] <... memfd_create resumed>) = 3 [pid 8449] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8451] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8449] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8448] ftruncate(4, 33587195 [pid 8451] <... mmap resumed>) = 0x7f41e0600000 [pid 8448] <... ftruncate resumed>) = 0 [ 309.442369][ T8452] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 309.479650][ T8453] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8448] unlink("./bus") = 0 [pid 8448] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8448] exit_group(0) = ? [pid 8449] <... open resumed>) = 4 [pid 8449] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5065] <... ioctl resumed>) = 0 [pid 8449] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8450] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8448] +++ exited with 0 +++ [pid 5065] close(3 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8448, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 8449] ftruncate(4, 33587195 [pid 5065] <... close resumed>) = 0 [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... restart_syscall resumed>) = 0 [pid 8449] <... ftruncate resumed>) = 0 ./strace-static-x86_64: Process 8454 attached [pid 8449] unlink("./bus" [pid 8454] set_robust_list(0x55555745a660, 24 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8454 [pid 8454] <... set_robust_list resumed>) = 0 [pid 5061] umount2("./340", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8454] chdir("./333" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./340", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8454] <... chdir resumed>) = 0 [pid 8454] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5061] <... openat resumed>) = 3 [pid 8454] <... prctl resumed>) = 0 [pid 5061] newfstatat(3, "", [pid 8454] setpgid(0, 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8454] <... setpgid resumed>) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8454] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] umount2("./340/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./340/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./340/binderfs") = 0 [pid 5061] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8454] <... openat resumed>) = 3 [pid 8449] <... unlink resumed>) = 0 [pid 8454] write(3, "1000", 4 [pid 8449] sendfile(-1, -1, NULL, 281474978811909 [pid 8454] <... write resumed>) = 4 [pid 8449] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5061] <... umount2 resumed>) = 0 [pid 8454] close(3 [pid 8449] exit_group(0 [pid 5061] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8454] <... close resumed>) = 0 [pid 8449] <... exit_group resumed>) = ? [pid 8454] symlink("/dev/binderfs", "./binderfs" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8454] <... symlink resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./340/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8454] memfd_create("syzkaller", 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./340/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8449] +++ exited with 0 +++ [pid 5061] <... openat resumed>) = 4 [pid 8454] <... memfd_create resumed>) = 3 [pid 5061] newfstatat(4, "", [pid 8454] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8449, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 8454] <... mmap resumed>) = 0x7f41e0600000 [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... restart_syscall resumed>) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] umount2("./334", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] getdents64(4, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./334", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8450] <... write resumed>) = 2097152 [pid 5062] <... openat resumed>) = 3 [pid 5061] close(4) = 0 [pid 5062] newfstatat(3, "", [pid 5061] rmdir("./340/file0") = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 5062] getdents64(3, [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8450] munmap(0x7f41e0600000, 138412032 [pid 5061] close(3 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] <... close resumed>) = 0 [pid 5062] umount2("./334/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] rmdir("./340") = 0 [pid 5061] mkdir("./341", 0777) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5062] newfstatat(AT_FDCWD, "./334/binderfs", [pid 5061] <... openat resumed>) = 3 [pid 8450] <... munmap resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5062] unlink("./334/binderfs") = 0 [pid 8450] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8450] <... openat resumed>) = 4 [pid 8450] ioctl(4, LOOP_SET_FD, 3 [pid 8454] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8451] <... write resumed>) = 2097152 [pid 8451] munmap(0x7f41e0600000, 138412032 [pid 8450] <... ioctl resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 8451] <... munmap resumed>) = 0 [pid 8450] close(3 [pid 5062] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8450] <... close resumed>) = 0 [pid 8450] close(4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./334/file0", [pid 8450] <... close resumed>) = 0 [pid 8450] mkdir("./file0", 0777 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8451] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 8451] ioctl(4, LOOP_SET_FD, 3 [pid 8450] <... mkdir resumed>) = 0 [pid 5062] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8454] <... write resumed>) = 2097152 [pid 8451] <... ioctl resumed>) = 0 [pid 8450] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./334/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8454] munmap(0x7f41e0600000, 138412032 [pid 8451] close(3 [pid 5062] <... openat resumed>) = 4 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8454] <... munmap resumed>) = 0 [pid 5062] getdents64(4, [pid 8451] <... close resumed>) = 0 [pid 8451] close(4 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8451] <... close resumed>) = 0 [ 309.655125][ T8450] loop2: detected capacity change from 0 to 4096 [ 309.680208][ T8451] loop3: detected capacity change from 0 to 4096 [pid 5062] getdents64(4, [pid 8451] mkdir("./file0", 0777 [pid 8454] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 8451] <... mkdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8454] ioctl(4, LOOP_SET_FD, 3 [pid 8451] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8450] <... mount resumed>) = 0 [pid 5062] close(4 [pid 8450] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./334/file0" [pid 8450] chdir("./file0" [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5062] getdents64(3, [pid 8450] <... chdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 8450] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... close resumed>) = 0 [pid 8450] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] rmdir("./334" [pid 8450] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8454] <... ioctl resumed>) = 0 [pid 8454] close(3) = 0 [pid 8454] close(4) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8454] mkdir("./file0", 0777 [pid 5062] mkdir("./335", 0777 [pid 8454] <... mkdir resumed>) = 0 [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... mkdir resumed>) = 0 [pid 8454] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8456 [pid 8450] <... open resumed>) = 4 ./strace-static-x86_64: Process 8456 attached [pid 8450] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8456] set_robust_list(0x55555745a660, 24) = 0 [pid 8450] <... open resumed>) = 5 [ 309.716798][ T8455] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 309.732021][ T8454] loop4: detected capacity change from 0 to 4096 [pid 8450] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8456] chdir("./341" [pid 8451] <... mount resumed>) = 0 [pid 8450] <... mmap resumed>) = 0x20000000 [pid 8456] <... chdir resumed>) = 0 [pid 8451] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8450] ftruncate(4, 33587195 [pid 8456] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8456] setpgid(0, 0) = 0 [pid 8456] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8456] write(3, "1000", 4) = 4 [pid 8456] close(3) = 0 [pid 8456] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8454] <... mount resumed>) = 0 [pid 8451] <... openat resumed>) = 3 [pid 8450] <... ftruncate resumed>) = 0 [pid 8456] memfd_create("syzkaller", 0 [pid 8450] unlink("./bus" [pid 8454] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8451] chdir("./file0" [pid 8456] <... memfd_create resumed>) = 3 [pid 8454] <... openat resumed>) = 3 [pid 8451] <... chdir resumed>) = 0 [pid 8456] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8451] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8454] chdir("./file0" [pid 8456] <... mmap resumed>) = 0x7f41e0600000 [pid 8454] <... chdir resumed>) = 0 [pid 8454] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8451] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8454] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8451] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [ 309.776579][ T8457] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 309.792737][ T8458] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8454] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8450] <... unlink resumed>) = 0 [pid 8450] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8450] exit_group(0) = ? [pid 8454] <... open resumed>) = 4 [pid 8454] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8451] <... open resumed>) = 4 [pid 8451] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8454] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8450] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8450, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5063] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 8456] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] umount2("./335", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8451] <... open resumed>) = 5 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8454] <... mmap resumed>) = 0x20000000 [pid 8451] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] openat(AT_FDCWD, "./335", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... ioctl resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5062] close(3 [pid 5063] newfstatat(3, "", [pid 5062] <... close resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] getdents64(3, ./strace-static-x86_64: Process 8459 attached 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./335/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8459] set_robust_list(0x55555745a660, 24 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8459] <... set_robust_list resumed>) = 0 [pid 8454] ftruncate(4, 33587195 [pid 8451] <... mmap resumed>) = 0x20000000 [pid 5063] newfstatat(AT_FDCWD, "./335/binderfs", [pid 8459] chdir("./335" [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8459] <... chdir resumed>) = 0 [pid 8459] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8454] <... ftruncate resumed>) = 0 [pid 8451] ftruncate(4, 33587195 [pid 5063] unlink("./335/binderfs" [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8459 [pid 8459] <... prctl resumed>) = 0 [pid 8459] setpgid(0, 0) = 0 [pid 8459] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8456] <... write resumed>) = 2097152 [pid 8454] unlink("./bus" [pid 8459] <... openat resumed>) = 3 [pid 8451] <... ftruncate resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 8459] write(3, "1000", 4 [pid 8456] munmap(0x7f41e0600000, 138412032 [pid 5063] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8459] <... write resumed>) = 4 [pid 8456] <... munmap resumed>) = 0 [pid 8451] unlink("./bus" [pid 8459] close(3 [pid 8456] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8454] <... unlink resumed>) = 0 [pid 8459] <... close resumed>) = 0 [pid 8459] symlink("/dev/binderfs", "./binderfs" [pid 8454] sendfile(-1, -1, NULL, 281474978811909 [pid 8459] <... symlink resumed>) = 0 [pid 8454] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8451] <... unlink resumed>) = 0 [pid 8454] exit_group(0 [pid 8451] sendfile(-1, -1, NULL, 281474978811909 [pid 8454] <... exit_group resumed>) = ? [pid 8451] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8451] exit_group(0 [pid 8459] memfd_create("syzkaller", 0 [pid 8451] <... exit_group resumed>) = ? [pid 8459] <... memfd_create resumed>) = 3 [pid 8456] <... openat resumed>) = 4 [pid 8454] +++ exited with 0 +++ [pid 8459] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8451] +++ exited with 0 +++ [pid 5063] <... umount2 resumed>) = 0 [pid 8459] <... mmap resumed>) = 0x7f41e0600000 [pid 8456] ioctl(4, LOOP_SET_FD, 3 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8454, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8451, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5063] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./335/file0", [pid 5064] umount2("./340", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] openat(AT_FDCWD, "./340", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... openat resumed>) = 3 [pid 5063] openat(AT_FDCWD, "./335/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] newfstatat(3, "", [pid 5063] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] umount2("./340/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./335/file0" [pid 5064] newfstatat(AT_FDCWD, "./340/binderfs", [pid 5063] <... rmdir resumed>) = 0 [pid 5065] umount2("./333", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] openat(AT_FDCWD, "./333", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] unlink("./340/binderfs" [pid 5063] getdents64(3, [pid 5065] <... openat resumed>) = 3 [pid 5064] <... unlink resumed>) = 0 [pid 5065] newfstatat(3, "", [pid 5064] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] close(3 [pid 8456] <... ioctl resumed>) = 0 [pid 5065] getdents64(3, [pid 5063] <... close resumed>) = 0 [pid 8456] close(3 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] rmdir("./335" [pid 8456] <... close resumed>) = 0 [pid 5065] umount2("./333/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8456] close(4 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... rmdir resumed>) = 0 [pid 5065] newfstatat(AT_FDCWD, "./333/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8456] <... close resumed>) = 0 [pid 5065] unlink("./333/binderfs" [pid 8456] mkdir("./file0", 0777 [pid 5063] mkdir("./336", 0777 [pid 5065] <... unlink resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 8456] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8456] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5064] <... umount2 resumed>) = 0 [pid 8459] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... umount2 resumed>) = 0 [pid 5064] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 309.955809][ T8456] loop0: detected capacity change from 0 to 4096 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./333/file0", [pid 5064] newfstatat(AT_FDCWD, "./340/file0", [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./333/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./333/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(4, "", [pid 5064] openat(AT_FDCWD, "./340/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... openat resumed>) = 4 [pid 5065] getdents64(4, [pid 5064] newfstatat(4, "", [pid 8456] <... mount resumed>) = 0 [pid 8456] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8456] <... openat resumed>) = 3 [pid 8456] chdir("./file0") = 0 [pid 5065] getdents64(4, [pid 5064] getdents64(4, [pid 8456] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8456] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] close(4 [pid 5064] getdents64(4, [pid 5065] <... close resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] rmdir("./333/file0" [pid 5064] close(4 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5065] getdents64(3, [pid 5064] rmdir("./340/file0" [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5065] close(3 [pid 8456] <... open resumed>) = 4 [pid 5065] <... close resumed>) = 0 [pid 5064] getdents64(3, [pid 5065] rmdir("./333") = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8456] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] mkdir("./334", 0777 [pid 5064] close(3 [pid 8456] <... open resumed>) = 5 [pid 5065] <... mkdir resumed>) = 0 [pid 8456] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5064] rmdir("./340" [pid 8456] ftruncate(4, 33587195 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] <... rmdir resumed>) = 0 [pid 5064] mkdir("./341", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8456] <... ftruncate resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [ 310.006394][ T8460] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] <... ioctl resumed>) = 0 [pid 8456] unlink("./bus" [pid 5063] close(3) = 0 [pid 8459] <... write resumed>) = 2097152 [pid 8456] <... unlink resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8459] munmap(0x7f41e0600000, 138412032 [pid 8456] sendfile(-1, -1, NULL, 281474978811909./strace-static-x86_64: Process 8461 attached [pid 8459] <... munmap resumed>) = 0 [pid 8456] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8461] set_robust_list(0x55555745a660, 24) = 0 [pid 8456] exit_group(0 [pid 8461] chdir("./336" [pid 8456] <... exit_group resumed>) = ? [pid 8461] <... chdir resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8461 [pid 8459] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8461] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8456] +++ exited with 0 +++ [pid 8461] <... prctl resumed>) = 0 [pid 8459] <... openat resumed>) = 4 [pid 8461] setpgid(0, 0) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8456, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8459] ioctl(4, LOOP_SET_FD, 3 [pid 8461] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] umount2("./341", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8461] <... openat resumed>) = 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./341", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8461] write(3, "1000", 4 [pid 8459] <... ioctl resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 8461] <... write resumed>) = 4 [pid 5061] newfstatat(3, "", [pid 8461] close(3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8461] <... close resumed>) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 5061] getdents64(3, [pid 8461] symlink("/dev/binderfs", "./binderfs" [pid 8459] close(3 [pid 5065] <... ioctl resumed>) = 0 [pid 8459] <... close resumed>) = 0 [pid 8461] <... symlink resumed>) = 0 [pid 8459] close(4) = 0 [pid 8461] memfd_create("syzkaller", 0) = 3 [pid 8461] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8459] mkdir("./file0", 0777 [pid 5064] close(3 [pid 5061] umount2("./341/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./341/binderfs", [pid 8459] <... mkdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./341/binderfs") = 0 [pid 5061] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8459] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] close(3) = 0 ./strace-static-x86_64: Process 8462 attached [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8462] set_robust_list(0x55555745a660, 24) = 0 [pid 8462] chdir("./341" [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8462 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8463 [pid 8462] <... chdir resumed>) = 0 [pid 8462] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 310.110675][ T8459] loop1: detected capacity change from 0 to 4096 [pid 8462] setpgid(0, 0) = 0 [pid 8462] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8462] write(3, "1000", 4) = 4 [pid 8462] close(3) = 0 ./strace-static-x86_64: Process 8463 attached [pid 8462] symlink("/dev/binderfs", "./binderfs" [pid 8463] set_robust_list(0x55555745a660, 24 [pid 8462] <... symlink resumed>) = 0 [pid 8459] <... mount resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 8462] memfd_create("syzkaller", 0 [pid 8463] <... set_robust_list resumed>) = 0 [pid 8459] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8463] chdir("./334" [pid 8462] <... memfd_create resumed>) = 3 [pid 8459] <... openat resumed>) = 3 [pid 8459] chdir("./file0" [pid 8462] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8463] <... chdir resumed>) = 0 [pid 8459] <... chdir resumed>) = 0 [pid 5061] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8461] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8463] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8459] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] newfstatat(AT_FDCWD, "./341/file0", [pid 8463] <... prctl resumed>) = 0 [pid 8463] setpgid(0, 0 [pid 8459] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8463] <... setpgid resumed>) = 0 [pid 8459] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8463] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8463] <... openat resumed>) = 3 [pid 8463] write(3, "1000", 4 [pid 5061] openat(AT_FDCWD, "./341/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8463] <... write resumed>) = 4 [pid 5061] <... openat resumed>) = 4 [pid 8463] close(3 [pid 8459] <... open resumed>) = 4 [pid 8463] <... close resumed>) = 0 [pid 8459] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] newfstatat(4, "", [pid 8463] symlink("/dev/binderfs", "./binderfs" [pid 8459] <... open resumed>) = 5 [ 310.181606][ T8464] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8463] <... symlink resumed>) = 0 [pid 8459] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8463] memfd_create("syzkaller", 0 [pid 8459] <... mmap resumed>) = 0x20000000 [pid 5061] getdents64(4, [pid 8463] <... memfd_create resumed>) = 3 [pid 8459] ftruncate(4, 33587195 [pid 8463] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8459] <... ftruncate resumed>) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./341/file0" [pid 8463] <... mmap resumed>) = 0x7f41e0600000 [pid 5061] <... rmdir resumed>) = 0 [pid 8459] unlink("./bus" [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8459] <... unlink resumed>) = 0 [pid 5061] close(3 [pid 8459] sendfile(-1, -1, NULL, 281474978811909 [pid 5061] <... close resumed>) = 0 [pid 8459] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5061] rmdir("./341" [pid 8459] exit_group(0 [pid 5061] <... rmdir resumed>) = 0 [pid 8459] <... exit_group resumed>) = ? [pid 5061] mkdir("./342", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 8462] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8459] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8459, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5062] umount2("./335", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./335", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./335/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8461] <... write resumed>) = 2097152 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8461] munmap(0x7f41e0600000, 138412032 [pid 5062] newfstatat(AT_FDCWD, "./335/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./335/binderfs") = 0 [pid 5062] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8461] <... munmap resumed>) = 0 [pid 8461] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8463] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8461] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... umount2 resumed>) = 0 [pid 8461] <... ioctl resumed>) = 0 [pid 5062] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8461] close(3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8461] <... close resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./335/file0", [pid 8461] close(4) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8461] mkdir("./file0", 0777 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8461] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./335/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8462] <... write resumed>) = 2097152 [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8461] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] newfstatat(4, "", [pid 8462] munmap(0x7f41e0600000, 138412032 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 8465 attached [pid 8462] <... munmap resumed>) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 8465] set_robust_list(0x55555745a660, 24 [pid 5062] getdents64(4, [pid 8465] <... set_robust_list resumed>) = 0 [ 310.312125][ T8461] loop2: detected capacity change from 0 to 4096 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8465 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8465] chdir("./342" [pid 8462] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8465] <... chdir resumed>) = 0 [pid 8463] <... write resumed>) = 2097152 [pid 8462] <... openat resumed>) = 4 [pid 5062] close(4 [pid 8465] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8462] ioctl(4, LOOP_SET_FD, 3 [pid 8465] <... prctl resumed>) = 0 [pid 8461] <... mount resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8462] <... ioctl resumed>) = 0 [pid 8465] setpgid(0, 0 [pid 8463] munmap(0x7f41e0600000, 138412032 [pid 8461] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] rmdir("./335/file0" [pid 8465] <... setpgid resumed>) = 0 [pid 8461] <... openat resumed>) = 3 [pid 8462] close(3) = 0 [pid 8461] chdir("./file0" [pid 5062] <... rmdir resumed>) = 0 [pid 8465] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8463] <... munmap resumed>) = 0 [pid 8462] close(4 [pid 8461] <... chdir resumed>) = 0 [pid 8462] <... close resumed>) = 0 [pid 8461] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8465] <... openat resumed>) = 3 [pid 8463] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8462] mkdir("./file0", 0777 [pid 8461] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] getdents64(3, [pid 8465] write(3, "1000", 4 [pid 8463] <... openat resumed>) = 4 [pid 8461] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8465] <... write resumed>) = 4 [pid 8462] <... mkdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8465] close(3) = 0 [ 310.380397][ T8462] loop3: detected capacity change from 0 to 4096 [ 310.386716][ T8466] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8463] ioctl(4, LOOP_SET_FD, 3 [pid 5062] close(3 [pid 8462] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] <... close resumed>) = 0 [pid 8465] symlink("/dev/binderfs", "./binderfs" [pid 5062] rmdir("./335") = 0 [pid 8465] <... symlink resumed>) = 0 [pid 5062] mkdir("./336", 0777) = 0 [pid 8465] memfd_create("syzkaller", 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8465] <... memfd_create resumed>) = 3 [pid 8463] <... ioctl resumed>) = 0 [pid 8465] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8463] close(3 [pid 8465] <... mmap resumed>) = 0x7f41e0600000 [pid 8463] <... close resumed>) = 0 [pid 8463] close(4) = 0 [pid 8463] mkdir("./file0", 0777) = 0 [pid 8463] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8461] <... open resumed>) = 4 [pid 8461] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8461] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8465] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8463] <... mount resumed>) = 0 [pid 8462] <... mount resumed>) = 0 [pid 8461] <... unlink resumed>) = 0 [pid 8462] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8462] chdir("./file0" [pid 8463] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8462] <... chdir resumed>) = 0 [pid 8461] sendfile(-1, -1, NULL, 281474978811909 [pid 5062] <... ioctl resumed>) = 0 [pid 8463] <... openat resumed>) = 3 [pid 8462] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8461] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5062] close(3 [pid 8463] chdir("./file0") = 0 [pid 8462] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8461] exit_group(0 [pid 5062] <... close resumed>) = 0 [pid 8463] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8461] <... exit_group resumed>) = ? [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8463] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8462] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000./strace-static-x86_64: Process 8469 attached [pid 8463] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8461] +++ exited with 0 +++ [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8469 [pid 8469] set_robust_list(0x55555745a660, 24) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8461, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 8469] chdir("./336") = 0 [pid 8469] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8469] setpgid(0, 0 [pid 5063] umount2("./336", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8469] <... setpgid resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8469] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] openat(AT_FDCWD, "./336", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8469] write(3, "1000", 4) = 4 [ 310.493076][ T8467] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 310.505493][ T8468] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8469] close(3 [pid 8463] <... open resumed>) = 4 [pid 8462] <... open resumed>) = 4 [pid 5063] <... openat resumed>) = 3 [pid 8469] <... close resumed>) = 0 [pid 8463] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8462] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8469] symlink("/dev/binderfs", "./binderfs" [pid 8463] <... open resumed>) = 5 [pid 8462] <... open resumed>) = 5 [pid 5063] newfstatat(3, "", [pid 8462] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8469] <... symlink resumed>) = 0 [pid 8465] <... write resumed>) = 2097152 [pid 8463] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8462] <... mmap resumed>) = 0x20000000 [pid 5063] getdents64(3, [pid 8462] ftruncate(4, 33587195 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8469] memfd_create("syzkaller", 0 [pid 5063] umount2("./336/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8469] <... memfd_create resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8465] munmap(0x7f41e0600000, 138412032 [pid 5063] newfstatat(AT_FDCWD, "./336/binderfs", [pid 8469] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8465] <... munmap resumed>) = 0 [pid 8463] <... mmap resumed>) = 0x20000000 [pid 8462] <... ftruncate resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8469] <... mmap resumed>) = 0x7f41e0600000 [pid 8465] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8463] ftruncate(4, 33587195 [pid 5063] unlink("./336/binderfs" [pid 8465] <... openat resumed>) = 4 [pid 8462] unlink("./bus" [pid 5063] <... unlink resumed>) = 0 [pid 8465] ioctl(4, LOOP_SET_FD, 3 [pid 5063] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8463] <... ftruncate resumed>) = 0 [pid 8463] unlink("./bus" [pid 8462] <... unlink resumed>) = 0 [pid 8465] <... ioctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 8465] close(3 [pid 8462] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8462] exit_group(0 [pid 8465] <... close resumed>) = 0 [pid 8463] <... unlink resumed>) = 0 [pid 8462] <... exit_group resumed>) = ? [pid 8469] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8465] close(4 [pid 8463] sendfile(-1, -1, NULL, 281474978811909 [pid 5063] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8465] <... close resumed>) = 0 [pid 8463] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8465] mkdir("./file0", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8463] exit_group(0 [pid 8465] <... mkdir resumed>) = 0 [pid 8463] <... exit_group resumed>) = ? [pid 5063] newfstatat(AT_FDCWD, "./336/file0", [pid 8465] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./336/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 310.590849][ T8465] loop0: detected capacity change from 0 to 4096 [pid 5063] getdents64(4, [pid 8462] +++ exited with 0 +++ [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8462, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 5064] umount2("./341", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./341", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] getdents64(4, [pid 5064] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8463] +++ exited with 0 +++ [pid 5063] close(4 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8463, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5063] <... close resumed>) = 0 [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, [pid 5063] rmdir("./336/file0" [pid 5065] umount2("./334", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./341/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... rmdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./334", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... openat resumed>) = 3 [pid 5065] newfstatat(3, "", [pid 5064] newfstatat(AT_FDCWD, "./341/binderfs", [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./334/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(3, [pid 5065] newfstatat(AT_FDCWD, "./334/binderfs", [pid 5064] unlink("./341/binderfs" [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5065] unlink("./334/binderfs" [pid 5064] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... unlink resumed>) = 0 [pid 5065] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8465] <... mount resumed>) = 0 [pid 5063] close(3 [pid 8465] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5063] <... close resumed>) = 0 [pid 8465] chdir("./file0" [pid 5063] rmdir("./336" [pid 8469] <... write resumed>) = 2097152 [pid 8465] <... chdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8469] munmap(0x7f41e0600000, 138412032 [pid 5063] mkdir("./337", 0777 [pid 8469] <... munmap resumed>) = 0 [pid 8465] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... mkdir resumed>) = 0 [pid 8465] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8465] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8469] openat(AT_FDCWD, "/dev/loop1", O_RDWR [ 310.678291][ T8470] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8469] <... openat resumed>) = 4 [pid 5063] <... openat resumed>) = 3 [pid 8469] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... umount2 resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8469] <... ioctl resumed>) = 0 [pid 5065] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./334/file0", [pid 5064] newfstatat(AT_FDCWD, "./341/file0", [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./334/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] openat(AT_FDCWD, "./334/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8469] close(3 [pid 8465] <... open resumed>) = 4 [pid 5065] <... openat resumed>) = 4 [pid 5064] openat(AT_FDCWD, "./341/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8465] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] newfstatat(4, "", [pid 8469] <... close resumed>) = 0 [pid 8465] <... open resumed>) = 5 [pid 5064] <... openat resumed>) = 4 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8469] close(4 [pid 8465] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] getdents64(4, [pid 5064] newfstatat(4, "", [pid 8469] <... close resumed>) = 0 [pid 8465] <... mmap resumed>) = 0x20000000 [pid 8465] ftruncate(4, 33587195 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8469] mkdir("./file0", 0777 [pid 5065] getdents64(4, [pid 5064] getdents64(4, [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8465] <... ftruncate resumed>) = 0 [pid 5065] close(4 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8469] <... mkdir resumed>) = 0 [pid 8465] unlink("./bus" [pid 5065] <... close resumed>) = 0 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] rmdir("./334/file0" [pid 5064] close(4) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] rmdir("./341/file0" [pid 8469] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8465] <... unlink resumed>) = 0 [pid 8465] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8465] exit_group(0) = ? [pid 8465] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8465, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5061] umount2("./342", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... rmdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 310.723889][ T8469] loop1: detected capacity change from 0 to 4096 [pid 5061] openat(AT_FDCWD, "./342", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] getdents64(3, [pid 5064] getdents64(3, [pid 5063] <... ioctl resumed>) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3 [pid 5061] <... openat resumed>) = 3 [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./341" [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5061] newfstatat(3, "", [pid 5065] close(3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... close resumed>) = 0 [pid 5061] getdents64(3, [pid 5065] rmdir("./334" [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8469] <... mount resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5061] umount2("./342/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8472 attached [pid 8469] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8472] set_robust_list(0x55555745a660, 24 [pid 8469] <... openat resumed>) = 3 [pid 5061] newfstatat(AT_FDCWD, "./342/binderfs", [pid 8469] chdir("./file0" [pid 8472] <... set_robust_list resumed>) = 0 [pid 8469] <... chdir resumed>) = 0 [pid 5065] mkdir("./335", 0777 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8472 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8469] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8472] chdir("./337" [pid 8469] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] <... mkdir resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5061] unlink("./342/binderfs" [pid 8469] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] mkdir("./342", 0777 [pid 8472] <... chdir resumed>) = 0 [pid 5061] <... unlink resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 8472] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... openat resumed>) = 3 [pid 8472] <... prctl resumed>) = 0 [pid 8472] setpgid(0, 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8472] <... setpgid resumed>) = 0 [pid 8472] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8472] write(3, "1000", 4) = 4 [pid 8472] close(3) = 0 [pid 8472] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5064] <... openat resumed>) = 3 [pid 8472] memfd_create("syzkaller", 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8472] <... memfd_create resumed>) = 3 [pid 8472] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8469] <... open resumed>) = 4 [pid 5061] <... umount2 resumed>) = 0 [ 310.777310][ T8471] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8469] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8469] <... open resumed>) = 5 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8469] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8472] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5061] newfstatat(AT_FDCWD, "./342/file0", [pid 5065] <... ioctl resumed>) = 0 [pid 8469] <... mmap resumed>) = 0x20000000 [pid 5065] close(3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./342/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... openat resumed>) = 4 [pid 8469] ftruncate(4, 33587195 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, [pid 8469] <... ftruncate resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 8473 attached [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8473] set_robust_list(0x55555745a660, 24 [pid 5061] close(4) = 0 [pid 8473] <... set_robust_list resumed>) = 0 [pid 5061] rmdir("./342/file0" [pid 8473] chdir("./335" [pid 5061] <... rmdir resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8473 [pid 5061] getdents64(3, [pid 8473] <... chdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8473] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8469] unlink("./bus" [pid 8473] <... prctl resumed>) = 0 [pid 5061] close(3) = 0 [pid 8473] setpgid(0, 0 [pid 5061] rmdir("./342" [pid 8473] <... setpgid resumed>) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8473] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8473] write(3, "1000", 4 [pid 5064] close(3 [pid 5061] mkdir("./343", 0777 [pid 8473] <... write resumed>) = 4 [pid 8472] <... write resumed>) = 2097152 [pid 8469] <... unlink resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 8473] close(3 [pid 8472] munmap(0x7f41e0600000, 138412032 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8469] sendfile(-1, -1, NULL, 281474978811909 [pid 8473] <... close resumed>) = 0 [pid 8472] <... munmap resumed>) = 0 [pid 8469] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8473] symlink("/dev/binderfs", "./binderfs" [pid 8469] exit_group(0 [pid 8473] <... symlink resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8474 [pid 8469] <... exit_group resumed>) = ? [pid 8473] memfd_create("syzkaller", 0) = 3 [pid 8473] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8472] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8473] <... mmap resumed>) = 0x7f41e0600000 [pid 8472] <... openat resumed>) = 4 ./strace-static-x86_64: Process 8474 attached [pid 8474] set_robust_list(0x55555745a660, 24) = 0 [pid 8472] ioctl(4, LOOP_SET_FD, 3 [pid 8474] chdir("./342" [pid 8469] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8469, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 8472] <... ioctl resumed>) = 0 [pid 5062] umount2("./336", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8474] <... chdir resumed>) = 0 [pid 8473] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8474] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8472] close(3 [pid 5062] openat(AT_FDCWD, "./336", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8472] <... close resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 8474] <... prctl resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 8474] setpgid(0, 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8474] <... setpgid resumed>) = 0 [pid 5062] getdents64(3, [pid 8474] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8472] close(4 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8472] <... close resumed>) = 0 [pid 5062] umount2("./336/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8474] <... openat resumed>) = 3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8472] mkdir("./file0", 0777 [pid 5062] newfstatat(AT_FDCWD, "./336/binderfs", [pid 8474] write(3, "1000", 4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8474] <... write resumed>) = 4 [pid 5062] unlink("./336/binderfs" [pid 8474] close(3 [pid 8472] <... mkdir resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 8474] <... close resumed>) = 0 [pid 5062] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8474] symlink("/dev/binderfs", "./binderfs" [pid 8472] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8474] <... symlink resumed>) = 0 [pid 8474] memfd_create("syzkaller", 0) = 3 [pid 8474] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [ 310.941890][ T8472] loop2: detected capacity change from 0 to 4096 [pid 5062] <... umount2 resumed>) = 0 [pid 8473] <... write resumed>) = 2097152 [pid 5062] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8473] munmap(0x7f41e0600000, 138412032 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./336/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8472] <... mount resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./336/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8473] <... munmap resumed>) = 0 [pid 8473] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8472] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... openat resumed>) = 4 [pid 5061] <... ioctl resumed>) = 0 [pid 8473] <... openat resumed>) = 4 [pid 8473] ioctl(4, LOOP_SET_FD, 3 [pid 8472] <... openat resumed>) = 3 [pid 5062] newfstatat(4, "", [pid 5061] close(3 [pid 8472] chdir("./file0") = 0 [pid 8472] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... close resumed>) = 0 [pid 5062] getdents64(4, [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8472] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, [pid 8472] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8476 [pid 5062] close(4./strace-static-x86_64: Process 8476 attached [pid 8473] <... ioctl resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8472] <... open resumed>) = 4 [pid 8476] set_robust_list(0x55555745a660, 24 [pid 8473] close(3 [pid 5062] rmdir("./336/file0" [pid 8476] <... set_robust_list resumed>) = 0 [pid 8474] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8473] <... close resumed>) = 0 [pid 8472] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] <... rmdir resumed>) = 0 [pid 8472] <... open resumed>) = 5 [pid 5062] getdents64(3, [pid 8476] chdir("./343" [pid 8473] close(4 [pid 8472] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8476] <... chdir resumed>) = 0 [pid 8473] <... close resumed>) = 0 [pid 8472] <... mmap resumed>) = 0x20000000 [pid 5062] close(3 [pid 8476] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8473] mkdir("./file0", 0777 [pid 8472] ftruncate(4, 33587195 [pid 8476] <... prctl resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8476] setpgid(0, 0 [pid 8473] <... mkdir resumed>) = 0 [pid 5062] rmdir("./336" [pid 8476] <... setpgid resumed>) = 0 [pid 8473] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8472] <... ftruncate resumed>) = 0 [pid 8476] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8472] unlink("./bus" [pid 8476] <... openat resumed>) = 3 [pid 8476] write(3, "1000", 4) = 4 [pid 8476] close(3) = 0 [pid 8476] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5062] <... rmdir resumed>) = 0 [ 311.022431][ T8475] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 311.045598][ T8473] loop4: detected capacity change from 0 to 4096 [pid 8476] memfd_create("syzkaller", 0 [pid 5062] mkdir("./337", 0777 [pid 8476] <... memfd_create resumed>) = 3 [pid 8472] <... unlink resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 8476] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8472] sendfile(-1, -1, NULL, 281474978811909 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 8476] <... mmap resumed>) = 0x7f41e0600000 [pid 8472] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8473] <... mount resumed>) = 0 [pid 8473] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8472] exit_group(0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8473] <... openat resumed>) = 3 [pid 8472] <... exit_group resumed>) = ? [pid 8473] chdir("./file0") = 0 [pid 8473] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8473] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8474] <... write resumed>) = 2097152 [pid 8472] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8472, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5063] umount2("./337", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8474] munmap(0x7f41e0600000, 138412032 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./337", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8473] <... open resumed>) = 4 [pid 5063] getdents64(3, [pid 8474] <... munmap resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8474] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8473] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] umount2("./337/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8474] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8473] <... open resumed>) = 5 [pid 5063] newfstatat(AT_FDCWD, "./337/binderfs", [pid 8474] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 311.125635][ T8477] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8473] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] unlink("./337/binderfs" [pid 8473] <... mmap resumed>) = 0x20000000 [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8473] ftruncate(4, 33587195 [pid 8476] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8474] <... ioctl resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 8474] close(3) = 0 [pid 5063] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8474] close(4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8474] <... close resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./337/file0", [pid 8474] mkdir("./file0", 0777) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8473] <... ftruncate resumed>) = 0 [pid 5063] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./337/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8474] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 311.167781][ T8474] loop3: detected capacity change from 0 to 4096 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 8474] <... mount resumed>) = 0 [pid 8473] unlink("./bus" [pid 5062] <... ioctl resumed>) = 0 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8474] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8474] chdir("./file0") = 0 [pid 8474] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8474] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 8479 attached [pid 5063] close(4 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8479 [pid 5063] <... close resumed>) = 0 [pid 8473] <... unlink resumed>) = 0 [pid 5063] rmdir("./337/file0" [pid 8473] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 5063] <... rmdir resumed>) = 0 [pid 8479] set_robust_list(0x55555745a660, 24 [pid 8473] exit_group(0 [pid 8479] <... set_robust_list resumed>) = 0 [pid 8476] <... write resumed>) = 2097152 [pid 8474] <... open resumed>) = 4 [pid 8473] <... exit_group resumed>) = ? [pid 5063] getdents64(3, [pid 8476] munmap(0x7f41e0600000, 138412032 [pid 8474] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./337" [pid 8479] chdir("./337" [pid 8476] <... munmap resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8476] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8479] <... chdir resumed>) = 0 [pid 8479] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8476] <... openat resumed>) = 4 [pid 8474] <... open resumed>) = 5 [ 311.213183][ T8478] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] mkdir("./338", 0777 [pid 8479] <... prctl resumed>) = 0 [pid 8476] ioctl(4, LOOP_SET_FD, 3 [pid 8474] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] <... mkdir resumed>) = 0 [pid 8474] <... mmap resumed>) = 0x20000000 [pid 8479] setpgid(0, 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8479] <... setpgid resumed>) = 0 [pid 8474] ftruncate(4, 33587195 [pid 5063] <... openat resumed>) = 3 [pid 8479] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8479] <... openat resumed>) = 3 [pid 8473] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8473, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 8479] write(3, "1000", 4 [pid 8474] <... ftruncate resumed>) = 0 [pid 8479] <... write resumed>) = 4 [pid 8476] <... ioctl resumed>) = 0 [pid 8474] unlink("./bus" [pid 8479] close(3 [pid 8476] close(3 [pid 8479] <... close resumed>) = 0 [pid 8476] <... close resumed>) = 0 [pid 8476] close(4 [pid 5065] umount2("./335", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8479] symlink("/dev/binderfs", "./binderfs" [pid 8476] <... close resumed>) = 0 [pid 8476] mkdir("./file0", 0777 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./335", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8479] <... symlink resumed>) = 0 [pid 8476] <... mkdir resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5065] newfstatat(3, "", [pid 8479] memfd_create("syzkaller", 0 [pid 8476] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8474] <... unlink resumed>) = 0 [pid 8474] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8474] exit_group(0) = ? [pid 8474] +++ exited with 0 +++ [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8474, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [ 311.262288][ T8476] loop0: detected capacity change from 0 to 4096 [pid 5065] getdents64(3, [pid 8479] <... memfd_create resumed>) = 3 [pid 5063] <... ioctl resumed>) = 0 [pid 5064] umount2("./342", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8479] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8479] <... mmap resumed>) = 0x7f41e0600000 [pid 5064] openat(AT_FDCWD, "./342", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] <... openat resumed>) = 3 [pid 5065] umount2("./335/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] newfstatat(3, "", [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./335/binderfs", [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./342/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] unlink("./335/binderfs" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... unlink resumed>) = 0 [pid 5063] close(3 [pid 5065] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] newfstatat(AT_FDCWD, "./342/binderfs", [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./342/binderfs"./strace-static-x86_64: Process 8480 attached [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8480 [pid 8480] set_robust_list(0x55555745a660, 24) = 0 [pid 8480] chdir("./338") = 0 [pid 8480] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8480] setpgid(0, 0) = 0 [pid 8480] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8480] write(3, "1000", 4) = 4 [pid 8480] close(3 [pid 5064] <... unlink resumed>) = 0 [pid 8480] <... close resumed>) = 0 [pid 8480] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8480] memfd_create("syzkaller", 0 [pid 5064] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8480] <... memfd_create resumed>) = 3 [pid 8480] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5065] <... umount2 resumed>) = 0 [pid 8476] <... mount resumed>) = 0 [pid 8480] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8476] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5064] <... umount2 resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8476] chdir("./file0" [pid 5065] newfstatat(AT_FDCWD, "./335/file0", [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8476] <... chdir resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] newfstatat(AT_FDCWD, "./342/file0", [pid 5065] umount2("./335/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] openat(AT_FDCWD, "./335/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8476] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5065] <... openat resumed>) = 4 [pid 5064] openat(AT_FDCWD, "./342/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8476] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] newfstatat(4, "", [pid 5064] <... openat resumed>) = 4 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] newfstatat(4, "", [pid 5065] getdents64(4, [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./342/file0") = 0 [pid 5065] getdents64(4, [pid 5064] getdents64(3, [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] close(3 [pid 5065] rmdir("./335/file0" [pid 5064] <... close resumed>) = 0 [pid 8476] <... open resumed>) = 4 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] rmdir("./342" [pid 8476] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] <... rmdir resumed>) = 0 [pid 5065] getdents64(3, [pid 5064] mkdir("./343", 0777 [pid 8479] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8476] <... open resumed>) = 5 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 8476] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] close(3 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8476] <... mmap resumed>) = 0x20000000 [pid 5065] <... close resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 8476] ftruncate(4, 33587195 [pid 5065] rmdir("./335") = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [ 311.381312][ T8481] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] mkdir("./336", 0777) = 0 [pid 8480] <... write resumed>) = 2097152 [pid 8476] <... ftruncate resumed>) = 0 [pid 8480] munmap(0x7f41e0600000, 138412032 [pid 8476] unlink("./bus" [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8480] <... munmap resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8480] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8479] <... write resumed>) = 2097152 [pid 8476] <... unlink resumed>) = 0 [pid 8480] <... openat resumed>) = 4 [pid 8479] munmap(0x7f41e0600000, 138412032 [pid 8476] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8480] ioctl(4, LOOP_SET_FD, 3 [pid 8479] <... munmap resumed>) = 0 [pid 8476] exit_group(0 [pid 8479] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8476] <... exit_group resumed>) = ? [pid 8479] <... openat resumed>) = 4 [pid 8479] ioctl(4, LOOP_SET_FD, 3 [pid 8480] <... ioctl resumed>) = 0 [pid 8476] +++ exited with 0 +++ [pid 8480] close(3) = 0 [pid 8480] close(4) = 0 [pid 8480] mkdir("./file0", 0777) = 0 [pid 8480] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8479] <... ioctl resumed>) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8476, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 8479] close(3 [pid 5064] <... ioctl resumed>) = 0 [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 8479] <... close resumed>) = 0 [pid 5061] <... restart_syscall resumed>) = 0 [pid 5061] umount2("./343", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./343", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", [pid 8479] close(4) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8479] mkdir("./file0", 0777 [pid 5061] getdents64(3, [pid 8479] <... mkdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./343/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./343/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./343/binderfs") = 0 [pid 8479] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [ 311.467023][ T8480] loop2: detected capacity change from 0 to 4096 [ 311.483617][ T8479] loop1: detected capacity change from 0 to 4096 [pid 5061] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] close(3 [pid 8480] <... mount resumed>) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 8480] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8480] <... openat resumed>) = 3 [pid 8480] chdir("./file0" [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8485 attached [pid 8485] set_robust_list(0x55555745a660, 24 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8485 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8484 ./strace-static-x86_64: Process 8484 attached [pid 8485] <... set_robust_list resumed>) = 0 [pid 8484] set_robust_list(0x55555745a660, 24 [pid 8485] chdir("./336" [pid 8480] <... chdir resumed>) = 0 [pid 8480] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8485] <... chdir resumed>) = 0 [pid 8485] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8484] <... set_robust_list resumed>) = 0 [pid 8485] <... prctl resumed>) = 0 [pid 8484] chdir("./343" [pid 8485] setpgid(0, 0 [pid 8484] <... chdir resumed>) = 0 [pid 8485] <... setpgid resumed>) = 0 [pid 8484] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8485] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8484] <... prctl resumed>) = 0 [pid 8485] <... openat resumed>) = 3 [pid 8484] setpgid(0, 0 [pid 8485] write(3, "1000", 4 [pid 8484] <... setpgid resumed>) = 0 [pid 8485] <... write resumed>) = 4 [pid 8484] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8485] close(3 [pid 8480] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8484] <... openat resumed>) = 3 [pid 8485] <... close resumed>) = 0 [pid 8485] symlink("/dev/binderfs", "./binderfs" [pid 8484] write(3, "1000", 4) = 4 [pid 8484] close(3 [pid 8485] <... symlink resumed>) = 0 [pid 8484] <... close resumed>) = 0 [pid 8485] memfd_create("syzkaller", 0 [pid 8480] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8484] symlink("/dev/binderfs", "./binderfs" [pid 8485] <... memfd_create resumed>) = 3 [pid 8484] <... symlink resumed>) = 0 [pid 8485] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8484] memfd_create("syzkaller", 0 [pid 8485] <... mmap resumed>) = 0x7f41e0600000 [pid 5061] <... umount2 resumed>) = 0 [pid 8479] <... mount resumed>) = 0 [pid 5061] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8484] <... memfd_create resumed>) = 3 [pid 8479] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8479] <... openat resumed>) = 3 [pid 5061] newfstatat(AT_FDCWD, "./343/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8484] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8479] chdir("./file0" [pid 5061] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8484] <... mmap resumed>) = 0x7f41e0600000 [pid 8480] <... open resumed>) = 4 [pid 8479] <... chdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8480] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8479] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] openat(AT_FDCWD, "./343/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8480] <... open resumed>) = 5 [pid 8479] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 311.525857][ T8482] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 311.545472][ T8483] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8480] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8479] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", [pid 8480] <... mmap resumed>) = 0x20000000 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8480] ftruncate(4, 33587195 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 8479] <... open resumed>) = 4 [pid 5061] <... close resumed>) = 0 [pid 8479] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] rmdir("./343/file0" [pid 8479] <... open resumed>) = 5 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3 [pid 8480] <... ftruncate resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./343" [pid 8479] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 5061] mkdir("./344", 0777 [pid 8479] ftruncate(4, 33587195 [pid 5061] <... mkdir resumed>) = 0 [pid 8480] unlink("./bus" [pid 8479] <... ftruncate resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8479] unlink("./bus" [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8480] <... unlink resumed>) = 0 [pid 8479] <... unlink resumed>) = 0 [pid 8480] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8479] sendfile(-1, -1, NULL, 281474978811909 [pid 8480] exit_group(0 [pid 8484] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8479] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8480] <... exit_group resumed>) = ? [pid 8485] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8479] exit_group(0 [pid 8480] +++ exited with 0 +++ [pid 8479] <... exit_group resumed>) = ? [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8480, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5063] umount2("./338", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./338", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./338/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./338/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8479] +++ exited with 0 +++ [pid 5063] unlink("./338/binderfs" [pid 5061] <... ioctl resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8479, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 5062] umount2("./337", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./337", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./337/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./337/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./337/binderfs") = 0 [pid 5062] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555745a650) = 8486 [pid 5063] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 8486 attached [pid 5063] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8486] set_robust_list(0x55555745a660, 24 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8486] <... set_robust_list resumed>) = 0 [pid 8485] <... write resumed>) = 2097152 [pid 5063] newfstatat(AT_FDCWD, "./338/file0", [pid 8486] chdir("./344" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8486] <... chdir resumed>) = 0 [pid 8484] <... write resumed>) = 2097152 [pid 5063] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8486] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8484] munmap(0x7f41e0600000, 138412032 [pid 8485] munmap(0x7f41e0600000, 138412032 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8486] <... prctl resumed>) = 0 [pid 8484] <... munmap resumed>) = 0 [pid 8485] <... munmap resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./338/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... umount2 resumed>) = 0 [pid 8486] setpgid(0, 0 [pid 8484] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... openat resumed>) = 4 [pid 8486] <... setpgid resumed>) = 0 [pid 8484] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", [pid 8486] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8484] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8485] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] getdents64(4, [pid 8485] <... openat resumed>) = 4 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8485] ioctl(4, LOOP_SET_FD, 3 [pid 5063] getdents64(4, [pid 8486] <... openat resumed>) = 3 [pid 8484] <... ioctl resumed>) = 0 [pid 8486] write(3, "1000", 4 [pid 8484] close(3 [pid 8485] <... ioctl resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8486] <... write resumed>) = 4 [pid 8484] <... close resumed>) = 0 [pid 8485] close(3 [pid 5063] close(4 [pid 5062] newfstatat(AT_FDCWD, "./337/file0", [pid 8486] close(3 [pid 8484] close(4 [pid 8485] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8486] <... close resumed>) = 0 [pid 8484] <... close resumed>) = 0 [pid 8485] close(4 [pid 5063] rmdir("./338/file0" [pid 5062] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8486] symlink("/dev/binderfs", "./binderfs" [pid 8484] mkdir("./file0", 0777 [pid 8485] <... close resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8485] mkdir("./file0", 0777 [pid 5063] getdents64(3, [pid 5062] openat(AT_FDCWD, "./337/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8484] <... mkdir resumed>) = 0 [pid 8485] <... mkdir resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] <... openat resumed>) = 4 [pid 5063] close(3 [pid 5062] newfstatat(4, "", [pid 8486] <... symlink resumed>) = 0 [pid 8484] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] rmdir("./338" [pid 5062] getdents64(4, [pid 8485] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] mkdir("./339", 0777 [pid 5062] getdents64(4, [pid 8486] memfd_create("syzkaller", 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4 [pid 8486] <... memfd_create resumed>) = 3 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./337/file0" [pid 8486] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... rmdir resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8486] <... mmap resumed>) = 0x7f41e0600000 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] close(3) = 0 [pid 5062] rmdir("./337") = 0 [ 311.778505][ T8484] loop3: detected capacity change from 0 to 4096 [ 311.782319][ T8485] loop4: detected capacity change from 0 to 4096 [pid 5062] mkdir("./338", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8486] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8484] <... mount resumed>) = 0 [pid 8484] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8486] <... write resumed>) = 2097152 [pid 8484] <... openat resumed>) = 3 [pid 8486] munmap(0x7f41e0600000, 138412032 [pid 8484] chdir("./file0") = 0 [pid 8484] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8484] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8485] <... mount resumed>) = 0 [pid 8485] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8485] chdir("./file0" [pid 8486] <... munmap resumed>) = 0 [pid 8485] <... chdir resumed>) = 0 [pid 8486] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8485] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8486] <... openat resumed>) = 4 [pid 8485] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 311.846900][ T8487] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 311.880716][ T8488] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8486] ioctl(4, LOOP_SET_FD, 3 [pid 8485] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8486] <... ioctl resumed>) = 0 [pid 8484] <... open resumed>) = 4 [pid 5063] <... ioctl resumed>) = 0 [pid 8486] close(3) = 0 [pid 8486] close(4) = 0 [pid 8486] mkdir("./file0", 0777) = 0 [pid 5063] close(3 [pid 8486] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8484] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8484] <... open resumed>) = 5 ./strace-static-x86_64: Process 8489 attached [pid 8484] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] <... ioctl resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8489 [pid 8485] <... open resumed>) = 4 [pid 8489] set_robust_list(0x55555745a660, 24 [pid 8484] <... mmap resumed>) = 0x20000000 [pid 8489] <... set_robust_list resumed>) = 0 [pid 8484] ftruncate(4, 33587195 [pid 8489] chdir("./339") = 0 [pid 8485] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] close(3 [pid 8489] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... close resumed>) = 0 [pid 8489] <... prctl resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8489] setpgid(0, 0) = 0 [ 311.902145][ T8486] loop0: detected capacity change from 0 to 4096 [pid 8489] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 8490 attached [pid 8484] <... ftruncate resumed>) = 0 [pid 8485] <... open resumed>) = 5 [pid 8490] set_robust_list(0x55555745a660, 24 [pid 8489] <... openat resumed>) = 3 [pid 8484] unlink("./bus" [pid 8485] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8490 [pid 8490] <... set_robust_list resumed>) = 0 [pid 8490] chdir("./338" [pid 8485] <... mmap resumed>) = 0x20000000 [pid 8489] write(3, "1000", 4) = 4 [pid 8485] ftruncate(4, 33587195 [pid 8490] <... chdir resumed>) = 0 [pid 8489] close(3 [pid 8490] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8489] <... close resumed>) = 0 [pid 8490] <... prctl resumed>) = 0 [pid 8489] symlink("/dev/binderfs", "./binderfs" [pid 8490] setpgid(0, 0 [pid 8485] <... ftruncate resumed>) = 0 [pid 8490] <... setpgid resumed>) = 0 [pid 8484] <... unlink resumed>) = 0 [pid 8489] <... symlink resumed>) = 0 [pid 8484] sendfile(-1, -1, NULL, 281474978811909 [pid 8490] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8484] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8490] <... openat resumed>) = 3 [pid 8489] memfd_create("syzkaller", 0 [pid 8484] exit_group(0 [pid 8490] write(3, "1000", 4 [pid 8489] <... memfd_create resumed>) = 3 [pid 8484] <... exit_group resumed>) = ? [pid 8490] <... write resumed>) = 4 [pid 8489] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8485] unlink("./bus" [pid 8490] close(3) = 0 [pid 8489] <... mmap resumed>) = 0x7f41e0600000 [pid 8486] <... mount resumed>) = 0 [pid 8490] symlink("/dev/binderfs", "./binderfs" [pid 8486] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8490] <... symlink resumed>) = 0 [pid 8486] <... openat resumed>) = 3 [pid 8486] chdir("./file0" [pid 8490] memfd_create("syzkaller", 0 [pid 8486] <... chdir resumed>) = 0 [pid 8490] <... memfd_create resumed>) = 3 [pid 8490] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8486] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8490] <... mmap resumed>) = 0x7f41e0600000 [pid 8486] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8484] +++ exited with 0 +++ [pid 8486] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8484, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8485] <... unlink resumed>) = 0 [pid 8485] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8485] exit_group(0) = ? [pid 5064] umount2("./343", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./343", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 311.987989][ T8491] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8489] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8486] <... open resumed>) = 4 [pid 5064] newfstatat(3, "", [pid 8486] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8486] <... open resumed>) = 5 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8486] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] umount2("./343/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8486] <... mmap resumed>) = 0x20000000 [pid 5064] newfstatat(AT_FDCWD, "./343/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8486] ftruncate(4, 33587195 [pid 5064] unlink("./343/binderfs") = 0 [pid 5064] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8490] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8485] +++ exited with 0 +++ [pid 8486] <... ftruncate resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8485, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=3 /* 0.03 s */} --- [pid 5065] umount2("./336", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./336", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8486] unlink("./bus" [pid 5065] getdents64(3, [pid 5064] <... umount2 resumed>) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8486] <... unlink resumed>) = 0 [pid 5065] umount2("./336/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8486] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./336/binderfs", [pid 8486] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8486] exit_group(0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] newfstatat(AT_FDCWD, "./343/file0", [pid 8486] <... exit_group resumed>) = ? [pid 5065] unlink("./336/binderfs" [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... unlink resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] openat(AT_FDCWD, "./343/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 8486] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8486, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5064] getdents64(4, [pid 8489] <... write resumed>) = 2097152 [pid 5065] <... umount2 resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] umount2("./344", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8489] munmap(0x7f41e0600000, 138412032 [pid 5064] close(4 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... close resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./344", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] rmdir("./343/file0" [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./344/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./344/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./344/binderfs" [pid 8490] <... write resumed>) = 2097152 [pid 5061] <... unlink resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5061] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8490] munmap(0x7f41e0600000, 138412032 [pid 8489] <... munmap resumed>) = 0 [pid 5065] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] getdents64(3, [pid 8489] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8490] <... munmap resumed>) = 0 [pid 8489] <... openat resumed>) = 4 [pid 5065] newfstatat(AT_FDCWD, "./336/file0", [pid 5064] close(3 [pid 8490] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8489] ioctl(4, LOOP_SET_FD, 3 [pid 8490] <... openat resumed>) = 4 [pid 8489] <... ioctl resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... close resumed>) = 0 [pid 8490] ioctl(4, LOOP_SET_FD, 3 [pid 5064] rmdir("./343" [pid 8489] close(3 [pid 5065] umount2("./336/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... rmdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 8490] <... ioctl resumed>) = 0 [pid 8489] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] mkdir("./344", 0777 [pid 8490] close(3 [pid 8489] close(4 [pid 5065] openat(AT_FDCWD, "./336/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8490] <... close resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 8489] <... close resumed>) = 0 [pid 5065] newfstatat(4, "", [pid 5064] <... mkdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8490] close(4 [pid 8489] mkdir("./file0", 0777 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] newfstatat(AT_FDCWD, "./344/file0", [pid 8490] <... close resumed>) = 0 [pid 8489] <... mkdir resumed>) = 0 [pid 5065] getdents64(4, [pid 5064] <... openat resumed>) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8490] mkdir("./file0", 0777 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8489] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8490] <... mkdir resumed>) = 0 [pid 5065] getdents64(4, [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8490] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] openat(AT_FDCWD, "./344/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] close(4 [pid 5061] <... openat resumed>) = 4 [pid 5065] <... close resumed>) = 0 [pid 5061] newfstatat(4, "", [pid 5065] rmdir("./336/file0" [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] getdents64(3, [pid 5061] close(4) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] rmdir("./344/file0") = 0 [ 312.139130][ T8489] loop2: detected capacity change from 0 to 4096 [ 312.146748][ T8490] loop1: detected capacity change from 0 to 4096 [pid 5061] getdents64(3, [pid 5065] close(3) = 0 [pid 5065] rmdir("./336" [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 8489] <... mount resumed>) = 0 [pid 5061] close(3) = 0 [pid 8489] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] mkdir("./337", 0777 [pid 5061] rmdir("./344") = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5061] mkdir("./345", 0777 [pid 8489] <... openat resumed>) = 3 [pid 8489] chdir("./file0" [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... mkdir resumed>) = 0 [pid 8489] <... chdir resumed>) = 0 [pid 8490] <... mount resumed>) = 0 [pid 8489] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] <... openat resumed>) = 3 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8490] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8489] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8490] <... openat resumed>) = 3 [pid 8489] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5061] <... openat resumed>) = 3 [pid 8490] chdir("./file0") = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8490] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8490] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8489] <... open resumed>) = 4 [pid 8489] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8490] <... open resumed>) = 4 [pid 8490] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8489] <... open resumed>) = 5 [pid 8490] <... open resumed>) = 5 [pid 8489] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8490] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0x20000000 [pid 8490] ftruncate(4, 33587195 [ 312.194794][ T8492] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 312.216063][ T8493] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8489] ftruncate(4, 33587195 [pid 8490] <... ftruncate resumed>) = 0 [pid 8489] <... ftruncate resumed>) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 8490] unlink("./bus" [pid 8489] unlink("./bus" [pid 5064] close(3) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555745a650) = 8494 [pid 8490] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 8494 attached [pid 8490] sendfile(-1, -1, NULL, 281474978811909 [pid 8489] <... unlink resumed>) = 0 [pid 8490] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8489] sendfile(-1, -1, NULL, 281474978811909 [pid 8494] set_robust_list(0x55555745a660, 24 [pid 8490] exit_group(0 [pid 8489] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] <... ioctl resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8494] <... set_robust_list resumed>) = 0 [pid 8490] <... exit_group resumed>) = ? [pid 8489] exit_group(0 [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] close(3./strace-static-x86_64: Process 8495 attached [pid 8494] chdir("./344" [pid 5061] <... close resumed>) = 0 [pid 8495] set_robust_list(0x55555745a660, 24 [pid 8494] <... chdir resumed>) = 0 [pid 8489] <... exit_group resumed>) = ? [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8495 [pid 8495] <... set_robust_list resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8495] chdir("./337" [pid 8494] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8495] <... chdir resumed>) = 0 [pid 8494] setpgid(0, 0 [pid 8490] +++ exited with 0 +++ [pid 8495] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8494] <... setpgid resumed>) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8490, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 8494] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8495] <... prctl resumed>) = 0 [pid 8494] <... openat resumed>) = 3 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8496 [pid 8495] setpgid(0, 0 [pid 8494] write(3, "1000", 4 [pid 8495] <... setpgid resumed>) = 0 [pid 8495] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] umount2("./338", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8496 attached [pid 8495] <... openat resumed>) = 3 [pid 8494] <... write resumed>) = 4 [pid 8489] +++ exited with 0 +++ [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8496] set_robust_list(0x55555745a660, 24 [pid 8495] write(3, "1000", 4 [pid 8494] close(3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8489, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5062] openat(AT_FDCWD, "./338", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8496] <... set_robust_list resumed>) = 0 [pid 8495] <... write resumed>) = 4 [pid 8494] <... close resumed>) = 0 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5062] <... openat resumed>) = 3 [pid 8496] chdir("./345" [pid 8495] close(3 [pid 8494] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... restart_syscall resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 8496] <... chdir resumed>) = 0 [pid 8495] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8496] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8495] symlink("/dev/binderfs", "./binderfs" [pid 5062] getdents64(3, [pid 8496] <... prctl resumed>) = 0 [pid 8495] <... symlink resumed>) = 0 [pid 8494] <... symlink resumed>) = 0 [pid 5063] umount2("./339", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8496] setpgid(0, 0 [pid 8495] memfd_create("syzkaller", 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./338/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8496] <... setpgid resumed>) = 0 [pid 8495] <... memfd_create resumed>) = 3 [pid 8494] memfd_create("syzkaller", 0 [pid 5063] openat(AT_FDCWD, "./339", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8496] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8495] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8494] <... memfd_create resumed>) = 3 [pid 5063] <... openat resumed>) = 3 [pid 5062] newfstatat(AT_FDCWD, "./338/binderfs", [pid 8496] <... openat resumed>) = 3 [pid 8495] <... mmap resumed>) = 0x7f41e0600000 [pid 8494] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] newfstatat(3, "", [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8494] <... mmap resumed>) = 0x7f41e0600000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8496] write(3, "1000", 4 [pid 5063] getdents64(3, [pid 5062] unlink("./338/binderfs" [pid 8496] <... write resumed>) = 4 [pid 5062] <... unlink resumed>) = 0 [pid 8496] close(3 [pid 5062] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8496] <... close resumed>) = 0 [pid 5063] umount2("./339/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8496] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8496] <... symlink resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./339/binderfs", [pid 8496] memfd_create("syzkaller", 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5063] unlink("./339/binderfs" [pid 8496] <... memfd_create resumed>) = 3 [pid 5063] <... unlink resumed>) = 0 [pid 5063] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8496] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8494] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... umount2 resumed>) = 0 [pid 5062] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./339/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(AT_FDCWD, "./338/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8495] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] openat(AT_FDCWD, "./339/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8496] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... openat resumed>) = 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] openat(AT_FDCWD, "./338/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] getdents64(4, [pid 5062] <... openat resumed>) = 4 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 5062] getdents64(4, [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] close(4 [pid 5062] getdents64(4, [pid 8494] <... write resumed>) = 2097152 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8494] munmap(0x7f41e0600000, 138412032 [pid 5063] <... close resumed>) = 0 [pid 5062] close(4 [pid 5063] rmdir("./339/file0" [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./338/file0" [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, [pid 8495] <... write resumed>) = 2097152 [pid 8494] <... munmap resumed>) = 0 [pid 5063] getdents64(3, [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 5063] close(3 [pid 5062] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] rmdir("./338" [pid 5063] rmdir("./339" [pid 5062] <... rmdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8494] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5062] mkdir("./339", 0777 [pid 8495] munmap(0x7f41e0600000, 138412032 [pid 8494] ioctl(4, LOOP_SET_FD, 3 [pid 5063] mkdir("./340", 0777 [pid 8496] <... write resumed>) = 2097152 [pid 5062] <... mkdir resumed>) = 0 [pid 8496] munmap(0x7f41e0600000, 138412032) = 0 [pid 8495] <... munmap resumed>) = 0 [pid 8494] <... ioctl resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8495] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8494] close(3 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8495] <... openat resumed>) = 4 [pid 8494] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8496] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8495] ioctl(4, LOOP_SET_FD, 3 [pid 8494] close(4 [pid 8496] <... openat resumed>) = 4 [pid 5062] <... openat resumed>) = 3 [pid 8496] ioctl(4, LOOP_SET_FD, 3 [pid 8494] <... close resumed>) = 0 [pid 8494] mkdir("./file0", 0777 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8494] <... mkdir resumed>) = 0 [pid 8495] <... ioctl resumed>) = 0 [pid 8495] close(3 [pid 8494] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8495] <... close resumed>) = 0 [pid 8495] close(4) = 0 [pid 8495] mkdir("./file0", 0777) = 0 [pid 8495] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8496] <... ioctl resumed>) = 0 [pid 8496] close(3) = 0 [pid 8496] close(4) = 0 [pid 8496] mkdir("./file0", 0777) = 0 [ 312.472837][ T8494] loop3: detected capacity change from 0 to 4096 [ 312.495871][ T8495] loop4: detected capacity change from 0 to 4096 [ 312.496767][ T8496] loop0: detected capacity change from 0 to 4096 [pid 8496] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8495] <... mount resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 8495] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5063] <... ioctl resumed>) = 0 [pid 8495] chdir("./file0") = 0 [pid 5063] close(3 [pid 8495] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] <... close resumed>) = 0 [pid 8495] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 312.541274][ T8497] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8499 attached [pid 8495] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8499] set_robust_list(0x55555745a660, 24 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8499 [pid 5062] close(3 [pid 8499] <... set_robust_list resumed>) = 0 [pid 8499] chdir("./340" [pid 8494] <... mount resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8494] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8499] <... chdir resumed>) = 0 [pid 8494] <... openat resumed>) = 3 [pid 8494] chdir("./file0" [pid 8499] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8494] <... chdir resumed>) = 0 [pid 8499] <... prctl resumed>) = 0 [pid 8494] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 8500 attached [pid 8499] setpgid(0, 0 [pid 8495] <... open resumed>) = 4 [pid 8494] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8500] set_robust_list(0x55555745a660, 24 [pid 8499] <... setpgid resumed>) = 0 [pid 8495] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8494] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8500 [pid 8500] <... set_robust_list resumed>) = 0 [pid 8499] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8500] chdir("./339" [pid 8499] <... openat resumed>) = 3 [pid 8495] <... open resumed>) = 5 [pid 8500] <... chdir resumed>) = 0 [pid 8495] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8500] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8500] setpgid(0, 0 [pid 8499] write(3, "1000", 4 [pid 8495] <... mmap resumed>) = 0x20000000 [pid 8500] <... setpgid resumed>) = 0 [pid 8499] <... write resumed>) = 4 [pid 8495] ftruncate(4, 33587195 [pid 8500] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8499] close(3 [pid 8495] <... ftruncate resumed>) = 0 [pid 8499] <... close resumed>) = 0 [pid 8499] symlink("/dev/binderfs", "./binderfs" [pid 8500] <... openat resumed>) = 3 [pid 8500] write(3, "1000", 4 [pid 8499] <... symlink resumed>) = 0 [ 312.592053][ T8498] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8495] unlink("./bus" [pid 8499] memfd_create("syzkaller", 0 [pid 8500] <... write resumed>) = 4 [pid 8495] <... unlink resumed>) = 0 [pid 8495] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8495] exit_group(0) = ? [pid 8500] close(3 [pid 8499] <... memfd_create resumed>) = 3 [pid 8500] <... close resumed>) = 0 [pid 8499] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8500] symlink("/dev/binderfs", "./binderfs" [pid 8499] <... mmap resumed>) = 0x7f41e0600000 [pid 8500] <... symlink resumed>) = 0 [pid 8494] <... open resumed>) = 4 [pid 8494] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8500] memfd_create("syzkaller", 0 [pid 8496] <... mount resumed>) = 0 [pid 8494] <... open resumed>) = 5 [pid 8496] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8494] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8500] <... memfd_create resumed>) = 3 [pid 8496] <... openat resumed>) = 3 [pid 8496] chdir("./file0") = 0 [pid 8496] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8500] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8496] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8494] <... mmap resumed>) = 0x20000000 [pid 8494] ftruncate(4, 33587195 [pid 8500] <... mmap resumed>) = 0x7f41e0600000 [pid 8496] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8495] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8495, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=4 /* 0.04 s */} --- [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 8496] <... open resumed>) = 4 [pid 8494] <... ftruncate resumed>) = 0 [pid 8496] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8496] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8494] unlink("./bus" [pid 5065] umount2("./337", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./337", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8496] <... ftruncate resumed>) = 0 [pid 8499] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8494] <... unlink resumed>) = 0 [pid 5065] newfstatat(3, "", [pid 8494] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8496] unlink("./bus" [pid 8494] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./337/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8500] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8494] exit_group(0 [pid 5065] newfstatat(AT_FDCWD, "./337/binderfs", [pid 8494] <... exit_group resumed>) = ? [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./337/binderfs") = 0 [pid 8496] <... unlink resumed>) = 0 [pid 5065] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8496] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8496] exit_group(0) = ? [pid 8496] +++ exited with 0 +++ [pid 8494] +++ exited with 0 +++ [pid 5065] <... umount2 resumed>) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8494, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8496, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5061] umount2("./345", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8500] <... write resumed>) = 2097152 [pid 8499] <... write resumed>) = 2097152 [pid 5065] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8500] munmap(0x7f41e0600000, 138412032 [pid 8499] munmap(0x7f41e0600000, 138412032 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./345", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8500] <... munmap resumed>) = 0 [pid 5065] newfstatat(AT_FDCWD, "./337/file0", [pid 8500] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] <... openat resumed>) = 3 [pid 8500] <... openat resumed>) = 4 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./337/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(3, "", [pid 8500] ioctl(4, LOOP_SET_FD, 3 [pid 8499] <... munmap resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./344", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] openat(AT_FDCWD, "./337/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] getdents64(3, [pid 5064] openat(AT_FDCWD, "./344", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] <... openat resumed>) = 3 [pid 5061] umount2("./345/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] newfstatat(3, "", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... openat resumed>) = 4 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] newfstatat(AT_FDCWD, "./345/binderfs", [pid 5065] newfstatat(4, "", [pid 5064] getdents64(3, [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8500] <... ioctl resumed>) = 0 [pid 8499] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] unlink("./345/binderfs" [pid 8500] close(3 [pid 8499] <... openat resumed>) = 4 [pid 5065] getdents64(4, [pid 5064] umount2("./344/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8500] <... close resumed>) = 0 [pid 8499] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] newfstatat(AT_FDCWD, "./344/binderfs", [pid 5061] <... unlink resumed>) = 0 [pid 5065] getdents64(4, [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] unlink("./344/binderfs" [pid 5061] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] close(4 [pid 5064] <... unlink resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] rmdir("./337/file0") = 0 [pid 5065] getdents64(3, [pid 8500] close(4 [pid 8499] <... ioctl resumed>) = 0 [pid 8500] <... close resumed>) = 0 [pid 8499] close(3 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 8500] mkdir("./file0", 0777 [pid 8499] <... close resumed>) = 0 [pid 5065] close(3 [pid 5064] <... umount2 resumed>) = 0 [pid 5061] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8500] <... mkdir resumed>) = 0 [pid 8499] close(4 [pid 5065] <... close resumed>) = 0 [pid 5064] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8499] <... close resumed>) = 0 [pid 8500] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] rmdir("./337" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... rmdir resumed>) = 0 [pid 5064] newfstatat(AT_FDCWD, "./344/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] mkdir("./338", 0777 [pid 5064] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... mkdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./344/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8499] mkdir("./file0", 0777 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] <... openat resumed>) = 4 [pid 5061] newfstatat(AT_FDCWD, "./345/file0", [pid 8499] <... mkdir resumed>) = 0 [ 312.806241][ T8500] loop1: detected capacity change from 0 to 4096 [ 312.817087][ T8499] loop2: detected capacity change from 0 to 4096 [pid 8499] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... openat resumed>) = 3 [pid 5064] newfstatat(4, "", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] openat(AT_FDCWD, "./345/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] <... openat resumed>) = 4 [pid 5064] close(4) = 0 [pid 5061] newfstatat(4, "", [pid 5064] rmdir("./344/file0") = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, [pid 5061] getdents64(4, [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./344" [pid 5061] getdents64(4, [pid 5064] <... rmdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] mkdir("./345", 0777 [pid 5061] close(4) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 8500] <... mount resumed>) = 0 [pid 5061] rmdir("./345/file0" [pid 8500] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8500] <... openat resumed>) = 3 [pid 5061] <... rmdir resumed>) = 0 [pid 8500] chdir("./file0" [pid 5064] <... openat resumed>) = 3 [pid 5061] getdents64(3, [pid 8499] <... mount resumed>) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8499] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8500] <... chdir resumed>) = 0 [pid 8499] <... openat resumed>) = 3 [pid 5061] close(3 [pid 8499] chdir("./file0" [pid 5061] <... close resumed>) = 0 [pid 8500] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] rmdir("./345" [pid 8500] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8500] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8499] <... chdir resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8499] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5061] mkdir("./346", 0777 [pid 8500] <... open resumed>) = 4 [pid 8499] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... mkdir resumed>) = 0 [pid 8500] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8499] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8500] <... open resumed>) = 5 [pid 8500] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8500] <... mmap resumed>) = 0x20000000 [pid 8500] ftruncate(4, 33587195) = 0 [pid 8500] unlink("./bus" [pid 5065] <... ioctl resumed>) = 0 [pid 5065] close(3) = 0 [pid 8500] <... unlink resumed>) = 0 [ 312.881881][ T8502] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 312.905355][ T8503] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8500] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8500] exit_group(0) = ? [pid 8499] <... open resumed>) = 4 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8499] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000./strace-static-x86_64: Process 8504 attached [pid 8500] +++ exited with 0 +++ [pid 8499] <... open resumed>) = 5 [pid 8499] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8504 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8500, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 8499] <... mmap resumed>) = 0x20000000 [pid 5062] umount2("./339", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8504] set_robust_list(0x55555745a660, 24 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8504] <... set_robust_list resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./339", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8504] chdir("./338" [pid 5062] newfstatat(3, "", [pid 8504] <... chdir resumed>) = 0 [pid 8499] ftruncate(4, 33587195 [pid 8504] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... ioctl resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8504] <... prctl resumed>) = 0 [pid 5062] getdents64(3, [pid 5064] close(3 [pid 5061] close(3 [pid 8504] setpgid(0, 0 [pid 5064] <... close resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] <... close resumed>) = 0 [pid 8504] <... setpgid resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] umount2("./339/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 8505 attached [pid 8504] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8499] <... ftruncate resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./339/binderfs", [pid 8505] set_robust_list(0x55555745a660, 24 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8505 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 ./strace-static-x86_64: Process 8506 attached [pid 8505] <... set_robust_list resumed>) = 0 [pid 8504] <... openat resumed>) = 3 [pid 8499] unlink("./bus" [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8506 [pid 5062] unlink("./339/binderfs" [pid 8506] set_robust_list(0x55555745a660, 24 [pid 8505] chdir("./346") = 0 [pid 8504] write(3, "1000", 4 [pid 5062] <... unlink resumed>) = 0 [pid 8506] <... set_robust_list resumed>) = 0 [pid 8505] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8504] <... write resumed>) = 4 [pid 5062] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8506] chdir("./345" [pid 8505] <... prctl resumed>) = 0 [pid 8504] close(3 [pid 8506] <... chdir resumed>) = 0 [pid 8505] setpgid(0, 0 [pid 8504] <... close resumed>) = 0 [pid 8499] <... unlink resumed>) = 0 [pid 8506] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8504] symlink("/dev/binderfs", "./binderfs" [pid 8499] sendfile(-1, -1, NULL, 281474978811909 [pid 8505] <... setpgid resumed>) = 0 [pid 8506] <... prctl resumed>) = 0 [pid 8505] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8506] setpgid(0, 0 [pid 8504] <... symlink resumed>) = 0 [pid 8499] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8506] <... setpgid resumed>) = 0 [pid 8506] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8499] exit_group(0 [pid 8506] <... openat resumed>) = 3 [pid 8505] <... openat resumed>) = 3 [pid 8505] write(3, "1000", 4 [pid 8504] memfd_create("syzkaller", 0 [pid 8499] <... exit_group resumed>) = ? [pid 8506] write(3, "1000", 4) = 4 [pid 8506] close(3) = 0 [pid 8506] symlink("/dev/binderfs", "./binderfs" [pid 8505] <... write resumed>) = 4 [pid 8504] <... memfd_create resumed>) = 3 [pid 8499] +++ exited with 0 +++ [pid 5062] <... umount2 resumed>) = 0 [pid 8505] close(3 [pid 8504] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8505] <... close resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8499, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5062] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8505] symlink("/dev/binderfs", "./binderfs" [pid 8504] <... mmap resumed>) = 0x7f41e0600000 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./340", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(AT_FDCWD, "./339/file0", [pid 8506] <... symlink resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] openat(AT_FDCWD, "./340", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8505] <... symlink resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5062] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(3, "", [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8506] memfd_create("syzkaller", 0 [pid 8505] memfd_create("syzkaller", 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] openat(AT_FDCWD, "./339/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8506] <... memfd_create resumed>) = 3 [pid 8505] <... memfd_create resumed>) = 3 [pid 5063] getdents64(3, [pid 5062] <... openat resumed>) = 4 [pid 8506] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] newfstatat(4, "", [pid 8506] <... mmap resumed>) = 0x7f41e0600000 [pid 8505] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] umount2("./340/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8505] <... mmap resumed>) = 0x7f41e0600000 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./340/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./340/binderfs") = 0 [pid 5062] getdents64(4, [pid 5063] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./339/file0") = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3) = 0 [pid 5062] rmdir("./339") = 0 [pid 5062] mkdir("./340", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8504] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8505] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5063] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./340/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8506] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] openat(AT_FDCWD, "./340/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 8505] <... write resumed>) = 2097152 [pid 8505] munmap(0x7f41e0600000, 138412032 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./340/file0") = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./340") = 0 [pid 5063] mkdir("./341", 0777) = 0 [pid 8506] <... write resumed>) = 2097152 [pid 8505] <... munmap resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8506] munmap(0x7f41e0600000, 138412032 [pid 8504] <... write resumed>) = 2097152 [pid 8504] munmap(0x7f41e0600000, 138412032) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8505] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8504] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8505] <... openat resumed>) = 4 [pid 8504] <... openat resumed>) = 4 [pid 8504] ioctl(4, LOOP_SET_FD, 3 [pid 8506] <... munmap resumed>) = 0 [pid 8505] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... ioctl resumed>) = 0 [pid 8506] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8505] <... ioctl resumed>) = 0 [pid 8504] <... ioctl resumed>) = 0 [pid 8505] close(3 [pid 8504] close(3 [pid 8505] <... close resumed>) = 0 [pid 8504] <... close resumed>) = 0 [pid 5062] close(3 [pid 8506] <... openat resumed>) = 4 [pid 8505] close(4 [pid 8504] close(4 [pid 5062] <... close resumed>) = 0 [pid 8506] ioctl(4, LOOP_SET_FD, 3 [pid 8505] <... close resumed>) = 0 [pid 8504] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8505] mkdir("./file0", 0777 [pid 8504] mkdir("./file0", 0777./strace-static-x86_64: Process 8507 attached [pid 8505] <... mkdir resumed>) = 0 [pid 8507] set_robust_list(0x55555745a660, 24) = 0 [pid 8505] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8507] chdir("./340") = 0 [pid 8504] <... mkdir resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8507 [pid 8504] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8507] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8507] setpgid(0, 0 [pid 8506] <... ioctl resumed>) = 0 [pid 8506] close(3) = 0 [pid 8506] close(4) = 0 [ 313.174911][ T8504] loop4: detected capacity change from 0 to 4096 [ 313.183049][ T8505] loop0: detected capacity change from 0 to 4096 [ 313.201850][ T8506] loop3: detected capacity change from 0 to 4096 [pid 8506] mkdir("./file0", 0777) = 0 [pid 8507] <... setpgid resumed>) = 0 [pid 8505] <... mount resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 8506] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8504] <... mount resumed>) = 0 [pid 8504] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8504] chdir("./file0") = 0 [pid 8504] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8507] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8504] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] close(3 [pid 8505] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8507] <... openat resumed>) = 3 [pid 8505] <... openat resumed>) = 3 [pid 5063] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8505] chdir("./file0"./strace-static-x86_64: Process 8510 attached ) = 0 [pid 8510] set_robust_list(0x55555745a660, 24 [pid 8505] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8510] <... set_robust_list resumed>) = 0 [pid 8507] write(3, "1000", 4 [pid 8505] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8510 [pid 8510] chdir("./341" [pid 8507] <... write resumed>) = 4 [pid 8507] close(3) = 0 [pid 8507] symlink("/dev/binderfs", "./binderfs" [pid 8510] <... chdir resumed>) = 0 [pid 8505] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8507] <... symlink resumed>) = 0 [pid 8510] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8510] setpgid(0, 0) = 0 [ 313.248537][ T8509] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 313.259295][ T8508] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8507] memfd_create("syzkaller", 0) = 3 [pid 8510] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8507] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8506] <... mount resumed>) = 0 [pid 8505] <... open resumed>) = 4 [pid 8504] <... open resumed>) = 4 [pid 8506] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8505] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8506] <... openat resumed>) = 3 [pid 8504] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8506] chdir("./file0" [pid 8507] <... mmap resumed>) = 0x7f41e0600000 [pid 8506] <... chdir resumed>) = 0 [pid 8505] <... open resumed>) = 5 [pid 8504] <... open resumed>) = 5 [pid 8506] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8510] <... openat resumed>) = 3 [pid 8506] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8505] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8504] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8504] ftruncate(4, 33587195 [pid 8510] write(3, "1000", 4) = 4 [pid 8510] close(3) = 0 [pid 8505] <... mmap resumed>) = 0x20000000 [pid 8504] <... ftruncate resumed>) = 0 [pid 8510] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8505] ftruncate(4, 33587195 [pid 8504] unlink("./bus" [pid 8510] memfd_create("syzkaller", 0) = 3 [pid 8504] <... unlink resumed>) = 0 [pid 8504] sendfile(-1, -1, NULL, 281474978811909 [pid 8510] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8504] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8510] <... mmap resumed>) = 0x7f41e0600000 [pid 8504] exit_group(0 [pid 8506] <... open resumed>) = 4 [pid 8504] <... exit_group resumed>) = ? [pid 8506] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8505] <... ftruncate resumed>) = 0 [ 313.291837][ T8511] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 313.306929][ T28] kauditd_printk_skb: 104 callbacks suppressed [ 313.306946][ T28] audit: type=1800 audit(1708423465.830:5132): pid=8505 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [pid 8506] <... open resumed>) = 5 [ 313.371383][ T28] audit: type=1800 audit(1708423465.860:5133): pid=8504 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 313.393695][ T28] audit: type=1800 audit(1708423465.860:5134): pid=8505 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [pid 8505] unlink("./bus" [pid 8510] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8507] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8506] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8505] <... unlink resumed>) = 0 [pid 8504] +++ exited with 0 +++ [ 313.417358][ T28] audit: type=1800 audit(1708423465.860:5135): pid=8504 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 313.438246][ T28] audit: type=1800 audit(1708423465.870:5136): pid=8505 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop0" ino=18 res=0 errno=0 [pid 8505] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8505] exit_group(0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8504, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8506] <... mmap resumed>) = 0x20000000 [pid 8505] <... exit_group resumed>) = ? [pid 8506] ftruncate(4, 33587195 [pid 5065] umount2("./338", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8505] +++ exited with 0 +++ [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./338", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8505, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5061] umount2("./346", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... openat resumed>) = 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(3, "", [pid 5061] openat(AT_FDCWD, "./346", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, [pid 5061] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] newfstatat(3, "", [pid 5065] umount2("./338/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./338/binderfs", [pid 5061] getdents64(3, [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] unlink("./338/binderfs" [pid 5061] umount2("./346/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] <... unlink resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./346/binderfs", [pid 5065] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8506] <... ftruncate resumed>) = 0 [pid 5061] unlink("./346/binderfs") = 0 [ 313.458503][ T28] audit: type=1800 audit(1708423465.870:5137): pid=8504 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 313.481980][ T28] audit: type=1800 audit(1708423465.890:5138): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [pid 5061] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8506] unlink("./bus" [pid 8510] <... write resumed>) = 2097152 [pid 8510] munmap(0x7f41e0600000, 138412032 [pid 5061] <... umount2 resumed>) = 0 [pid 8510] <... munmap resumed>) = 0 [pid 8507] <... write resumed>) = 2097152 [pid 5061] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8510] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8507] munmap(0x7f41e0600000, 138412032 [pid 8506] <... unlink resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8506] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... umount2 resumed>) = 0 [ 313.516642][ T28] audit: type=1800 audit(1708423465.910:5139): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 313.539641][ T28] audit: type=1800 audit(1708423466.010:5140): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [pid 8510] <... openat resumed>) = 4 [pid 8510] ioctl(4, LOOP_SET_FD, 3 [pid 8506] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8506] exit_group(0) = ? [pid 5065] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./338/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] newfstatat(AT_FDCWD, "./346/file0", [pid 5065] umount2("./338/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] openat(AT_FDCWD, "./338/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... openat resumed>) = 4 [pid 5061] openat(AT_FDCWD, "./346/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] newfstatat(4, "", [pid 5061] <... openat resumed>) = 4 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] newfstatat(4, "", [pid 8510] <... ioctl resumed>) = 0 [pid 8507] <... munmap resumed>) = 0 [pid 5065] getdents64(4, [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, [pid 5065] getdents64(4, [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] getdents64(4, [pid 5065] close(4 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8507] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] <... close resumed>) = 0 [pid 5061] close(4 [pid 8510] close(3 [pid 8507] <... openat resumed>) = 4 [pid 8506] +++ exited with 0 +++ [pid 5065] rmdir("./338/file0" [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./346/file0" [pid 8510] <... close resumed>) = 0 [pid 8507] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8506, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=9 /* 0.09 s */} --- [pid 5064] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 8510] close(4) = 0 [pid 8510] mkdir("./file0", 0777) = 0 [pid 8507] <... ioctl resumed>) = 0 [pid 5065] getdents64(3, [pid 5064] umount2("./345", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... rmdir resumed>) = 0 [pid 8507] close(3) = 0 [pid 8507] close(4) = 0 [pid 8507] mkdir("./file0", 0777) = 0 [pid 8510] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8507] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] getdents64(3, [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 5061] close(3 [pid 5065] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5065] rmdir("./338" [pid 5061] rmdir("./346") = 0 [ 313.573403][ T8510] loop2: detected capacity change from 0 to 4096 [ 313.592313][ T8507] loop1: detected capacity change from 0 to 4096 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] mkdir("./347", 0777) = 0 [pid 5064] openat(AT_FDCWD, "./345", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] mkdir("./339", 0777 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] <... openat resumed>) = 3 [pid 5065] <... mkdir resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5064] newfstatat(3, "", [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./345/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8510] <... mount resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] newfstatat(AT_FDCWD, "./345/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5064] unlink("./345/binderfs" [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8507] <... mount resumed>) = 0 [pid 8510] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8507] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... unlink resumed>) = 0 [pid 8507] <... openat resumed>) = 3 [pid 8507] chdir("./file0") = 0 [pid 8507] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8510] <... openat resumed>) = 3 [pid 8507] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8507] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8510] chdir("./file0" [pid 5064] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... ioctl resumed>) = 0 [pid 8510] <... chdir resumed>) = 0 [pid 8510] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8510] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8510] <... open resumed>) = 4 ./strace-static-x86_64: Process 8514 attached [pid 8510] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8514 [ 313.652002][ T8512] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 313.669092][ T8513] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8514] set_robust_list(0x55555745a660, 24 [pid 8510] <... open resumed>) = 5 [pid 5064] <... umount2 resumed>) = 0 [pid 8510] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8507] <... open resumed>) = 4 [pid 8507] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8507] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 8510] <... mmap resumed>) = 0x20000000 [pid 5064] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8510] ftruncate(4, 33587195 [pid 8514] chdir("./347" [pid 8507] ftruncate(4, 33587195 [pid 5065] <... ioctl resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8514] <... chdir resumed>) = 0 [pid 8514] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] newfstatat(AT_FDCWD, "./345/file0", [pid 8514] <... prctl resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8514] setpgid(0, 0 [pid 8507] <... ftruncate resumed>) = 0 [pid 5064] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8514] <... setpgid resumed>) = 0 [pid 8507] unlink("./bus" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8514] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] openat(AT_FDCWD, "./345/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8514] <... openat resumed>) = 3 [pid 8510] <... ftruncate resumed>) = 0 [pid 8507] <... unlink resumed>) = 0 [pid 5065] close(3 [pid 8514] write(3, "1000", 4 [pid 8510] unlink("./bus" [pid 8514] <... write resumed>) = 4 [ 313.722875][ T28] audit: type=1800 audit(1708423466.250:5141): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop2" ino=18 res=0 errno=0 [pid 8507] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... close resumed>) = 0 [pid 5064] <... openat resumed>) = 4 [pid 8514] close(3 [pid 8510] <... unlink resumed>) = 0 [pid 8507] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] newfstatat(4, "", [pid 8514] <... close resumed>) = 0 [pid 8507] exit_group(0 [pid 8514] symlink("/dev/binderfs", "./binderfs" [pid 8507] <... exit_group resumed>) = ? [pid 8514] <... symlink resumed>) = 0 [pid 8514] memfd_create("syzkaller", 0) = 3 [pid 8514] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8510] sendfile(-1, -1, NULL, 281474978811909./strace-static-x86_64: Process 8515 attached ) = -1 EBADF (Bad file descriptor) [pid 8507] +++ exited with 0 +++ [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8514] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8510] exit_group(0 [pid 8515] set_robust_list(0x55555745a660, 24 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8515 [pid 5064] getdents64(4, [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8507, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 8515] <... set_robust_list resumed>) = 0 [pid 8510] <... exit_group resumed>) = ? [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./345/file0") = 0 [pid 8515] chdir("./339" [pid 5064] getdents64(3, [pid 5062] umount2("./340", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8515] <... chdir resumed>) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8515] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] close(3 [pid 5062] openat(AT_FDCWD, "./340", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8515] <... prctl resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 8515] setpgid(0, 0 [pid 8510] +++ exited with 0 +++ [pid 5064] rmdir("./345" [pid 5062] <... openat resumed>) = 3 [pid 8515] <... setpgid resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8510, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8515] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] mkdir("./346", 0777 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 8515] <... openat resumed>) = 3 [pid 5064] <... mkdir resumed>) = 0 [pid 5063] <... restart_syscall resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 8515] write(3, "1000", 4 [pid 5063] umount2("./341", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8515] <... write resumed>) = 4 [pid 5063] openat(AT_FDCWD, "./341", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8515] close(3 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... openat resumed>) = 3 [pid 5062] getdents64(3, [pid 8515] <... close resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5063] newfstatat(3, "", [pid 8515] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8515] <... symlink resumed>) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] getdents64(3, [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./340/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./341/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8515] memfd_create("syzkaller", 0 [pid 5063] newfstatat(AT_FDCWD, "./341/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./341/binderfs") = 0 [pid 8515] <... memfd_create resumed>) = 3 [pid 5063] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(AT_FDCWD, "./340/binderfs", [pid 8515] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... umount2 resumed>) = 0 [pid 8515] <... mmap resumed>) = 0x7f41e0600000 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8514] <... write resumed>) = 2097152 [pid 5063] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] unlink("./340/binderfs" [pid 8514] munmap(0x7f41e0600000, 138412032 [pid 5062] <... unlink resumed>) = 0 [pid 8514] <... munmap resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(AT_FDCWD, "./341/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8514] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8515] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] openat(AT_FDCWD, "./341/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... umount2 resumed>) = 0 [pid 8514] <... openat resumed>) = 4 [pid 5063] <... openat resumed>) = 4 [pid 5062] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(4, "", [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] newfstatat(AT_FDCWD, "./340/file0", [pid 8514] ioctl(4, LOOP_SET_FD, 3 [pid 5063] getdents64(4, [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(4, [pid 5062] openat(AT_FDCWD, "./340/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... ioctl resumed>) = 0 [pid 8514] <... ioctl resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] <... openat resumed>) = 4 [pid 8514] close(3) = 0 [pid 8514] close(4) = 0 [pid 8514] mkdir("./file0", 0777 [pid 5063] close(4 [pid 5062] newfstatat(4, "", [pid 8514] <... mkdir resumed>) = 0 [pid 5064] close(3 [pid 5063] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] rmdir("./341/file0" [pid 5062] getdents64(4, [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8514] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] getdents64(3, [pid 5062] getdents64(4, ./strace-static-x86_64: Process 8516 attached [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5062] close(4 [pid 5063] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5063] rmdir("./341" [pid 5062] rmdir("./340/file0" [pid 8516] set_robust_list(0x55555745a660, 24 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8516] <... set_robust_list resumed>) = 0 [pid 8516] chdir("./346" [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8516 [pid 5063] mkdir("./342", 0777 [pid 5062] getdents64(3, [pid 8516] <... chdir resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8516] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5062] close(3 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5062] rmdir("./340" [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] <... rmdir resumed>) = 0 [pid 5062] mkdir("./341", 0777) = 0 [ 313.875268][ T8514] loop0: detected capacity change from 0 to 4096 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 8516] setpgid(0, 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8516] <... setpgid resumed>) = 0 [pid 8516] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8515] <... write resumed>) = 2097152 [pid 8516] write(3, "1000", 4) = 4 [pid 8515] munmap(0x7f41e0600000, 138412032 [pid 8516] close(3 [pid 8515] <... munmap resumed>) = 0 [pid 8516] <... close resumed>) = 0 [pid 8516] symlink("/dev/binderfs", "./binderfs" [pid 8515] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8516] <... symlink resumed>) = 0 [pid 8516] memfd_create("syzkaller", 0 [pid 8515] <... openat resumed>) = 4 [pid 8515] ioctl(4, LOOP_SET_FD, 3 [pid 8516] <... memfd_create resumed>) = 3 [pid 8514] <... mount resumed>) = 0 [pid 8516] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8515] <... ioctl resumed>) = 0 [pid 8514] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8516] <... mmap resumed>) = 0x7f41e0600000 [pid 8515] close(3) = 0 [pid 8514] <... openat resumed>) = 3 [pid 8515] close(4 [pid 8514] chdir("./file0" [pid 8515] <... close resumed>) = 0 [pid 8514] <... chdir resumed>) = 0 [pid 8514] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8515] mkdir("./file0", 0777 [pid 8514] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8515] <... mkdir resumed>) = 0 [pid 8514] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8516] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8515] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8514] <... open resumed>) = 4 [pid 8514] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [ 313.950698][ T8517] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 313.963031][ T8515] loop4: detected capacity change from 0 to 4096 [pid 8514] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] <... ioctl resumed>) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8515] <... mount resumed>) = 0 [pid 8514] <... unlink resumed>) = 0 [pid 5062] close(3 [pid 8515] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8514] sendfile(-1, -1, NULL, 281474978811909 [pid 5062] <... close resumed>) = 0 [pid 8514] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8514] exit_group(0 [pid 8515] <... openat resumed>) = 3 [pid 8514] <... exit_group resumed>) = ? [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8520 ./strace-static-x86_64: Process 8520 attached [pid 8515] chdir("./file0" [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8519 [pid 8520] set_robust_list(0x55555745a660, 24 [pid 8515] <... chdir resumed>) = 0 [pid 8515] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8520] <... set_robust_list resumed>) = 0 [pid 8515] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8520] chdir("./341" [pid 8515] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8520] <... chdir resumed>) = 0 [pid 8520] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8520] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 8519 attached [pid 8519] set_robust_list(0x55555745a660, 24) = 0 [pid 8519] chdir("./342" [ 314.026604][ T8518] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8520] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8514] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8514, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 8520] <... openat resumed>) = 3 [pid 8519] <... chdir resumed>) = 0 [pid 8515] <... open resumed>) = 4 [pid 8519] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8515] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8520] write(3, "1000", 4 [pid 8519] <... prctl resumed>) = 0 [pid 8515] <... open resumed>) = 5 [pid 8516] <... write resumed>) = 2097152 [pid 8520] <... write resumed>) = 4 [pid 8519] setpgid(0, 0 [pid 8515] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] umount2("./347", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8519] <... setpgid resumed>) = 0 [pid 8516] munmap(0x7f41e0600000, 138412032 [pid 8520] close(3 [pid 8519] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8515] <... mmap resumed>) = 0x20000000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8520] <... close resumed>) = 0 [pid 8519] <... openat resumed>) = 3 [pid 8515] ftruncate(4, 33587195 [pid 5061] openat(AT_FDCWD, "./347", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8520] symlink("/dev/binderfs", "./binderfs" [pid 8519] write(3, "1000", 4 [pid 8516] <... munmap resumed>) = 0 [pid 8516] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... openat resumed>) = 3 [pid 8519] <... write resumed>) = 4 [pid 5061] newfstatat(3, "", [pid 8519] close(3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8520] <... symlink resumed>) = 0 [pid 8519] <... close resumed>) = 0 [pid 8519] symlink("/dev/binderfs", "./binderfs" [pid 5061] getdents64(3, [pid 8519] <... symlink resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8519] memfd_create("syzkaller", 0 [pid 8515] <... ftruncate resumed>) = 0 [pid 5061] umount2("./347/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8520] memfd_create("syzkaller", 0) = 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8520] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5061] newfstatat(AT_FDCWD, "./347/binderfs", [pid 8520] <... mmap resumed>) = 0x7f41e0600000 [pid 8516] <... openat resumed>) = 4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8519] <... memfd_create resumed>) = 3 [pid 5061] unlink("./347/binderfs" [pid 8519] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8516] ioctl(4, LOOP_SET_FD, 3 [pid 8515] unlink("./bus" [pid 8516] <... ioctl resumed>) = 0 [pid 8516] close(3 [pid 8520] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8516] <... close resumed>) = 0 [pid 8515] <... unlink resumed>) = 0 [pid 8515] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8515] exit_group(0) = ? [pid 8516] close(4 [pid 5061] <... umount2 resumed>) = 0 [pid 8516] <... close resumed>) = 0 [pid 5061] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8519] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8516] mkdir("./file0", 0777 [pid 8515] +++ exited with 0 +++ [pid 5061] newfstatat(AT_FDCWD, "./347/file0", [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8515, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8516] <... mkdir resumed>) = 0 [pid 5061] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./339", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8516] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] openat(AT_FDCWD, "./339", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] openat(AT_FDCWD, "./347/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... openat resumed>) = 3 [pid 8520] <... write resumed>) = 2097152 [pid 5065] newfstatat(3, "", [pid 5061] <... openat resumed>) = 4 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, [pid 5061] newfstatat(4, "", [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./339/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./339/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./339/binderfs") = 0 [pid 5065] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, [pid 8520] munmap(0x7f41e0600000, 138412032 [ 314.129664][ T8516] loop3: detected capacity change from 0 to 4096 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 8520] <... munmap resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./347/file0" [pid 8520] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 8520] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... rmdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 8520] <... ioctl resumed>) = 0 [pid 8516] <... mount resumed>) = 0 [pid 5061] getdents64(3, [pid 8516] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8520] close(3 [pid 8516] <... openat resumed>) = 3 [pid 5061] close(3 [pid 8520] <... close resumed>) = 0 [pid 8519] <... write resumed>) = 2097152 [pid 8516] chdir("./file0" [pid 5065] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... close resumed>) = 0 [pid 8520] close(4 [pid 8519] munmap(0x7f41e0600000, 138412032 [pid 8516] <... chdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] rmdir("./347" [pid 8520] <... close resumed>) = 0 [pid 8516] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8520] mkdir("./file0", 0777 [pid 8519] <... munmap resumed>) = 0 [pid 8516] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] newfstatat(AT_FDCWD, "./339/file0", [pid 5061] <... rmdir resumed>) = 0 [pid 8520] <... mkdir resumed>) = 0 [pid 5061] mkdir("./348", 0777 [pid 8520] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8516] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./339/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... mkdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8519] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] openat(AT_FDCWD, "./339/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] <... openat resumed>) = 4 [pid 8519] <... openat resumed>) = 4 [pid 5065] newfstatat(4, "", [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8516] <... open resumed>) = 4 [pid 5065] getdents64(4, [ 314.204746][ T8520] loop1: detected capacity change from 0 to 4096 [ 314.212101][ T8521] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8519] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, [pid 8516] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8519] <... ioctl resumed>) = 0 [pid 8516] <... open resumed>) = 5 [pid 5065] close(4 [pid 8516] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./339/file0") = 0 [pid 8520] <... mount resumed>) = 0 [pid 8520] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8520] chdir("./file0") = 0 [pid 8520] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8520] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8519] close(3 [pid 8516] <... mmap resumed>) = 0x20000000 [pid 5065] getdents64(3, [pid 8519] <... close resumed>) = 0 [pid 8516] ftruncate(4, 33587195 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8519] close(4 [pid 5065] close(3 [pid 8519] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 8519] mkdir("./file0", 0777 [pid 5065] rmdir("./339" [pid 8519] <... mkdir resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 8519] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8516] <... ftruncate resumed>) = 0 [pid 5065] mkdir("./340", 0777 [pid 8516] unlink("./bus" [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8520] <... open resumed>) = 4 [ 314.255815][ T8519] loop2: detected capacity change from 0 to 4096 [ 314.266719][ T8522] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8520] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8516] <... unlink resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8516] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8520] <... open resumed>) = 5 [pid 8516] exit_group(0 [pid 5061] close(3) = 0 [pid 8516] <... exit_group resumed>) = ? [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8520] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8524 [pid 8519] <... mount resumed>) = 0 [pid 8524] set_robust_list(0x55555745a660, 24 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8516, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8524] <... set_robust_list resumed>) = 0 [pid 8519] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8524] chdir("./348" [pid 8519] <... openat resumed>) = 3 [pid 5064] umount2("./346", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8524] <... chdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8524] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8524] setpgid(0, 0 [pid 8520] <... ftruncate resumed>) = 0 [pid 8519] chdir("./file0" [pid 5064] openat(AT_FDCWD, "./346", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8519] <... chdir resumed>) = 0 [pid 8519] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8519] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8524] <... setpgid resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 8520] unlink("./bus" [pid 8524] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... ioctl resumed>) = 0 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, [pid 8524] <... openat resumed>) = 3 [pid 5065] close(3 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8524] write(3, "1000", 4 [pid 5064] umount2("./346/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8524] <... write resumed>) = 4 [pid 8520] <... unlink resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] newfstatat(AT_FDCWD, "./346/binderfs", [pid 8524] close(3 [pid 8520] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8524] <... close resumed>) = 0 [pid 8520] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8524] symlink("/dev/binderfs", "./binderfs" [ 314.341269][ T8523] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8520] exit_group(0 [pid 8519] <... open resumed>) = 4 [pid 8524] <... symlink resumed>) = 0 [pid 8520] <... exit_group resumed>) = ? [pid 8519] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] unlink("./346/binderfs" [pid 8519] <... open resumed>) = 5 [pid 5064] <... unlink resumed>) = 0 [pid 5064] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8519] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8524] memfd_create("syzkaller", 0 [pid 8520] +++ exited with 0 +++ [pid 5064] <... umount2 resumed>) = 0 [pid 8525] set_robust_list(0x55555745a660, 24 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8525 [pid 8525] <... set_robust_list resumed>) = 0 [pid 8524] <... memfd_create resumed>) = 3 [pid 5064] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8520, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 8519] <... ftruncate resumed>) = 0 [pid 8525] chdir("./340" [pid 8524] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 8525] <... chdir resumed>) = 0 [pid 8524] <... mmap resumed>) = 0x7f41e0600000 [pid 5064] newfstatat(AT_FDCWD, "./346/file0", [pid 5062] <... restart_syscall resumed>) = 0 [pid 8525] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8519] unlink("./bus" [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8525] <... prctl resumed>) = 0 [pid 8525] setpgid(0, 0 [pid 5064] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8525] <... setpgid resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8525] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] openat(AT_FDCWD, "./346/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] umount2("./341", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8519] <... unlink resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./341", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8519] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 5062] <... openat resumed>) = 3 [pid 8519] exit_group(0 [pid 5062] newfstatat(3, "", [pid 8519] <... exit_group resumed>) = ? [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8525] <... openat resumed>) = 3 [pid 5064] <... openat resumed>) = 4 [pid 8525] write(3, "1000", 4 [pid 5064] newfstatat(4, "", [pid 8525] <... write resumed>) = 4 [pid 8525] close(3 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, [pid 8525] <... close resumed>) = 0 [pid 5064] getdents64(4, [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8525] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] umount2("./341/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8525] <... symlink resumed>) = 0 [pid 5064] getdents64(4, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] newfstatat(AT_FDCWD, "./341/binderfs", [pid 8525] memfd_create("syzkaller", 0 [pid 5064] close(4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8525] <... memfd_create resumed>) = 3 [pid 5064] <... close resumed>) = 0 [pid 5062] unlink("./341/binderfs" [pid 8525] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8519] +++ exited with 0 +++ [pid 8524] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] rmdir("./346/file0" [pid 5062] <... unlink resumed>) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8519, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5062] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8525] <... mmap resumed>) = 0x7f41e0600000 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5064] getdents64(3, [pid 5063] <... restart_syscall resumed>) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] umount2("./342", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./342", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./342/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./342/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 5063] unlink("./342/binderfs") = 0 [pid 5063] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] close(3) = 0 [pid 5062] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./341/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./341/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] rmdir("./346" [pid 5063] <... umount2 resumed>) = 0 [pid 8524] <... write resumed>) = 2097152 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(4, "", [pid 5064] mkdir("./347", 0777 [pid 8525] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... mkdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] newfstatat(AT_FDCWD, "./342/file0", [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 8524] munmap(0x7f41e0600000, 138412032 [pid 8525] <... write resumed>) = 2097152 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] getdents64(4, [pid 8525] munmap(0x7f41e0600000, 138412032 [pid 5063] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8524] <... munmap resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] close(4 [pid 5063] openat(AT_FDCWD, "./342/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8525] <... munmap resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5062] rmdir("./341/file0" [pid 8525] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8524] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] newfstatat(4, "", [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, [pid 8525] <... openat resumed>) = 4 [pid 8524] <... openat resumed>) = 4 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8525] ioctl(4, LOOP_SET_FD, 3 [pid 8524] ioctl(4, LOOP_SET_FD, 3 [pid 5063] getdents64(4, [pid 5062] close(3 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./341") = 0 [pid 5062] mkdir("./342", 0777 [pid 8524] <... ioctl resumed>) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 5063] getdents64(4, [pid 8525] <... ioctl resumed>) = 0 [pid 5064] close(3 [pid 8525] close(3 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8525] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 8525] close(4 [pid 5063] close(4 [pid 8525] <... close resumed>) = 0 [pid 8524] close(3) = 0 [pid 8524] close(4) = 0 [pid 8524] mkdir("./file0", 0777) = 0 [pid 8524] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8525] mkdir("./file0", 0777 [pid 5063] <... close resumed>) = 0 [pid 8525] <... mkdir resumed>) = 0 [pid 5063] rmdir("./342/file0" [pid 8525] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... mkdir resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./342"./strace-static-x86_64: Process 8526 attached [pid 8526] set_robust_list(0x55555745a660, 24) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8526 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8526] chdir("./347" [pid 5063] mkdir("./343", 0777 [pid 8526] <... chdir resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 8526] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... mkdir resumed>) = 0 [pid 8526] <... prctl resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8526] setpgid(0, 0 [pid 5063] <... openat resumed>) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8526] <... setpgid resumed>) = 0 [pid 8526] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 314.515456][ T8525] loop4: detected capacity change from 0 to 4096 [ 314.519150][ T8524] loop0: detected capacity change from 0 to 4096 [pid 8526] write(3, "1000", 4 [pid 8525] <... mount resumed>) = 0 [pid 8525] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8525] chdir("./file0") = 0 [pid 8525] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8526] <... write resumed>) = 4 [pid 8525] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8526] close(3 [pid 8525] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8526] <... close resumed>) = 0 [pid 8526] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8526] memfd_create("syzkaller", 0 [pid 8524] <... mount resumed>) = 0 [pid 8526] <... memfd_create resumed>) = 3 [pid 8524] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8526] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8525] <... open resumed>) = 4 [pid 8524] <... openat resumed>) = 3 [pid 8525] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8524] chdir("./file0" [pid 8526] <... mmap resumed>) = 0x7f41e0600000 [pid 8524] <... chdir resumed>) = 0 [pid 8525] <... open resumed>) = 5 [pid 8524] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8524] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8525] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] <... ioctl resumed>) = 0 [pid 8525] <... ftruncate resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3 [pid 5062] close(3 [pid 5063] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8525] unlink("./bus" [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8530 attached ./strace-static-x86_64: Process 8529 attached [pid 8524] <... open resumed>) = 4 [pid 8529] set_robust_list(0x55555745a660, 24) = 0 [pid 8529] chdir("./343") = 0 [pid 8529] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8529] setpgid(0, 0 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8529 [pid 8529] <... setpgid resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8530 [pid 8529] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8530] set_robust_list(0x55555745a660, 24) = 0 [pid 8524] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8529] <... openat resumed>) = 3 [pid 8530] chdir("./342" [pid 8529] write(3, "1000", 4 [pid 8524] <... open resumed>) = 5 [pid 8529] <... write resumed>) = 4 [pid 8529] close(3 [pid 8526] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8525] <... unlink resumed>) = 0 [pid 8530] <... chdir resumed>) = 0 [pid 8529] <... close resumed>) = 0 [pid 8525] sendfile(-1, -1, NULL, 281474978811909 [pid 8524] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8529] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8525] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8524] <... mmap resumed>) = 0x20000000 [pid 8530] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8529] memfd_create("syzkaller", 0 [pid 8525] exit_group(0) = ? [pid 8530] <... prctl resumed>) = 0 [pid 8524] ftruncate(4, 33587195 [pid 8530] setpgid(0, 0 [pid 8529] <... memfd_create resumed>) = 3 [pid 8529] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8530] <... setpgid resumed>) = 0 [pid 8530] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8525] +++ exited with 0 +++ [pid 8530] <... openat resumed>) = 3 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8525, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5065] umount2("./340", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8530] write(3, "1000", 4 [pid 8524] <... ftruncate resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./340", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8524] unlink("./bus" [pid 5065] getdents64(3, [pid 8530] <... write resumed>) = 4 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8530] close(3 [pid 5065] umount2("./340/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8530] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8530] symlink("/dev/binderfs", "./binderfs" [pid 5065] newfstatat(AT_FDCWD, "./340/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./340/binderfs" [pid 8526] <... write resumed>) = 2097152 [pid 5065] <... unlink resumed>) = 0 [pid 5065] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8530] <... symlink resumed>) = 0 [pid 8526] munmap(0x7f41e0600000, 138412032 [pid 8530] memfd_create("syzkaller", 0 [pid 8524] <... unlink resumed>) = 0 [pid 8530] <... memfd_create resumed>) = 3 [pid 8524] sendfile(-1, -1, NULL, 281474978811909 [pid 8530] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8524] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8530] <... mmap resumed>) = 0x7f41e0600000 [pid 8524] exit_group(0) = ? [pid 8526] <... munmap resumed>) = 0 [pid 8524] +++ exited with 0 +++ [pid 8526] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8524, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=4 /* 0.04 s */} --- [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 8526] <... openat resumed>) = 4 [pid 5061] umount2("./348", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8526] ioctl(4, LOOP_SET_FD, 3 [pid 5061] openat(AT_FDCWD, "./348", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8529] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] <... umount2 resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8526] <... ioctl resumed>) = 0 [pid 5061] umount2("./348/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8526] close(3) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8526] close(4 [pid 5061] newfstatat(AT_FDCWD, "./348/binderfs", [pid 8526] <... close resumed>) = 0 [pid 8526] mkdir("./file0", 0777 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./348/binderfs") = 0 [pid 8526] <... mkdir resumed>) = 0 [pid 5061] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8530] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8526] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./340/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./340/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./340/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./348/file0", [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 314.778060][ T8526] loop3: detected capacity change from 0 to 4096 [pid 5065] close(4 [pid 8529] <... write resumed>) = 2097152 [pid 8526] <... mount resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8526] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] rmdir("./340/file0" [pid 5061] openat(AT_FDCWD, "./348/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8529] munmap(0x7f41e0600000, 138412032 [pid 8526] <... openat resumed>) = 3 [pid 8529] <... munmap resumed>) = 0 [pid 8526] chdir("./file0" [pid 5065] <... rmdir resumed>) = 0 [pid 5061] <... openat resumed>) = 4 [pid 8526] <... chdir resumed>) = 0 [pid 8526] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] newfstatat(4, "", [pid 8526] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8526] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8529] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8529] ioctl(4, LOOP_SET_FD, 3 [pid 5065] close(3) = 0 [pid 5065] rmdir("./340") = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] mkdir("./341", 0777) = 0 [pid 5061] getdents64(4, [pid 8529] <... ioctl resumed>) = 0 [pid 8530] <... write resumed>) = 2097152 [pid 8526] <... open resumed>) = 4 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8530] munmap(0x7f41e0600000, 138412032 [pid 8529] close(3 [pid 8526] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8529] <... close resumed>) = 0 [pid 8526] <... open resumed>) = 5 [pid 5065] <... openat resumed>) = 3 [pid 5061] getdents64(4, [pid 8530] <... munmap resumed>) = 0 [pid 8529] close(4 [ 314.837700][ T8531] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 314.860461][ T8529] loop2: detected capacity change from 0 to 4096 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8530] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8529] <... close resumed>) = 0 [pid 5061] close(4 [pid 8530] <... openat resumed>) = 4 [pid 8526] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] <... close resumed>) = 0 [pid 8530] ioctl(4, LOOP_SET_FD, 3 [pid 8529] mkdir("./file0", 0777 [pid 5061] rmdir("./348/file0" [pid 8526] <... mmap resumed>) = 0x20000000 [pid 8529] <... mkdir resumed>) = 0 [pid 8526] ftruncate(4, 33587195 [pid 5061] <... rmdir resumed>) = 0 [pid 8530] <... ioctl resumed>) = 0 [pid 8529] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8530] close(3 [pid 8526] <... ftruncate resumed>) = 0 [pid 5061] getdents64(3, [pid 8530] <... close resumed>) = 0 [pid 8530] close(4) = 0 [pid 8530] mkdir("./file0", 0777 [pid 8526] unlink("./bus" [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [ 314.892867][ T8530] loop1: detected capacity change from 0 to 4096 [pid 8530] <... mkdir resumed>) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./348" [pid 8530] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] <... rmdir resumed>) = 0 [pid 5061] mkdir("./349", 0777 [pid 8529] <... mount resumed>) = 0 [pid 8526] <... unlink resumed>) = 0 [pid 5065] close(3 [pid 5061] <... mkdir resumed>) = 0 [pid 8526] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... close resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8526] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8529] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8526] exit_group(0 [pid 5061] <... openat resumed>) = 3 [pid 8529] <... openat resumed>) = 3 [pid 8526] <... exit_group resumed>) = ? [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8529] chdir("./file0") = 0 [pid 8529] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8529] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8533 ./strace-static-x86_64: Process 8533 attached [pid 8533] set_robust_list(0x55555745a660, 24) = 0 [pid 8533] chdir("./341") = 0 [pid 8526] +++ exited with 0 +++ [pid 8533] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8526, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 8533] <... prctl resumed>) = 0 [pid 8533] setpgid(0, 0 [pid 5064] umount2("./347", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./347", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8533] <... setpgid resumed>) = 0 [pid 8533] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] <... openat resumed>) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [ 314.938840][ T8532] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] umount2("./347/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8533] <... openat resumed>) = 3 [pid 8533] write(3, "1000", 4 [pid 5064] newfstatat(AT_FDCWD, "./347/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8533] <... write resumed>) = 4 [pid 8533] close(3 [pid 5064] unlink("./347/binderfs" [pid 8533] <... close resumed>) = 0 [pid 8533] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... unlink resumed>) = 0 [pid 8533] <... symlink resumed>) = 0 [pid 8533] memfd_create("syzkaller", 0 [pid 5064] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8533] <... memfd_create resumed>) = 3 [pid 8533] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8529] <... open resumed>) = 4 [pid 8529] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3 [pid 8529] <... open resumed>) = 5 [pid 8529] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 8530] <... mount resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8535 attached [pid 8530] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8535] set_robust_list(0x55555745a660, 24 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8535 [pid 8530] <... openat resumed>) = 3 [pid 8530] chdir("./file0" [pid 8535] <... set_robust_list resumed>) = 0 [pid 8530] <... chdir resumed>) = 0 [pid 8535] chdir("./349" [pid 8530] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8529] ftruncate(4, 33587195 [pid 8530] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8530] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8535] <... chdir resumed>) = 0 [pid 8535] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8535] setpgid(0, 0) = 0 [pid 8535] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 315.026974][ T8534] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8535] write(3, "1000", 4) = 4 [pid 8529] <... ftruncate resumed>) = 0 [pid 8535] close(3 [pid 8533] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8530] <... open resumed>) = 4 [pid 5064] <... umount2 resumed>) = 0 [pid 8535] <... close resumed>) = 0 [pid 8535] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8529] unlink("./bus" [pid 8535] memfd_create("syzkaller", 0 [pid 8530] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 5064] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8535] <... memfd_create resumed>) = 3 [pid 8530] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8529] <... unlink resumed>) = 0 [pid 5064] newfstatat(AT_FDCWD, "./347/file0", [pid 8530] <... mmap resumed>) = 0x20000000 [pid 8535] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8529] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8529] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8535] <... mmap resumed>) = 0x7f41e0600000 [pid 8529] exit_group(0 [pid 5064] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8530] ftruncate(4, 33587195 [pid 8529] <... exit_group resumed>) = ? [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./347/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, [pid 8529] +++ exited with 0 +++ [pid 8530] <... ftruncate resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8529, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5064] getdents64(4, [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] <... restart_syscall resumed>) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./347/file0" [pid 8530] unlink("./bus" [pid 5063] umount2("./343", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] <... rmdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./343", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8530] <... unlink resumed>) = 0 [pid 5064] getdents64(3, [pid 8530] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 5063] newfstatat(3, "", [pid 8530] exit_group(0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8530] <... exit_group resumed>) = ? [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] getdents64(3, [pid 5064] close(3 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] <... close resumed>) = 0 [pid 5064] rmdir("./347" [pid 5063] umount2("./343/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... rmdir resumed>) = 0 [pid 5064] mkdir("./348", 0777 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./343/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 8535] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] unlink("./343/binderfs") = 0 [pid 5063] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 8533] <... write resumed>) = 2097152 [pid 8530] +++ exited with 0 +++ [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8530, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} --- [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./343/file0", [pid 5062] umount2("./342", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./342", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... openat resumed>) = 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(3, "", [pid 5063] openat(AT_FDCWD, "./343/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... openat resumed>) = 4 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] newfstatat(4, "", [pid 5062] umount2("./342/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./342/binderfs", [pid 5063] getdents64(4, [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] unlink("./342/binderfs") = 0 [pid 5063] getdents64(4, [pid 5062] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./343/file0") = 0 [pid 8533] munmap(0x7f41e0600000, 138412032 [pid 5062] <... umount2 resumed>) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] close(3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8533] <... munmap resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 8533] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] newfstatat(AT_FDCWD, "./342/file0", [pid 8533] <... openat resumed>) = 4 [pid 5063] rmdir("./343" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8533] ioctl(4, LOOP_SET_FD, 3 [pid 5062] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./342/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] <... rmdir resumed>) = 0 [pid 8535] <... write resumed>) = 2097152 [pid 8533] <... ioctl resumed>) = 0 [pid 5062] newfstatat(4, "", [pid 8533] close(3 [pid 8535] munmap(0x7f41e0600000, 138412032 [pid 5063] mkdir("./344", 0777 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8533] <... close resumed>) = 0 [pid 8533] close(4 [pid 5062] getdents64(4, [pid 8533] <... close resumed>) = 0 [pid 8533] mkdir("./file0", 0777 [pid 8535] <... munmap resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8533] <... mkdir resumed>) = 0 [pid 8535] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] <... ioctl resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [ 315.178373][ T8533] loop4: detected capacity change from 0 to 4096 [pid 5062] getdents64(4, [pid 8535] <... openat resumed>) = 4 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8535] ioctl(4, LOOP_SET_FD, 3 [pid 5062] close(4 [pid 8533] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] close(3 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./342/file0" [pid 5064] <... close resumed>) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555745a650) = 8536 ./strace-static-x86_64: Process 8536 attached [pid 8535] <... ioctl resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8536] set_robust_list(0x55555745a660, 24 [pid 5062] getdents64(3, [pid 8536] <... set_robust_list resumed>) = 0 [pid 8535] close(3 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8535] <... close resumed>) = 0 [pid 8536] chdir("./348" [pid 8535] close(4 [pid 5062] close(3 [pid 8535] <... close resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 8536] <... chdir resumed>) = 0 [pid 8535] mkdir("./file0", 0777 [pid 5062] rmdir("./342" [pid 8536] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8535] <... mkdir resumed>) = 0 [pid 8536] <... prctl resumed>) = 0 [pid 8535] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] <... rmdir resumed>) = 0 [pid 8536] setpgid(0, 0 [ 315.221406][ T8535] loop0: detected capacity change from 0 to 4096 [pid 5062] mkdir("./343", 0777 [pid 8536] <... setpgid resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8536] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8533] <... mount resumed>) = 0 [pid 8533] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8536] write(3, "1000", 4 [pid 8533] <... openat resumed>) = 3 [pid 8536] <... write resumed>) = 4 [pid 8533] chdir("./file0" [pid 8536] close(3 [pid 8533] <... chdir resumed>) = 0 [pid 8533] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8536] <... close resumed>) = 0 [pid 8535] <... mount resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 8536] symlink("/dev/binderfs", "./binderfs" [pid 8533] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8536] <... symlink resumed>) = 0 [pid 8535] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8536] memfd_create("syzkaller", 0 [pid 8535] chdir("./file0") = 0 [pid 8535] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8536] <... memfd_create resumed>) = 3 [pid 8535] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] close(3 [pid 8536] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8535] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] <... close resumed>) = 0 [pid 8536] <... mmap resumed>) = 0x7f41e0600000 [pid 8533] <... open resumed>) = 4 [pid 8533] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8533] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [ 315.268015][ T8537] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 315.298672][ T8538] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... ioctl resumed>) = 0 [pid 8533] <... ftruncate resumed>) = 0 [pid 8533] unlink("./bus"./strace-static-x86_64: Process 8539 attached [pid 8539] set_robust_list(0x55555745a660, 24 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8539 [pid 8539] <... set_robust_list resumed>) = 0 [pid 8539] chdir("./344" [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8539] <... chdir resumed>) = 0 [pid 8539] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8539] setpgid(0, 0./strace-static-x86_64: Process 8540 attached ) = 0 [pid 8533] <... unlink resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8540 [pid 8533] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8539] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8533] exit_group(0) = ? [pid 8540] set_robust_list(0x55555745a660, 24 [pid 8539] <... openat resumed>) = 3 [pid 8533] +++ exited with 0 +++ [pid 8540] <... set_robust_list resumed>) = 0 [pid 8535] <... open resumed>) = 4 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8533, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=10 /* 0.10 s */} --- [pid 8540] chdir("./343" [pid 8539] write(3, "1000", 4 [pid 8535] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8540] <... chdir resumed>) = 0 [pid 8539] <... write resumed>) = 4 [pid 8535] <... open resumed>) = 5 [pid 8540] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8539] close(3 [pid 5065] umount2("./341", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8540] <... prctl resumed>) = 0 [pid 8539] <... close resumed>) = 0 [pid 8535] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8540] setpgid(0, 0 [pid 8539] symlink("/dev/binderfs", "./binderfs" [pid 8536] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8535] <... mmap resumed>) = 0x20000000 [pid 5065] openat(AT_FDCWD, "./341", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8540] <... setpgid resumed>) = 0 [pid 8539] <... symlink resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 8535] ftruncate(4, 33587195 [pid 5065] newfstatat(3, "", [pid 8540] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8539] memfd_create("syzkaller", 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./341/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8539] <... memfd_create resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8540] <... openat resumed>) = 3 [pid 8539] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] newfstatat(AT_FDCWD, "./341/binderfs", [pid 8540] write(3, "1000", 4 [pid 8539] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8540] <... write resumed>) = 4 [pid 8535] <... ftruncate resumed>) = 0 [pid 5065] unlink("./341/binderfs") = 0 [pid 8535] unlink("./bus" [pid 8540] close(3 [pid 5065] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8540] <... close resumed>) = 0 [pid 8540] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 8540] memfd_create("syzkaller", 0 [pid 5065] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8540] <... memfd_create resumed>) = 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8540] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] newfstatat(AT_FDCWD, "./341/file0", [pid 8540] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8535] <... unlink resumed>) = 0 [pid 8535] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8535] exit_group(0) = ? [pid 5065] umount2("./341/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8539] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8536] <... write resumed>) = 2097152 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./341/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8535] +++ exited with 0 +++ [pid 5065] getdents64(4, [pid 8536] munmap(0x7f41e0600000, 138412032 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8535, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8536] <... munmap resumed>) = 0 [pid 5065] getdents64(4, [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5061] umount2("./349", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] rmdir("./341/file0" [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./349", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] <... rmdir resumed>) = 0 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 5065] getdents64(3, [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8536] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] umount2("./349/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8536] <... openat resumed>) = 4 [pid 5065] close(3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8540] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8536] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... close resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./349/binderfs", [pid 5065] rmdir("./341" [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./349/binderfs") = 0 [pid 5061] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8536] <... ioctl resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 5065] mkdir("./342", 0777 [pid 8539] <... write resumed>) = 2097152 [pid 8536] close(3 [pid 5065] <... mkdir resumed>) = 0 [pid 8540] <... write resumed>) = 2097152 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8540] munmap(0x7f41e0600000, 138412032 [pid 5065] <... openat resumed>) = 3 [pid 8539] munmap(0x7f41e0600000, 138412032 [pid 8536] <... close resumed>) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8536] close(4 [pid 5061] newfstatat(AT_FDCWD, "./349/file0", [pid 8536] <... close resumed>) = 0 [pid 8536] mkdir("./file0", 0777 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8539] <... munmap resumed>) = 0 [pid 8536] <... mkdir resumed>) = 0 [pid 5061] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8540] <... munmap resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8536] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8540] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] openat(AT_FDCWD, "./349/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8540] <... openat resumed>) = 4 [pid 8540] ioctl(4, LOOP_SET_FD, 3 [pid 5061] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", [pid 8539] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8539] <... openat resumed>) = 4 [ 315.473468][ T8536] loop3: detected capacity change from 0 to 4096 [pid 8539] ioctl(4, LOOP_SET_FD, 3 [pid 8540] <... ioctl resumed>) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8540] close(3 [pid 5061] close(4 [pid 8540] <... close resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8540] close(4 [pid 5061] rmdir("./349/file0" [pid 8540] <... close resumed>) = 0 [pid 8540] mkdir("./file0", 0777 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, [pid 8539] <... ioctl resumed>) = 0 [pid 8540] <... mkdir resumed>) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8539] close(3) = 0 [pid 5065] close(3 [pid 8539] close(4 [pid 5065] <... close resumed>) = 0 [pid 8539] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8539] mkdir("./file0", 0777 [pid 8540] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] close(3 [pid 8539] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 8541 attached [pid 5061] <... close resumed>) = 0 [pid 8541] set_robust_list(0x55555745a660, 24 [pid 8539] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8541 [pid 8541] <... set_robust_list resumed>) = 0 [pid 5061] rmdir("./349" [pid 8541] chdir("./342") = 0 [pid 5061] <... rmdir resumed>) = 0 [ 315.518030][ T8540] loop1: detected capacity change from 0 to 4096 [ 315.532469][ T8539] loop2: detected capacity change from 0 to 4096 [pid 5061] mkdir("./350", 0777 [pid 8541] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8541] setpgid(0, 0) = 0 [pid 8541] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8541] write(3, "1000", 4) = 4 [pid 8541] close(3) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 8536] <... mount resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8536] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8541] symlink("/dev/binderfs", "./binderfs" [pid 8536] <... openat resumed>) = 3 [pid 5061] <... openat resumed>) = 3 [pid 8541] <... symlink resumed>) = 0 [pid 8536] chdir("./file0") = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8541] memfd_create("syzkaller", 0 [pid 8536] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8541] <... memfd_create resumed>) = 3 [pid 8536] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8541] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8536] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8541] <... mmap resumed>) = 0x7f41e0600000 [ 315.577962][ T8542] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8540] <... mount resumed>) = 0 [pid 8540] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8540] chdir("./file0") = 0 [pid 8540] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy) [ 315.621904][ T8543] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8540] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8536] <... open resumed>) = 4 [pid 5061] <... ioctl resumed>) = 0 [pid 8539] <... mount resumed>) = 0 [pid 8536] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8539] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8536] <... open resumed>) = 5 [pid 5061] close(3 [pid 8539] <... openat resumed>) = 3 [pid 8536] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] <... close resumed>) = 0 [pid 8536] <... mmap resumed>) = 0x20000000 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8539] chdir("./file0" [pid 8540] <... open resumed>) = 4 [pid 8539] <... chdir resumed>) = 0 [pid 8539] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 8545 attached [pid 8541] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8540] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8536] ftruncate(4, 33587195 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8545 [pid 8545] set_robust_list(0x55555745a660, 24 [pid 8540] <... open resumed>) = 5 [pid 8539] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8545] <... set_robust_list resumed>) = 0 [pid 8545] chdir("./350" [pid 8539] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8545] <... chdir resumed>) = 0 [pid 8545] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8540] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8536] <... ftruncate resumed>) = 0 [pid 8540] <... mmap resumed>) = 0x20000000 [pid 8540] ftruncate(4, 33587195 [pid 8545] <... prctl resumed>) = 0 [ 315.662841][ T8544] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8536] unlink("./bus" [pid 8545] setpgid(0, 0) = 0 [pid 8540] <... ftruncate resumed>) = 0 [pid 8545] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8540] unlink("./bus" [pid 8545] <... openat resumed>) = 3 [pid 8536] <... unlink resumed>) = 0 [pid 8545] write(3, "1000", 4 [pid 8536] sendfile(-1, -1, NULL, 281474978811909 [pid 8545] <... write resumed>) = 4 [pid 8536] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8545] close(3 [pid 8536] exit_group(0 [pid 8545] <... close resumed>) = 0 [pid 8536] <... exit_group resumed>) = ? [pid 8545] symlink("/dev/binderfs", "./binderfs" [pid 8539] <... open resumed>) = 4 [pid 8539] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8545] <... symlink resumed>) = 0 [pid 8539] <... open resumed>) = 5 [pid 8545] memfd_create("syzkaller", 0) = 3 [pid 8539] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8545] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8540] <... unlink resumed>) = 0 [pid 8539] <... mmap resumed>) = 0x20000000 [pid 8536] +++ exited with 0 +++ [pid 8545] <... mmap resumed>) = 0x7f41e0600000 [pid 8540] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8536, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 8540] exit_group(0 [pid 8539] ftruncate(4, 33587195 [pid 8540] <... exit_group resumed>) = ? [pid 5064] umount2("./348", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8539] <... ftruncate resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8539] unlink("./bus" [pid 5064] openat(AT_FDCWD, "./348", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8545] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./348/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./348/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8540] +++ exited with 0 +++ [pid 5064] unlink("./348/binderfs") = 0 [pid 5064] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8540, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 8541] <... write resumed>) = 2097152 [pid 8539] <... unlink resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 8539] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 5062] umount2("./343", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8539] exit_group(0 [pid 8541] munmap(0x7f41e0600000, 138412032 [pid 8539] <... exit_group resumed>) = ? [pid 5064] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./343", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] newfstatat(AT_FDCWD, "./348/file0", [pid 8541] <... munmap resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5064] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./348/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8545] <... write resumed>) = 2097152 [pid 8541] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8539] +++ exited with 0 +++ [pid 5064] newfstatat(4, "", [pid 5062] newfstatat(3, "", [pid 8545] munmap(0x7f41e0600000, 138412032 [pid 8541] <... openat resumed>) = 4 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8539, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8541] ioctl(4, LOOP_SET_FD, 3 [pid 5064] getdents64(4, [pid 5062] getdents64(3, [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] getdents64(4, [pid 5063] umount2("./344", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./343/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./343/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./343/binderfs") = 0 [pid 5062] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8545] <... munmap resumed>) = 0 [pid 8541] <... ioctl resumed>) = 0 [pid 5064] close(4 [pid 5063] openat(AT_FDCWD, "./344", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8545] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8541] close(3 [pid 8545] <... openat resumed>) = 4 [pid 8545] ioctl(4, LOOP_SET_FD, 3 [pid 8541] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5062] <... umount2 resumed>) = 0 [pid 5064] rmdir("./348/file0" [pid 8541] close(4 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] newfstatat(3, "", [pid 5062] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8545] <... ioctl resumed>) = 0 [pid 8541] <... close resumed>) = 0 [pid 8541] mkdir("./file0", 0777 [pid 8545] close(3) = 0 [pid 8545] close(4) = 0 [pid 8545] mkdir("./file0", 0777) = 0 [pid 8541] <... mkdir resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3 [pid 5063] getdents64(3, [pid 5062] newfstatat(AT_FDCWD, "./343/file0", [pid 8541] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] <... close resumed>) = 0 [pid 8545] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] rmdir("./348" [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./344/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... rmdir resumed>) = 0 [pid 5064] mkdir("./349", 0777 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./343/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] <... mkdir resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./344/binderfs", [pid 5062] newfstatat(4, "", [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] unlink("./344/binderfs" [pid 5062] getdents64(4, [pid 5064] <... openat resumed>) = 3 [pid 5063] <... unlink resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [ 315.821578][ T8541] loop4: detected capacity change from 0 to 4096 [ 315.848176][ T8545] loop0: detected capacity change from 0 to 4096 [pid 5062] rmdir("./343/file0") = 0 [pid 5062] getdents64(3, [pid 8545] <... mount resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8545] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] close(3) = 0 [pid 5062] rmdir("./343" [pid 8545] <... openat resumed>) = 3 [pid 5062] <... rmdir resumed>) = 0 [pid 8545] chdir("./file0" [pid 5062] mkdir("./344", 0777 [pid 8545] <... chdir resumed>) = 0 [pid 8545] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... umount2 resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 8545] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8541] <... mount resumed>) = 0 [pid 8545] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8541] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... openat resumed>) = 3 [pid 8541] <... openat resumed>) = 3 [pid 8541] chdir("./file0") = 0 [pid 5063] newfstatat(AT_FDCWD, "./344/file0", [pid 8541] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8541] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./344/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8541] <... open resumed>) = 4 [pid 8541] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8541] <... open resumed>) = 5 [pid 8545] <... open resumed>) = 4 [pid 5064] <... ioctl resumed>) = 0 [pid 5063] getdents64(4, [pid 8541] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8545] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4 [pid 8545] <... open resumed>) = 5 [pid 5063] <... close resumed>) = 0 [ 315.900475][ T8546] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 315.924428][ T8547] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] rmdir("./344/file0" [pid 8541] <... mmap resumed>) = 0x20000000 [pid 8545] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8541] ftruncate(4, 33587195 [pid 5064] close(3 [pid 5063] <... rmdir resumed>) = 0 [pid 8541] <... ftruncate resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 8541] unlink("./bus" [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8545] <... mmap resumed>) = 0x20000000 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8548 ./strace-static-x86_64: Process 8548 attached [pid 8548] set_robust_list(0x55555745a660, 24) = 0 [pid 8548] chdir("./349" [pid 8545] ftruncate(4, 33587195 [pid 5063] getdents64(3, [pid 8548] <... chdir resumed>) = 0 [pid 8548] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8541] <... unlink resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8548] <... prctl resumed>) = 0 [pid 8541] sendfile(-1, -1, NULL, 281474978811909 [pid 8548] setpgid(0, 0 [pid 8541] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8541] exit_group(0 [pid 8548] <... setpgid resumed>) = 0 [pid 8548] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8541] <... exit_group resumed>) = ? [pid 8548] <... openat resumed>) = 3 [pid 8548] write(3, "1000", 4) = 4 [pid 8548] close(3) = 0 [pid 8548] symlink("/dev/binderfs", "./binderfs" [pid 5063] close(3 [pid 8548] <... symlink resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 8548] memfd_create("syzkaller", 0 [pid 5063] rmdir("./344" [pid 8548] <... memfd_create resumed>) = 3 [pid 8548] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8545] <... ftruncate resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8541] +++ exited with 0 +++ [pid 5063] mkdir("./345", 0777 [pid 8545] unlink("./bus" [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8541, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5063] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5065] umount2("./342", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./342", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./342/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./342/binderfs", [pid 5062] <... ioctl resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./342/binderfs") = 0 [pid 8545] <... unlink resumed>) = 0 [pid 8545] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8545] exit_group(0 [pid 8548] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8545] <... exit_group resumed>) = ? [pid 5065] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8549 attached [pid 8549] set_robust_list(0x55555745a660, 24) = 0 [pid 8545] +++ exited with 0 +++ [pid 8549] chdir("./344" [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8545, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8549] <... chdir resumed>) = 0 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8549 [pid 8549] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8549] setpgid(0, 0) = 0 [pid 8549] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8549] write(3, "1000", 4) = 4 [pid 8549] close(3) = 0 [pid 8549] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8549] memfd_create("syzkaller", 0 [pid 5061] umount2("./350", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8549] <... memfd_create resumed>) = 3 [pid 8549] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5061] openat(AT_FDCWD, "./350", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... umount2 resumed>) = 0 [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", [pid 5065] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... ioctl resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] newfstatat(AT_FDCWD, "./342/file0", [pid 5061] umount2("./350/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] umount2("./342/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./350/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] openat(AT_FDCWD, "./342/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] unlink("./350/binderfs" [pid 5065] newfstatat(4, "", [pid 5061] <... unlink resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./342/file0") = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./342") = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8548] <... write resumed>) = 2097152 ./strace-static-x86_64: Process 8550 attached [pid 8549] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] mkdir("./343", 0777 [pid 5061] <... umount2 resumed>) = 0 [pid 8548] munmap(0x7f41e0600000, 138412032 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8550 [pid 5061] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8550] set_robust_list(0x55555745a660, 24) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8550] chdir("./345") = 0 [pid 8548] <... munmap resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] newfstatat(AT_FDCWD, "./350/file0", [pid 8550] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8548] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8550] <... prctl resumed>) = 0 [pid 8548] <... openat resumed>) = 4 [pid 5065] <... openat resumed>) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8550] setpgid(0, 0 [pid 8548] ioctl(4, LOOP_SET_FD, 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5061] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8550] <... setpgid resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./350/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8550] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 8550] <... openat resumed>) = 3 [pid 8548] <... ioctl resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8550] write(3, "1000", 4 [pid 8548] close(3 [pid 5061] rmdir("./350/file0" [pid 8550] <... write resumed>) = 4 [pid 8548] <... close resumed>) = 0 [pid 8550] close(3 [pid 8548] close(4 [pid 5061] <... rmdir resumed>) = 0 [pid 8550] <... close resumed>) = 0 [pid 8548] <... close resumed>) = 0 [pid 8550] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5061] getdents64(3, [pid 8550] memfd_create("syzkaller", 0 [pid 8548] mkdir("./file0", 0777 [pid 8550] <... memfd_create resumed>) = 3 [pid 8549] <... write resumed>) = 2097152 [pid 8548] <... mkdir resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8550] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8549] munmap(0x7f41e0600000, 138412032 [pid 5061] close(3 [pid 8550] <... mmap resumed>) = 0x7f41e0600000 [pid 5061] <... close resumed>) = 0 [pid 8549] <... munmap resumed>) = 0 [pid 8548] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] rmdir("./350") = 0 [pid 8549] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] mkdir("./351", 0777) = 0 [pid 8549] <... openat resumed>) = 4 [ 316.156489][ T8548] loop3: detected capacity change from 0 to 4096 [pid 8549] ioctl(4, LOOP_SET_FD, 3 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8549] <... ioctl resumed>) = 0 [pid 8549] close(3) = 0 [pid 8549] close(4) = 0 [pid 8549] mkdir("./file0", 0777) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 8548] <... mount resumed>) = 0 [pid 8550] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8549] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8548] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8548] <... openat resumed>) = 3 [pid 8548] chdir("./file0" [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8552 [pid 8548] <... chdir resumed>) = 0 [pid 8548] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 8552 attached ) = -1 EBUSY (Device or resource busy) [ 316.212179][ T8549] loop1: detected capacity change from 0 to 4096 [ 316.234256][ T8551] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8548] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8552] set_robust_list(0x55555745a660, 24 [pid 5061] <... ioctl resumed>) = 0 [pid 8552] <... set_robust_list resumed>) = 0 [pid 8548] <... open resumed>) = 4 [pid 8552] chdir("./343" [pid 8548] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8548] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] close(3 [pid 8548] <... ftruncate resumed>) = 0 [pid 8549] <... mount resumed>) = 0 [pid 8549] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8548] unlink("./bus" [pid 8549] <... openat resumed>) = 3 [pid 5061] <... close resumed>) = 0 [pid 8552] <... chdir resumed>) = 0 [pid 8549] chdir("./file0" [pid 8548] <... unlink resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8548] sendfile(-1, -1, NULL, 281474978811909 [pid 8552] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8550] <... write resumed>) = 2097152 [pid 8549] <... chdir resumed>) = 0 [pid 8548] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8552] <... prctl resumed>) = 0 [pid 8549] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8548] exit_group(0) = ? [pid 8552] setpgid(0, 0 [pid 8549] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8552] <... setpgid resumed>) = 0 [pid 8550] munmap(0x7f41e0600000, 138412032 [pid 8549] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8554 [pid 8550] <... munmap resumed>) = 0 [pid 8548] +++ exited with 0 +++ [pid 8552] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8548, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- ./strace-static-x86_64: Process 8554 attached [pid 8554] set_robust_list(0x55555745a660, 24 [pid 8552] <... openat resumed>) = 3 [pid 8550] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5064] umount2("./349", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8554] <... set_robust_list resumed>) = 0 [pid 8552] write(3, "1000", 4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8552] <... write resumed>) = 4 [pid 5064] openat(AT_FDCWD, "./349", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8552] close(3 [pid 8554] chdir("./351" [pid 8550] <... openat resumed>) = 4 [pid 8552] <... close resumed>) = 0 [ 316.311154][ T8553] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8550] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... openat resumed>) = 3 [pid 8554] <... chdir resumed>) = 0 [pid 8552] symlink("/dev/binderfs", "./binderfs" [pid 8550] <... ioctl resumed>) = 0 [pid 5064] newfstatat(3, "", [pid 8554] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8552] <... symlink resumed>) = 0 [pid 5064] getdents64(3, [pid 8554] <... prctl resumed>) = 0 [pid 8552] memfd_create("syzkaller", 0 [pid 8549] <... open resumed>) = 4 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8549] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8554] setpgid(0, 0 [pid 5064] umount2("./349/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8554] <... setpgid resumed>) = 0 [pid 8554] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8549] <... open resumed>) = 5 [pid 5064] newfstatat(AT_FDCWD, "./349/binderfs", [pid 8549] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8554] <... openat resumed>) = 3 [pid 8552] <... memfd_create resumed>) = 3 [pid 8549] <... mmap resumed>) = 0x20000000 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./349/binderfs" [pid 8549] ftruncate(4, 33587195 [pid 8554] write(3, "1000", 4 [pid 8552] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8550] close(3 [pid 8549] <... ftruncate resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 8554] <... write resumed>) = 4 [pid 8552] <... mmap resumed>) = 0x7f41e0600000 [pid 5064] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8554] close(3 [pid 8550] <... close resumed>) = 0 [pid 8549] unlink("./bus" [pid 8554] <... close resumed>) = 0 [pid 8554] symlink("/dev/binderfs", "./binderfs" [pid 8550] close(4) = 0 [pid 8550] mkdir("./file0", 0777 [pid 8554] <... symlink resumed>) = 0 [pid 8550] <... mkdir resumed>) = 0 [pid 8554] memfd_create("syzkaller", 0 [pid 8550] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8549] <... unlink resumed>) = 0 [pid 8549] sendfile(-1, -1, NULL, 281474978811909 [pid 8554] <... memfd_create resumed>) = 3 [pid 8549] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8554] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8549] exit_group(0 [pid 8554] <... mmap resumed>) = 0x7f41e0600000 [pid 8549] <... exit_group resumed>) = ? [pid 8549] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8549, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [ 316.361073][ T8550] loop2: detected capacity change from 0 to 4096 [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 5062] umount2("./344", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./349/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./349/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./349/file0") = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./349") = 0 [pid 5064] mkdir("./350", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8550] <... mount resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./344", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8550] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] <... openat resumed>) = 3 [pid 8550] chdir("./file0" [pid 5062] newfstatat(3, "", [pid 8550] <... chdir resumed>) = 0 [pid 8550] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8550] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8550] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5062] getdents64(3, [pid 8552] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8550] <... open resumed>) = 4 [pid 8550] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] umount2("./344/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8550] <... open resumed>) = 5 [pid 8550] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] newfstatat(AT_FDCWD, "./344/binderfs", [pid 8554] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8550] <... mmap resumed>) = 0x20000000 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./344/binderfs" [pid 8550] ftruncate(4, 33587195 [pid 5062] <... unlink resumed>) = 0 [pid 5062] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8550] <... ftruncate resumed>) = 0 [ 316.427517][ T8555] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8550] unlink("./bus") = 0 [pid 8550] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8550] exit_group(0) = ? [pid 8550] +++ exited with 0 +++ [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8550, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 8552] <... write resumed>) = 2097152 [pid 5064] <... ioctl resumed>) = 0 [pid 5063] umount2("./345", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = 0 [pid 8552] munmap(0x7f41e0600000, 138412032 [pid 5064] close(3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./345", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 3 [pid 5062] newfstatat(AT_FDCWD, "./344/file0", [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] getdents64(3, [pid 5062] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8554] <... write resumed>) = 2097152 [pid 8552] <... munmap resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8554] munmap(0x7f41e0600000, 138412032 [pid 8552] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./345/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8556 attached ) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./344/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8556] set_robust_list(0x55555745a660, 24) = 0 [pid 5063] newfstatat(AT_FDCWD, "./345/binderfs", [pid 5062] <... openat resumed>) = 4 [pid 8556] chdir("./350" [pid 8552] <... openat resumed>) = 4 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8556 [pid 5062] newfstatat(4, "", [pid 8556] <... chdir resumed>) = 0 [pid 8554] <... munmap resumed>) = 0 [pid 8552] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8556] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8556] <... prctl resumed>) = 0 [pid 5063] unlink("./345/binderfs" [pid 8556] setpgid(0, 0) = 0 [pid 8556] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8556] write(3, "1000", 4) = 4 [pid 8556] close(3 [pid 8554] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8552] <... ioctl resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5062] getdents64(4, [pid 8552] close(3 [pid 8556] <... close resumed>) = 0 [pid 8554] <... openat resumed>) = 4 [pid 8552] <... close resumed>) = 0 [pid 5063] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8556] symlink("/dev/binderfs", "./binderfs" [pid 8554] ioctl(4, LOOP_SET_FD, 3 [pid 8552] close(4 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8552] <... close resumed>) = 0 [pid 8552] mkdir("./file0", 0777) = 0 [pid 8556] <... symlink resumed>) = 0 [pid 8554] <... ioctl resumed>) = 0 [pid 5062] close(4 [pid 8556] memfd_create("syzkaller", 0 [pid 5062] <... close resumed>) = 0 [pid 8556] <... memfd_create resumed>) = 3 [pid 8554] close(3 [pid 8552] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] rmdir("./344/file0") = 0 [pid 8556] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8554] <... close resumed>) = 0 [pid 5062] getdents64(3, [pid 8554] close(4 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8554] <... close resumed>) = 0 [pid 8556] <... mmap resumed>) = 0x7f41e0600000 [pid 8554] mkdir("./file0", 0777 [pid 5063] <... umount2 resumed>) = 0 [pid 5062] close(3) = 0 [ 316.546440][ T8552] loop4: detected capacity change from 0 to 4096 [ 316.564056][ T8554] loop0: detected capacity change from 0 to 4096 [pid 5062] rmdir("./344" [pid 5063] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8554] <... mkdir resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8552] <... mount resumed>) = 0 [pid 8552] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8552] chdir("./file0") = 0 [pid 8552] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8552] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] newfstatat(AT_FDCWD, "./345/file0", [pid 5062] mkdir("./345", 0777 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8554] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... mkdir resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8552] <... open resumed>) = 4 [pid 5063] openat(AT_FDCWD, "./345/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8552] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] <... openat resumed>) = 3 [pid 8552] <... open resumed>) = 5 [pid 5063] <... openat resumed>) = 4 [pid 8552] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] newfstatat(4, "", [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8552] <... mmap resumed>) = 0x20000000 [pid 5063] getdents64(4, [pid 8552] ftruncate(4, 33587195 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./345/file0") = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 8552] <... ftruncate resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 8552] unlink("./bus" [pid 5063] rmdir("./345") = 0 [pid 5063] mkdir("./346", 0777) = 0 [pid 8552] <... unlink resumed>) = 0 [pid 8552] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8552] exit_group(0) = ? [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [ 316.589861][ T8557] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8552] +++ exited with 0 +++ [pid 8556] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8554] <... mount resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8552, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=6 /* 0.06 s */} --- [pid 5062] <... ioctl resumed>) = 0 [pid 8554] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8554] chdir("./file0" [pid 5065] umount2("./343", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] close(3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... close resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./343", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8554] <... chdir resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] <... openat resumed>) = 3 [pid 5065] newfstatat(3, "", [pid 8554] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(3, [pid 8554] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 8559 attached [pid 8554] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] umount2("./343/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8559 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./343/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8559] set_robust_list(0x55555745a660, 24) = 0 [pid 8559] chdir("./345") = 0 [pid 5065] unlink("./343/binderfs" [pid 8559] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8559] setpgid(0, 0) = 0 [pid 8559] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] <... unlink resumed>) = 0 [pid 8559] <... openat resumed>) = 3 [ 316.678317][ T8558] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8556] <... write resumed>) = 2097152 [pid 8559] write(3, "1000", 4 [pid 8554] <... open resumed>) = 4 [pid 8556] munmap(0x7f41e0600000, 138412032 [pid 8559] <... write resumed>) = 4 [pid 8554] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8559] close(3 [pid 5063] <... ioctl resumed>) = 0 [pid 8559] <... close resumed>) = 0 [pid 5063] close(3 [pid 8559] symlink("/dev/binderfs", "./binderfs" [pid 5063] <... close resumed>) = 0 [pid 8559] <... symlink resumed>) = 0 [pid 8556] <... munmap resumed>) = 0 [pid 8554] <... open resumed>) = 5 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8559] memfd_create("syzkaller", 0 [pid 8556] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8554] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] <... umount2 resumed>) = 0 [pid 8559] <... memfd_create resumed>) = 3 [pid 8556] <... openat resumed>) = 4 ./strace-static-x86_64: Process 8560 attached [pid 8556] ioctl(4, LOOP_SET_FD, 3 [pid 8560] set_robust_list(0x55555745a660, 24 [pid 8559] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8554] <... mmap resumed>) = 0x20000000 [pid 5065] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8560 [pid 8559] <... mmap resumed>) = 0x7f41e0600000 [pid 8560] <... set_robust_list resumed>) = 0 [pid 8556] <... ioctl resumed>) = 0 [pid 8554] ftruncate(4, 33587195 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8560] chdir("./346" [pid 5065] newfstatat(AT_FDCWD, "./343/file0", [pid 8560] <... chdir resumed>) = 0 [pid 8556] close(3 [pid 8554] <... ftruncate resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8560] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] umount2("./343/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8560] <... prctl resumed>) = 0 [pid 8556] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8560] setpgid(0, 0 [pid 8556] close(4 [pid 5065] openat(AT_FDCWD, "./343/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8560] <... setpgid resumed>) = 0 [pid 5065] <... openat resumed>) = 4 [pid 5065] newfstatat(4, "", [pid 8560] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8559] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8556] <... close resumed>) = 0 [pid 8554] unlink("./bus" [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8560] write(3, "1000", 4 [ 316.770065][ T8556] loop3: detected capacity change from 0 to 4096 [pid 8556] mkdir("./file0", 0777) = 0 [pid 8560] <... write resumed>) = 4 [pid 8554] <... unlink resumed>) = 0 [pid 5065] getdents64(4, [pid 8560] close(3 [pid 8554] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8560] <... close resumed>) = 0 [pid 8554] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8560] symlink("/dev/binderfs", "./binderfs" [pid 8554] exit_group(0 [pid 5065] close(4) = 0 [pid 8560] <... symlink resumed>) = 0 [pid 8556] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8554] <... exit_group resumed>) = ? [pid 5065] rmdir("./343/file0" [pid 8560] memfd_create("syzkaller", 0) = 3 [pid 5065] <... rmdir resumed>) = 0 [pid 8560] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5065] getdents64(3, [pid 8560] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8559] <... write resumed>) = 2097152 [pid 8556] <... mount resumed>) = 0 [pid 8554] +++ exited with 0 +++ [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8556] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8559] munmap(0x7f41e0600000, 138412032 [pid 8556] <... openat resumed>) = 3 [pid 5065] close(3 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8554, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 8559] <... munmap resumed>) = 0 [pid 8556] chdir("./file0" [pid 5065] <... close resumed>) = 0 [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 8556] <... chdir resumed>) = 0 [pid 5065] rmdir("./343" [pid 5061] <... restart_syscall resumed>) = 0 [pid 8556] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8556] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] <... rmdir resumed>) = 0 [pid 5061] umount2("./351", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8559] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./351", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8559] <... openat resumed>) = 4 [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", [pid 8559] ioctl(4, LOOP_SET_FD, 3 [pid 5065] mkdir("./344", 0777 [pid 8556] <... open resumed>) = 4 [pid 5065] <... mkdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8556] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] getdents64(3, [pid 8556] <... open resumed>) = 5 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] umount2("./351/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... openat resumed>) = 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5061] newfstatat(AT_FDCWD, "./351/binderfs", [pid 8556] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./351/binderfs" [pid 8556] <... mmap resumed>) = 0x20000000 [pid 5061] <... unlink resumed>) = 0 [pid 5061] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8556] ftruncate(4, 33587195 [pid 8559] <... ioctl resumed>) = 0 [pid 8559] close(3 [pid 8556] <... ftruncate resumed>) = 0 [pid 8560] <... write resumed>) = 2097152 [pid 8559] <... close resumed>) = 0 [pid 8556] unlink("./bus" [pid 8560] munmap(0x7f41e0600000, 138412032 [pid 8559] close(4) = 0 [pid 8559] mkdir("./file0", 0777) = 0 [pid 8560] <... munmap resumed>) = 0 [pid 8556] <... unlink resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 8560] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8559] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8556] sendfile(-1, -1, NULL, 281474978811909 [pid 8560] <... openat resumed>) = 4 [pid 8556] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5061] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8556] exit_group(0 [ 316.864992][ T8561] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 316.893814][ T8559] loop1: detected capacity change from 0 to 4096 [pid 8560] ioctl(4, LOOP_SET_FD, 3 [pid 8556] <... exit_group resumed>) = ? [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./351/file0", [pid 8560] <... ioctl resumed>) = 0 [pid 8556] +++ exited with 0 +++ [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./351/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8556, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} --- [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, [pid 8560] close(3 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8560] <... close resumed>) = 0 [pid 5061] getdents64(4, [pid 8560] close(4 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8560] <... close resumed>) = 0 [pid 8560] mkdir("./file0", 0777 [pid 5061] close(4 [pid 8560] <... mkdir resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5064] umount2("./350", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] rmdir("./351/file0" [pid 8560] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] openat(AT_FDCWD, "./350", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... rmdir resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5061] getdents64(3, [pid 5064] newfstatat(3, "", [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] close(3 [pid 5064] getdents64(3, [pid 5061] <... close resumed>) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] rmdir("./351" [pid 5064] umount2("./350/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./350/binderfs", [pid 5061] <... rmdir resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./350/binderfs" [pid 5061] mkdir("./352", 0777 [pid 5064] <... unlink resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 5064] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5065] <... ioctl resumed>) = 0 [ 316.939077][ T8560] loop2: detected capacity change from 0 to 4096 [pid 5065] close(3 [pid 8559] <... mount resumed>) = 0 [pid 8559] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... close resumed>) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8564 attached [pid 8560] <... mount resumed>) = 0 [pid 8559] <... openat resumed>) = 3 [pid 5064] <... umount2 resumed>) = 0 [pid 8560] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8559] chdir("./file0" [pid 5064] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8564] set_robust_list(0x55555745a660, 24 [pid 8560] <... openat resumed>) = 3 [pid 8559] <... chdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8564] <... set_robust_list resumed>) = 0 [pid 8560] chdir("./file0" [pid 8559] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8564 [pid 5064] newfstatat(AT_FDCWD, "./350/file0", [pid 8564] chdir("./344") = 0 [pid 8564] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8560] <... chdir resumed>) = 0 [pid 8559] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8564] <... prctl resumed>) = 0 [pid 8560] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8559] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8564] setpgid(0, 0 [pid 8560] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8564] <... setpgid resumed>) = 0 [pid 8564] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8560] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8564] <... openat resumed>) = 3 [pid 5064] openat(AT_FDCWD, "./350/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8564] write(3, "1000", 4 [pid 5064] <... openat resumed>) = 4 [pid 8564] <... write resumed>) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 316.998999][ T8562] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 317.011885][ T8563] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8564] close(3 [pid 5064] getdents64(4, [pid 8564] <... close resumed>) = 0 [pid 8560] <... open resumed>) = 4 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8564] symlink("/dev/binderfs", "./binderfs" [pid 5064] getdents64(4, [pid 8564] <... symlink resumed>) = 0 [pid 8560] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8559] <... open resumed>) = 4 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8564] memfd_create("syzkaller", 0 [pid 8560] <... open resumed>) = 5 [pid 8559] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] close(4 [pid 5061] <... ioctl resumed>) = 0 [pid 8564] <... memfd_create resumed>) = 3 [pid 8560] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... close resumed>) = 0 [pid 8564] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8559] <... open resumed>) = 5 [pid 5064] rmdir("./350/file0" [pid 5061] close(3 [pid 8564] <... mmap resumed>) = 0x7f41e0600000 [pid 8560] <... mmap resumed>) = 0x20000000 [pid 5064] <... rmdir resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 8560] ftruncate(4, 33587195 [pid 8559] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] getdents64(3, [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8559] <... mmap resumed>) = 0x20000000 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 ./strace-static-x86_64: Process 8565 attached [pid 5064] rmdir("./350" [pid 8565] set_robust_list(0x55555745a660, 24 [pid 5064] <... rmdir resumed>) = 0 [pid 8565] <... set_robust_list resumed>) = 0 [pid 8559] ftruncate(4, 33587195 [pid 8565] chdir("./352" [pid 8560] <... ftruncate resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8565 [pid 8565] <... chdir resumed>) = 0 [pid 5064] mkdir("./351", 0777 [pid 8565] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8559] <... ftruncate resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 8565] <... prctl resumed>) = 0 [pid 8559] unlink("./bus" [pid 8565] setpgid(0, 0) = 0 [pid 8565] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8565] write(3, "1000", 4) = 4 [pid 8565] close(3) = 0 [pid 8565] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8559] <... unlink resumed>) = 0 [pid 8560] unlink("./bus" [pid 8559] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8559] exit_group(0) = ? [pid 8565] memfd_create("syzkaller", 0 [pid 8560] <... unlink resumed>) = 0 [pid 8560] sendfile(-1, -1, NULL, 281474978811909 [pid 8565] <... memfd_create resumed>) = 3 [pid 8565] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8560] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8565] <... mmap resumed>) = 0x7f41e0600000 [pid 8560] exit_group(0) = ? [pid 8559] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8559, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...> [pid 8564] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] <... restart_syscall resumed>) = 0 [pid 5062] umount2("./345", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./345", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./345/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8560] +++ exited with 0 +++ [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8560, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5062] newfstatat(AT_FDCWD, "./345/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./345/binderfs" [pid 5063] umount2("./346", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... unlink resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] openat(AT_FDCWD, "./346", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./346/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./346/binderfs", [pid 5062] <... umount2 resumed>) = 0 [pid 8565] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... ioctl resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] unlink("./346/binderfs" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./345/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8564] <... write resumed>) = 2097152 [pid 5063] <... unlink resumed>) = 0 [pid 5062] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./345/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", [pid 5064] close(3 [pid 8564] munmap(0x7f41e0600000, 138412032 [pid 5064] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] getdents64(4, [pid 8564] <... munmap resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8566 [pid 5062] close(4) = 0 [pid 5062] rmdir("./345/file0") = 0 ./strace-static-x86_64: Process 8566 attached [pid 8566] set_robust_list(0x55555745a660, 24) = 0 [pid 8566] chdir("./351" [pid 5062] getdents64(3, [pid 8564] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8566] <... chdir resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8566] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5062] close(3 [pid 8566] setpgid(0, 0 [pid 8564] <... openat resumed>) = 4 [pid 5062] <... close resumed>) = 0 [pid 8566] <... setpgid resumed>) = 0 [pid 8564] ioctl(4, LOOP_SET_FD, 3 [pid 5062] rmdir("./345" [pid 8564] <... ioctl resumed>) = 0 [pid 8566] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8566] write(3, "1000", 4) = 4 [pid 8566] close(3) = 0 [pid 8566] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8566] memfd_create("syzkaller", 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5062] mkdir("./346", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8566] <... memfd_create resumed>) = 3 [pid 8566] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] <... umount2 resumed>) = 0 [pid 8566] <... mmap resumed>) = 0x7f41e0600000 [pid 8564] close(3 [pid 5063] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8564] <... close resumed>) = 0 [pid 8564] close(4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8564] <... close resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./346/file0", [pid 8564] mkdir("./file0", 0777 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8564] <... mkdir resumed>) = 0 [pid 5063] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8564] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8565] <... write resumed>) = 2097152 [pid 5063] openat(AT_FDCWD, "./346/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./346/file0") = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [ 317.211388][ T8564] loop4: detected capacity change from 0 to 4096 [pid 8565] munmap(0x7f41e0600000, 138412032) = 0 [pid 8565] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] rmdir("./346" [pid 8565] <... openat resumed>) = 4 [pid 8565] ioctl(4, LOOP_SET_FD, 3 [pid 8566] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... rmdir resumed>) = 0 [pid 8564] <... mount resumed>) = 0 [pid 5063] mkdir("./347", 0777 [pid 8564] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5063] <... mkdir resumed>) = 0 [pid 8564] chdir("./file0") = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8564] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5063] <... openat resumed>) = 3 [pid 8564] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8565] <... ioctl resumed>) = 0 [pid 8565] close(3 [pid 8564] <... open resumed>) = 4 [pid 8565] <... close resumed>) = 0 [pid 8564] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] <... ioctl resumed>) = 0 [pid 8565] close(4) = 0 [pid 8565] mkdir("./file0", 0777 [pid 8564] <... open resumed>) = 5 [pid 8565] <... mkdir resumed>) = 0 [pid 8565] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] close(3 [pid 8564] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] <... close resumed>) = 0 [ 317.264853][ T8567] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 317.285352][ T8565] loop0: detected capacity change from 0 to 4096 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8564] <... mmap resumed>) = 0x20000000 [pid 8564] ftruncate(4, 33587195 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8568 ./strace-static-x86_64: Process 8568 attached [pid 8568] set_robust_list(0x55555745a660, 24) = 0 [pid 8568] chdir("./346") = 0 [pid 8568] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8568] setpgid(0, 0) = 0 [pid 8568] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8568] write(3, "1000", 4) = 4 [pid 8568] close(3) = 0 [pid 8568] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8564] <... ftruncate resumed>) = 0 [pid 8568] memfd_create("syzkaller", 0 [pid 8564] unlink("./bus" [pid 8568] <... memfd_create resumed>) = 3 [pid 8568] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8565] <... mount resumed>) = 0 [pid 8565] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8565] chdir("./file0") = 0 [pid 8565] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8564] <... unlink resumed>) = 0 [pid 8565] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8565] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8564] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8564] exit_group(0) = ? [pid 5063] <... ioctl resumed>) = 0 [pid 8566] <... write resumed>) = 2097152 [pid 5063] close(3 [pid 8564] +++ exited with 0 +++ [pid 5063] <... close resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8564, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 8566] munmap(0x7f41e0600000, 138412032) = 0 [pid 5065] umount2("./344", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./344", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 8570 attached ) = 3 [pid 8570] set_robust_list(0x55555745a660, 24 [pid 5065] newfstatat(3, "", [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8570 [pid 8570] <... set_robust_list resumed>) = 0 [ 317.373303][ T8569] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8566] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8566] <... openat resumed>) = 4 [pid 8566] ioctl(4, LOOP_SET_FD, 3 [pid 5065] getdents64(3, [pid 8570] chdir("./347" [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./344/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./344/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./344/binderfs") = 0 [pid 5065] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8570] <... chdir resumed>) = 0 [pid 8565] <... open resumed>) = 4 [pid 8570] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8570] setpgid(0, 0 [pid 8565] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8570] <... setpgid resumed>) = 0 [pid 8570] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8565] <... open resumed>) = 5 [pid 8570] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = 0 [pid 8565] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8570] write(3, "1000", 4 [pid 8565] <... mmap resumed>) = 0x20000000 [pid 8570] <... write resumed>) = 4 [pid 8570] close(3) = 0 [pid 8566] <... ioctl resumed>) = 0 [pid 8570] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8566] close(3) = 0 [pid 8568] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8566] close(4) = 0 [pid 8570] memfd_create("syzkaller", 0 [pid 8566] mkdir("./file0", 0777) = 0 [pid 8565] ftruncate(4, 33587195 [pid 8566] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8565] <... ftruncate resumed>) = 0 [pid 8570] <... memfd_create resumed>) = 3 [pid 5065] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8570] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8565] unlink("./bus" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8570] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] newfstatat(AT_FDCWD, "./344/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./344/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./344/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8565] <... unlink resumed>) = 0 [pid 8565] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... openat resumed>) = 4 [pid 8565] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [ 317.432241][ T8566] loop3: detected capacity change from 0 to 4096 [pid 5065] newfstatat(4, "", [pid 8565] exit_group(0) = ? [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./344/file0") = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./344" [pid 8565] +++ exited with 0 +++ [pid 5065] <... rmdir resumed>) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8565, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5065] mkdir("./345", 0777 [pid 5061] umount2("./352", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... mkdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./352", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./352/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] newfstatat(AT_FDCWD, "./352/binderfs", [pid 5065] <... openat resumed>) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5061] unlink("./352/binderfs") = 0 [pid 5061] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8570] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8566] <... mount resumed>) = 0 [pid 8566] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8566] chdir("./file0" [pid 8568] <... write resumed>) = 2097152 [pid 8566] <... chdir resumed>) = 0 [pid 8568] munmap(0x7f41e0600000, 138412032 [pid 8566] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... umount2 resumed>) = 0 [pid 8566] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8566] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8568] <... munmap resumed>) = 0 [pid 5061] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8570] <... write resumed>) = 2097152 [pid 8568] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8568] <... openat resumed>) = 4 [ 317.509205][ T8571] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8570] munmap(0x7f41e0600000, 138412032 [pid 8568] ioctl(4, LOOP_SET_FD, 3 [pid 5061] newfstatat(AT_FDCWD, "./352/file0", [pid 8570] <... munmap resumed>) = 0 [pid 8566] <... open resumed>) = 4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8570] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 8570] ioctl(4, LOOP_SET_FD, 3 [pid 8566] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8568] <... ioctl resumed>) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 8570] <... ioctl resumed>) = 0 [pid 8568] close(3 [pid 8566] <... open resumed>) = 5 [pid 5065] close(3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8570] close(3 [pid 8568] <... close resumed>) = 0 [pid 8566] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5065] <... close resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./352/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8570] <... close resumed>) = 0 [pid 8570] close(4) = 0 [pid 8566] <... mmap resumed>) = 0x20000000 [pid 8570] mkdir("./file0", 0777 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... openat resumed>) = 4 [pid 8568] close(4 [pid 8566] ftruncate(4, 33587195 [pid 5061] newfstatat(4, "", [pid 8570] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 8572 attached [pid 8568] <... close resumed>) = 0 [pid 8566] <... ftruncate resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8570] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8566] unlink("./bus" [pid 5061] getdents64(4, [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8572 [pid 8568] mkdir("./file0", 0777 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [ 317.579689][ T8568] loop1: detected capacity change from 0 to 4096 [ 317.595021][ T8570] loop2: detected capacity change from 0 to 4096 [pid 8572] set_robust_list(0x55555745a660, 24 [pid 8568] <... mkdir resumed>) = 0 [pid 5061] rmdir("./352/file0" [pid 8572] <... set_robust_list resumed>) = 0 [pid 8568] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8566] <... unlink resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8566] sendfile(-1, -1, NULL, 281474978811909 [pid 5061] getdents64(3, [pid 8572] chdir("./345" [pid 8566] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./352" [pid 8566] exit_group(0 [pid 8572] <... chdir resumed>) = 0 [pid 8566] <... exit_group resumed>) = ? [pid 5061] <... rmdir resumed>) = 0 [pid 8572] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8572] setpgid(0, 0 [pid 8570] <... mount resumed>) = 0 [pid 8572] <... setpgid resumed>) = 0 [pid 8572] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5061] mkdir("./353", 0777 [pid 8572] <... openat resumed>) = 3 [pid 8570] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8572] write(3, "1000", 4 [pid 8570] <... openat resumed>) = 3 [pid 5061] <... mkdir resumed>) = 0 [pid 8572] <... write resumed>) = 4 [pid 8570] chdir("./file0" [pid 8572] close(3 [pid 8570] <... chdir resumed>) = 0 [pid 8572] <... close resumed>) = 0 [pid 8570] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8566] +++ exited with 0 +++ [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8572] symlink("/dev/binderfs", "./binderfs" [pid 8570] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8566, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5061] <... openat resumed>) = 3 [pid 8572] <... symlink resumed>) = 0 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8572] memfd_create("syzkaller", 0 [pid 8570] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8572] <... memfd_create resumed>) = 3 [pid 5064] umount2("./351", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8568] <... mount resumed>) = 0 [pid 8572] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8568] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8572] <... mmap resumed>) = 0x7f41e0600000 [pid 8570] <... open resumed>) = 4 [pid 8568] <... openat resumed>) = 3 [pid 5064] openat(AT_FDCWD, "./351", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./351/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./351/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./351/binderfs") = 0 [pid 8568] chdir("./file0" [pid 5064] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8570] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8568] <... chdir resumed>) = 0 [pid 8570] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8568] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8570] <... mmap resumed>) = 0x20000000 [pid 8568] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8570] ftruncate(4, 33587195 [pid 8568] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8570] <... ftruncate resumed>) = 0 [ 317.660956][ T8573] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 317.695619][ T8574] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8570] unlink("./bus") = 0 [pid 8570] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8570] exit_group(0) = ? [pid 8568] <... open resumed>) = 4 [pid 8572] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8568] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] <... umount2 resumed>) = 0 [pid 8570] +++ exited with 0 +++ [pid 8568] <... open resumed>) = 5 [pid 8568] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8570, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5063] umount2("./347", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8568] <... mmap resumed>) = 0x20000000 [pid 8568] ftruncate(4, 33587195 [pid 5064] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./347", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] newfstatat(AT_FDCWD, "./351/file0", [pid 5063] <... openat resumed>) = 3 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(3, [pid 8568] <... ftruncate resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] <... ioctl resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./351/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] umount2("./347/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... openat resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(4, "", [pid 5063] newfstatat(AT_FDCWD, "./347/binderfs", [pid 8568] unlink("./bus" [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] close(3 [pid 5064] getdents64(4, [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... close resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] unlink("./347/binderfs" [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 5064] close(4./strace-static-x86_64: Process 8575 attached ) = 0 [pid 8575] set_robust_list(0x55555745a660, 24 [pid 5064] rmdir("./351/file0" [pid 5063] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8575] <... set_robust_list resumed>) = 0 [pid 8575] chdir("./353" [pid 5064] <... rmdir resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8575 [pid 8575] <... chdir resumed>) = 0 [pid 8575] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8572] <... write resumed>) = 2097152 [pid 8568] <... unlink resumed>) = 0 [pid 5064] getdents64(3, [pid 8575] setpgid(0, 0 [pid 8568] sendfile(-1, -1, NULL, 281474978811909 [pid 8575] <... setpgid resumed>) = 0 [pid 8572] munmap(0x7f41e0600000, 138412032 [pid 8568] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 8575] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8568] exit_group(0 [pid 5064] close(3 [pid 8568] <... exit_group resumed>) = ? [pid 8575] <... openat resumed>) = 3 [pid 8572] <... munmap resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8575] write(3, "1000", 4 [pid 5064] rmdir("./351" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8575] <... write resumed>) = 4 [pid 8572] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8568] +++ exited with 0 +++ [pid 5064] <... rmdir resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./347/file0", [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8568, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=3 /* 0.03 s */} --- [pid 8575] close(3 [pid 8572] <... openat resumed>) = 4 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8572] ioctl(4, LOOP_SET_FD, 3 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8575] <... close resumed>) = 0 [pid 5064] mkdir("./352", 0777 [pid 8575] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... mkdir resumed>) = 0 [pid 8575] <... symlink resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 8575] memfd_create("syzkaller", 0 [pid 8572] <... ioctl resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./347/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8572] close(3) = 0 [pid 5063] <... openat resumed>) = 4 [pid 8575] <... memfd_create resumed>) = 3 [pid 8572] close(4 [pid 5063] newfstatat(4, "", [pid 8572] <... close resumed>) = 0 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8575] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8572] mkdir("./file0", 0777 [pid 5062] umount2("./346", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8572] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./346", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8575] <... mmap resumed>) = 0x7f41e0600000 [pid 5062] <... openat resumed>) = 3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8572] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] newfstatat(3, "", [pid 5063] getdents64(4, [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] umount2("./346/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] getdents64(4, [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] newfstatat(AT_FDCWD, "./346/binderfs", [pid 5063] close(4 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... close resumed>) = 0 [pid 5062] unlink("./346/binderfs" [pid 5063] rmdir("./347/file0" [pid 5062] <... unlink resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8575] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./347") = 0 [ 317.841230][ T8572] loop4: detected capacity change from 0 to 4096 [pid 5063] mkdir("./348", 0777) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8572] <... mount resumed>) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 8572] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8572] chdir("./file0" [pid 5064] close(3 [pid 5062] <... umount2 resumed>) = 0 [pid 8572] <... chdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 8572] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8572] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000./strace-static-x86_64: Process 8577 attached [pid 8575] <... write resumed>) = 2097152 [pid 5062] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8577] set_robust_list(0x55555745a660, 24 [pid 8575] munmap(0x7f41e0600000, 138412032 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./346/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./346/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 8577] <... set_robust_list resumed>) = 0 [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(4, [pid 8577] chdir("./352" [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8577 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4 [pid 8577] <... chdir resumed>) = 0 [pid 8575] <... munmap resumed>) = 0 [pid 8572] <... open resumed>) = 4 [pid 5062] <... close resumed>) = 0 [pid 8577] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8572] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] rmdir("./346/file0" [pid 8577] <... prctl resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 8577] setpgid(0, 0 [ 317.923296][ T8576] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8575] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8572] <... open resumed>) = 5 [pid 5062] getdents64(3, [pid 8577] <... setpgid resumed>) = 0 [pid 8575] <... openat resumed>) = 4 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 8577] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8572] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8575] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./346") = 0 [pid 5062] mkdir("./347", 0777) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8577] <... openat resumed>) = 3 [pid 8575] <... ioctl resumed>) = 0 [pid 8572] <... mmap resumed>) = 0x20000000 [pid 8577] write(3, "1000", 4 [pid 8575] close(3 [pid 8577] <... write resumed>) = 4 [pid 8575] <... close resumed>) = 0 [pid 8572] ftruncate(4, 33587195 [pid 5063] <... ioctl resumed>) = 0 [pid 8575] close(4) = 0 [pid 8577] close(3) = 0 [pid 8577] symlink("/dev/binderfs", "./binderfs" [pid 8575] mkdir("./file0", 0777 [pid 5063] close(3 [pid 8577] <... symlink resumed>) = 0 [pid 8575] <... mkdir resumed>) = 0 [pid 8577] memfd_create("syzkaller", 0 [pid 8575] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8572] <... ftruncate resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 8577] <... memfd_create resumed>) = 3 [pid 8577] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8572] unlink("./bus" [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8577] <... mmap resumed>) = 0x7f41e0600000 ./strace-static-x86_64: Process 8578 attached [pid 8578] set_robust_list(0x55555745a660, 24) = 0 [pid 8578] chdir("./348") = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8578 [pid 8578] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8578] setpgid(0, 0) = 0 [pid 8578] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8572] <... unlink resumed>) = 0 [pid 8578] <... openat resumed>) = 3 [pid 8572] sendfile(-1, -1, NULL, 281474978811909 [pid 8578] write(3, "1000", 4) = 4 [ 317.971202][ T8575] loop0: detected capacity change from 0 to 4096 [pid 8578] close(3) = 0 [pid 8578] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8578] memfd_create("syzkaller", 0) = 3 [pid 8578] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8572] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8572] exit_group(0) = ? [pid 5062] <... ioctl resumed>) = 0 [pid 5062] close(3 [pid 8572] +++ exited with 0 +++ [pid 8577] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8575] <... mount resumed>) = 0 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8572, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 8575] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8575] <... openat resumed>) = 3 [pid 5065] umount2("./345", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8575] chdir("./file0"./strace-static-x86_64: Process 8580 attached [pid 8578] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8575] <... chdir resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8575] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8580] set_robust_list(0x55555745a660, 24 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8580 [pid 8580] <... set_robust_list resumed>) = 0 [pid 8575] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] openat(AT_FDCWD, "./345", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8580] chdir("./347") = 0 [pid 8575] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] <... openat resumed>) = 3 [pid 8580] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] newfstatat(3, "", [pid 8580] <... prctl resumed>) = 0 [pid 8580] setpgid(0, 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8580] <... setpgid resumed>) = 0 [pid 8580] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] getdents64(3, [pid 8580] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8580] write(3, "1000", 4 [pid 5065] umount2("./345/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8580] <... write resumed>) = 4 [pid 8580] close(3 [pid 5065] newfstatat(AT_FDCWD, "./345/binderfs", [pid 8580] <... close resumed>) = 0 [pid 8580] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 318.066626][ T8579] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8580] <... symlink resumed>) = 0 [pid 8575] <... open resumed>) = 4 [pid 5065] unlink("./345/binderfs") = 0 [pid 5065] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8575] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8580] memfd_create("syzkaller", 0 [pid 8575] <... open resumed>) = 5 [pid 8575] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 3 [pid 8578] <... write resumed>) = 2097152 [pid 8577] <... write resumed>) = 2097152 [pid 8575] ftruncate(4, 33587195 [pid 5065] <... umount2 resumed>) = 0 [pid 8580] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8577] munmap(0x7f41e0600000, 138412032 [pid 8580] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8577] <... munmap resumed>) = 0 [pid 8575] <... ftruncate resumed>) = 0 [pid 8577] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8575] unlink("./bus" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8577] <... openat resumed>) = 4 [pid 5065] newfstatat(AT_FDCWD, "./345/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./345/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8578] munmap(0x7f41e0600000, 138412032 [pid 8577] ioctl(4, LOOP_SET_FD, 3 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8578] <... munmap resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./345/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 8577] <... ioctl resumed>) = 0 [pid 8580] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8578] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8575] <... unlink resumed>) = 0 [pid 5065] getdents64(4, [pid 8578] <... openat resumed>) = 4 [pid 8577] close(3 [pid 8575] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8577] <... close resumed>) = 0 [pid 8575] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] close(4 [pid 8577] close(4 [pid 8575] exit_group(0 [pid 5065] <... close resumed>) = 0 [pid 8577] <... close resumed>) = 0 [pid 8577] mkdir("./file0", 0777 [pid 8575] <... exit_group resumed>) = ? [pid 8578] ioctl(4, LOOP_SET_FD, 3 [pid 8577] <... mkdir resumed>) = 0 [pid 5065] rmdir("./345/file0" [pid 8578] <... ioctl resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 8578] close(3 [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8578] <... close resumed>) = 0 [pid 8578] close(4 [pid 5065] close(3 [pid 8578] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 8578] mkdir("./file0", 0777 [pid 5065] rmdir("./345" [pid 8577] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8575] +++ exited with 0 +++ [pid 8578] <... mkdir resumed>) = 0 [pid 5065] <... rmdir resumed>) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8575, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5065] mkdir("./346", 0777 [pid 5061] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5061] umount2("./353", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8578] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... mkdir resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./353", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... openat resumed>) = 3 [pid 5061] newfstatat(3, "", [pid 5065] <... openat resumed>) = 3 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5061] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] umount2("./353/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./353/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./353/binderfs") = 0 [ 318.166280][ T8577] loop3: detected capacity change from 0 to 4096 [ 318.200043][ T8578] loop2: detected capacity change from 0 to 4096 [pid 5061] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8580] <... write resumed>) = 2097152 [pid 8580] munmap(0x7f41e0600000, 138412032 [pid 8577] <... mount resumed>) = 0 [pid 8580] <... munmap resumed>) = 0 [pid 8577] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8578] <... mount resumed>) = 0 [pid 8580] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8577] chdir("./file0" [pid 8580] <... openat resumed>) = 4 [pid 8577] <... chdir resumed>) = 0 [pid 8577] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8580] ioctl(4, LOOP_SET_FD, 3 [pid 8577] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8580] <... ioctl resumed>) = 0 [pid 8578] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8578] chdir("./file0" [pid 5061] <... umount2 resumed>) = 0 [pid 8578] <... chdir resumed>) = 0 [pid 8578] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5061] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8578] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./353/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./353/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", [pid 8578] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 5061] rmdir("./353/file0") = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [ 318.245198][ T8581] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 318.263450][ T8582] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 318.281239][ T8580] loop1: detected capacity change from 0 to 4096 [pid 5061] close(3 [pid 8580] close(3 [pid 8578] <... open resumed>) = 4 [pid 8577] <... open resumed>) = 4 [pid 5065] close(3 [pid 8580] <... close resumed>) = 0 [pid 8578] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8577] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] <... close resumed>) = 0 [pid 8580] close(4 [pid 8577] <... open resumed>) = 5 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... close resumed>) = 0 [pid 8580] <... close resumed>) = 0 [pid 8577] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8580] mkdir("./file0", 0777 [pid 8578] <... open resumed>) = 5 [pid 8577] <... mmap resumed>) = 0x20000000 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8583 [pid 8580] <... mkdir resumed>) = 0 [pid 8577] ftruncate(4, 33587195 [pid 5061] rmdir("./353"./strace-static-x86_64: Process 8583 attached [ 318.319173][ T28] kauditd_printk_skb: 101 callbacks suppressed [ 318.319189][ T28] audit: type=1800 audit(1708423470.850:5243): pid=8578 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop2" ino=18 res=0 errno=0 [pid 8580] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8578] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8577] <... ftruncate resumed>) = 0 [pid 8583] set_robust_list(0x55555745a660, 24 [pid 8577] unlink("./bus" [pid 5061] <... rmdir resumed>) = 0 [pid 8578] <... mmap resumed>) = 0x20000000 [pid 8578] ftruncate(4, 33587195 [pid 8583] <... set_robust_list resumed>) = 0 [pid 5061] mkdir("./354", 0777 [pid 8583] chdir("./346" [pid 8577] <... unlink resumed>) = 0 [pid 8583] <... chdir resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 8578] <... ftruncate resumed>) = 0 [pid 8577] sendfile(-1, -1, NULL, 281474978811909 [pid 8583] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8578] unlink("./bus" [pid 8577] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8577] exit_group(0 [pid 5061] <... openat resumed>) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8583] <... prctl resumed>) = 0 [ 318.361342][ T28] audit: type=1800 audit(1708423470.850:5244): pid=8577 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 318.394510][ T28] audit: type=1800 audit(1708423470.880:5245): pid=8577 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [pid 8583] setpgid(0, 0 [pid 8577] <... exit_group resumed>) = ? [pid 8583] <... setpgid resumed>) = 0 [pid 8578] <... unlink resumed>) = 0 [pid 8577] +++ exited with 0 +++ [ 318.416235][ T28] audit: type=1800 audit(1708423470.880:5246): pid=8578 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 318.440163][ T28] audit: type=1800 audit(1708423470.880:5247): pid=8577 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop3" ino=18 res=0 errno=0 [pid 8580] <... mount resumed>) = 0 [pid 8578] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8577, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} --- [pid 8580] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8578] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8580] chdir("./file0" [pid 8578] exit_group(0 [pid 8580] <... chdir resumed>) = 0 [pid 8580] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8578] <... exit_group resumed>) = ? [pid 5064] umount2("./352", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8580] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5064] openat(AT_FDCWD, "./352", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8583] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./352/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./352/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./352/binderfs") = 0 [pid 8583] <... openat resumed>) = 3 [pid 8580] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8583] write(3, "1000", 4) = 4 [pid 8583] close(3) = 0 [pid 8583] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8583] memfd_create("syzkaller", 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8578] +++ exited with 0 +++ [pid 8583] <... memfd_create resumed>) = 3 [pid 8583] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8578, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=6 /* 0.06 s */} --- [pid 5061] close(3 [ 318.461345][ T8584] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] umount2("./348", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] <... close resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./348", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] <... openat resumed>) = 3 ./strace-static-x86_64: Process 8585 attached [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8585 [pid 8585] set_robust_list(0x55555745a660, 24 [pid 8580] <... open resumed>) = 4 [pid 5063] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8585] <... set_robust_list resumed>) = 0 [pid 8583] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8585] chdir("./354" [pid 8580] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5064] <... umount2 resumed>) = 0 [ 318.510917][ T28] audit: type=1800 audit(1708423470.900:5248): pid=8578 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 318.540311][ T28] audit: type=1800 audit(1708423471.070:5249): pid=8580 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop1" ino=18 res=0 errno=0 [pid 5063] umount2("./348/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8585] <... chdir resumed>) = 0 [pid 8580] <... open resumed>) = 5 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8585] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8580] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] newfstatat(AT_FDCWD, "./348/binderfs", [pid 8585] <... prctl resumed>) = 0 [pid 8580] <... mmap resumed>) = 0x20000000 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8585] setpgid(0, 0 [pid 8580] ftruncate(4, 33587195 [pid 5063] unlink("./348/binderfs" [pid 8585] <... setpgid resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 8585] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5063] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8585] <... openat resumed>) = 3 [pid 8585] write(3, "1000", 4) = 4 [pid 8585] close(3) = 0 [pid 8585] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8585] memfd_create("syzkaller", 0) = 3 [pid 8585] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8583] <... write resumed>) = 2097152 [pid 8580] <... ftruncate resumed>) = 0 [pid 5064] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 8580] unlink("./bus" [pid 5063] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./348/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./348/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./348/file0") = 0 [ 318.576126][ T28] audit: type=1800 audit(1708423471.100:5250): pid=8580 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop1" ino=18 res=0 errno=0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./348" [pid 8583] munmap(0x7f41e0600000, 138412032 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... rmdir resumed>) = 0 [pid 8580] <... unlink resumed>) = 0 [pid 8580] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] newfstatat(AT_FDCWD, "./352/file0", [pid 8580] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] mkdir("./349", 0777 [pid 8583] <... munmap resumed>) = 0 [pid 8580] exit_group(0 [pid 5064] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... mkdir resumed>) = 0 [pid 8583] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8585] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8583] <... openat resumed>) = 4 [pid 8580] <... exit_group resumed>) = ? [pid 5064] openat(AT_FDCWD, "./352/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8583] ioctl(4, LOOP_SET_FD, 3 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8583] <... ioctl resumed>) = 0 [pid 8580] +++ exited with 0 +++ [pid 5064] <... openat resumed>) = 4 [pid 8583] close(3 [pid 5064] newfstatat(4, "", [pid 8583] <... close resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8580, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8583] close(4 [pid 5064] getdents64(4, [pid 5062] umount2("./347", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8583] <... close resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8583] mkdir("./file0", 0777 [pid 5064] getdents64(4, [pid 5062] openat(AT_FDCWD, "./347", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8585] <... write resumed>) = 2097152 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4 [pid 5062] <... openat resumed>) = 3 [pid 8585] munmap(0x7f41e0600000, 138412032 [pid 5064] <... close resumed>) = 0 [pid 5062] newfstatat(3, "", [pid 5064] rmdir("./352/file0" [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, [pid 5064] getdents64(3, [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8585] <... munmap resumed>) = 0 [pid 8583] <... mkdir resumed>) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] umount2("./347/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8585] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8583] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] close(3 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8585] <... openat resumed>) = 4 [pid 5064] <... close resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./347/binderfs", [pid 5064] rmdir("./352" [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 318.612906][ T28] audit: type=1800 audit(1708423471.100:5251): pid=8580 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 318.647187][ T8583] loop4: detected capacity change from 0 to 4096 [pid 8585] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... rmdir resumed>) = 0 [pid 5062] unlink("./347/binderfs") = 0 [pid 5062] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] mkdir("./353", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8585] <... ioctl resumed>) = 0 [pid 8585] close(3) = 0 [pid 8585] close(4) = 0 [pid 8583] <... mount resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5062] <... umount2 resumed>) = 0 [pid 8583] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5063] close(3 [pid 8583] <... openat resumed>) = 3 [pid 8583] chdir("./file0" [pid 5063] <... close resumed>) = 0 [pid 8583] <... chdir resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8583] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 8587 attached [pid 8585] mkdir("./file0", 0777 [pid 8583] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8583] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5062] newfstatat(AT_FDCWD, "./347/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8587] set_robust_list(0x55555745a660, 24 [pid 8585] <... mkdir resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8587 [pid 5062] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8587] <... set_robust_list resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./347/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 318.686719][ T8585] loop0: detected capacity change from 0 to 4096 [ 318.713985][ T8586] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8587] chdir("./349" [pid 5062] <... openat resumed>) = 4 [pid 8587] <... chdir resumed>) = 0 [pid 8585] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8587] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5062] newfstatat(4, "", [pid 8587] <... prctl resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8587] setpgid(0, 0 [pid 5062] getdents64(4, [pid 8587] <... setpgid resumed>) = 0 [pid 8587] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, [pid 8587] <... openat resumed>) = 3 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 8587] write(3, "1000", 4 [pid 8583] <... open resumed>) = 4 [pid 5062] rmdir("./347/file0" [pid 8587] <... write resumed>) = 4 [pid 8583] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] <... rmdir resumed>) = 0 [pid 8587] close(3) = 0 [pid 8587] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8583] <... open resumed>) = 5 [pid 5064] <... ioctl resumed>) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 5064] close(3) = 0 [pid 8587] memfd_create("syzkaller", 0 [pid 8583] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./347" [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 8589 attached [pid 8587] <... memfd_create resumed>) = 3 [pid 8583] <... mmap resumed>) = 0x20000000 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8589 [pid 8589] set_robust_list(0x55555745a660, 24) = 0 [ 318.799709][ T28] audit: type=1800 audit(1708423471.320:5252): pid=8583 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor115" name="bus" dev="loop4" ino=18 res=0 errno=0 [pid 8589] chdir("./353" [pid 8587] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8589] <... chdir resumed>) = 0 [pid 8589] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8589] setpgid(0, 0 [pid 8587] <... mmap resumed>) = 0x7f41e0600000 [pid 8589] <... setpgid resumed>) = 0 [pid 8589] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8589] write(3, "1000", 4) = 4 [pid 8589] close(3) = 0 [pid 8589] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8589] memfd_create("syzkaller", 0) = 3 [pid 8589] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5062] mkdir("./348", 0777 [pid 8583] ftruncate(4, 33587195 [pid 5062] <... mkdir resumed>) = 0 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8585] <... mount resumed>) = 0 [pid 8585] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] <... openat resumed>) = 3 [pid 8585] chdir("./file0") = 0 [pid 8585] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8585] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8583] <... ftruncate resumed>) = 0 [pid 8583] unlink("./bus") = 0 [pid 8583] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8583] exit_group(0) = ? [pid 8587] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8583] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8583, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=6 /* 0.06 s */} --- [pid 5065] umount2("./346", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./346", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 318.841857][ T8588] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5065] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./346/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./346/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] unlink("./346/binderfs") = 0 [pid 5065] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8585] <... open resumed>) = 4 [pid 8585] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8585] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8589] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8585] <... unlink resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 8585] sendfile(-1, -1, NULL, 281474978811909 [pid 5062] <... ioctl resumed>) = 0 [pid 8585] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8585] exit_group(0 [pid 5065] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8585] <... exit_group resumed>) = ? [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./346/file0", [pid 8587] <... write resumed>) = 2097152 [pid 8585] +++ exited with 0 +++ [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] close(3) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8587] munmap(0x7f41e0600000, 138412032 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8590 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8585, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5061] umount2("./354", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] umount2("./346/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./354", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./346/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] <... openat resumed>) = 3 [pid 5065] <... openat resumed>) = 4 [pid 5061] newfstatat(3, "", ./strace-static-x86_64: Process 8590 attached [pid 8590] set_robust_list(0x55555745a660, 24 [pid 5065] newfstatat(4, "", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8590] <... set_robust_list resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8590] chdir("./348" [pid 8587] <... munmap resumed>) = 0 [pid 5065] getdents64(4, [pid 5061] getdents64(3, [pid 8590] <... chdir resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8590] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] getdents64(4, [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8590] <... prctl resumed>) = 0 [pid 8587] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5061] umount2("./354/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8590] setpgid(0, 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8590] <... setpgid resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./354/binderfs", [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] close(4 [pid 8590] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8587] <... openat resumed>) = 4 [pid 5065] <... close resumed>) = 0 [pid 5061] unlink("./354/binderfs" [pid 8590] <... openat resumed>) = 3 [pid 8587] ioctl(4, LOOP_SET_FD, 3 [pid 5065] rmdir("./346/file0") = 0 [pid 5061] <... unlink resumed>) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3) = 0 [pid 5065] rmdir("./346") = 0 [pid 5065] mkdir("./347", 0777 [pid 8590] write(3, "1000", 4 [pid 8589] <... write resumed>) = 2097152 [pid 8587] <... ioctl resumed>) = 0 [pid 5061] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8590] <... write resumed>) = 4 [pid 8589] munmap(0x7f41e0600000, 138412032 [pid 8587] close(3 [pid 5065] <... mkdir resumed>) = 0 [pid 8590] close(3 [pid 8589] <... munmap resumed>) = 0 [pid 8587] <... close resumed>) = 0 [pid 8590] <... close resumed>) = 0 [pid 8587] close(4 [pid 8590] symlink("/dev/binderfs", "./binderfs" [pid 8587] <... close resumed>) = 0 [pid 8590] <... symlink resumed>) = 0 [pid 8589] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] <... umount2 resumed>) = 0 [pid 8587] mkdir("./file0", 0777 [pid 5065] <... openat resumed>) = 3 [pid 8590] memfd_create("syzkaller", 0 [pid 8589] <... openat resumed>) = 4 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8589] ioctl(4, LOOP_SET_FD, 3 [pid 8587] <... mkdir resumed>) = 0 [pid 8590] <... memfd_create resumed>) = 3 [pid 8589] <... ioctl resumed>) = 0 [pid 5061] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8590] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8589] close(3 [pid 8587] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8590] <... mmap resumed>) = 0x7f41e0600000 [pid 8589] <... close resumed>) = 0 [pid 8589] close(4 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8589] <... close resumed>) = 0 [pid 8589] mkdir("./file0", 0777 [pid 5061] newfstatat(AT_FDCWD, "./354/file0", [pid 8589] <... mkdir resumed>) = 0 [ 318.980095][ T8587] loop2: detected capacity change from 0 to 4096 [ 319.019742][ T8589] loop3: detected capacity change from 0 to 4096 [pid 8589] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8587] <... mount resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./354/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8587] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8587] <... openat resumed>) = 3 [pid 5061] close(4) = 0 [pid 8590] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8587] chdir("./file0" [pid 5061] rmdir("./354/file0" [pid 8587] <... chdir resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./354") = 0 [pid 5061] mkdir("./355", 0777) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8587] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8587] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8589] <... mount resumed>) = 0 [pid 8589] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8589] chdir("./file0") = 0 [pid 8589] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8589] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000) = 4 [ 319.070055][ T8591] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 319.081949][ T8592] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8589] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8589] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 4 [pid 5065] <... ioctl resumed>) = 0 [pid 8587] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8590] <... write resumed>) = 2097152 [pid 5065] close(3 [pid 8589] ftruncate(4, 33587195 [pid 8587] <... open resumed>) = 5 [pid 8587] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 8587] ftruncate(4, 33587195 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8589] <... ftruncate resumed>) = 0 [pid 8590] munmap(0x7f41e0600000, 138412032 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8593 [pid 8589] unlink("./bus" [pid 8587] <... ftruncate resumed>) = 0 ./strace-static-x86_64: Process 8593 attached [pid 8590] <... munmap resumed>) = 0 [pid 8589] <... unlink resumed>) = 0 [pid 8587] unlink("./bus" [pid 5061] <... ioctl resumed>) = 0 [pid 8593] set_robust_list(0x55555745a660, 24 [pid 8590] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8589] sendfile(-1, -1, NULL, 281474978811909 [pid 8593] <... set_robust_list resumed>) = 0 [pid 8590] <... openat resumed>) = 4 [pid 8589] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5061] close(3 [pid 8593] chdir("./347" [pid 8590] ioctl(4, LOOP_SET_FD, 3 [pid 8589] exit_group(0 [pid 5061] <... close resumed>) = 0 [pid 8593] <... chdir resumed>) = 0 [pid 8587] <... unlink resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8587] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8587] exit_group(0) = ? ./strace-static-x86_64: Process 8594 attached [pid 8593] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8590] <... ioctl resumed>) = 0 [pid 8589] <... exit_group resumed>) = ? [pid 8594] set_robust_list(0x55555745a660, 24 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8594 [pid 8594] <... set_robust_list resumed>) = 0 [pid 8590] close(3 [pid 8593] <... prctl resumed>) = 0 [pid 8594] chdir("./355" [pid 8593] setpgid(0, 0 [pid 8590] <... close resumed>) = 0 [pid 8593] <... setpgid resumed>) = 0 [pid 8593] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8590] close(4 [pid 8594] <... chdir resumed>) = 0 [pid 8593] <... openat resumed>) = 3 [pid 8590] <... close resumed>) = 0 [pid 8589] +++ exited with 0 +++ [pid 8587] +++ exited with 0 +++ [pid 8594] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8593] write(3, "1000", 4 [pid 8590] mkdir("./file0", 0777 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8589, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 8594] <... prctl resumed>) = 0 [pid 8593] <... write resumed>) = 4 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8587, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=5 /* 0.05 s */} --- [pid 8593] close(3 [pid 5063] restart_syscall(<... resuming interrupted clone ...> [pid 8594] setpgid(0, 0 [pid 8593] <... close resumed>) = 0 [pid 5063] <... restart_syscall resumed>) = 0 [pid 8594] <... setpgid resumed>) = 0 [pid 8593] symlink("/dev/binderfs", "./binderfs" [pid 8590] <... mkdir resumed>) = 0 [pid 8594] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8593] <... symlink resumed>) = 0 [pid 5064] umount2("./353", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8594] <... openat resumed>) = 3 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./349", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8593] memfd_create("syzkaller", 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./349", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8594] write(3, "1000", 4 [pid 5063] <... openat resumed>) = 3 [pid 8594] <... write resumed>) = 4 [pid 8593] <... memfd_create resumed>) = 3 [pid 8594] close(3) = 0 [pid 8593] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8594] symlink("/dev/binderfs", "./binderfs" [pid 8593] <... mmap resumed>) = 0x7f41e0600000 [pid 8590] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] openat(AT_FDCWD, "./353", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 319.183011][ T8590] loop1: detected capacity change from 0 to 4096 [pid 5063] getdents64(3, [pid 8594] <... symlink resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] newfstatat(3, "", [pid 5063] umount2("./349/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./349/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./349/binderfs") = 0 [pid 5064] getdents64(3, [pid 5063] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5064] umount2("./353/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8594] memfd_create("syzkaller", 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./353/binderfs", [pid 8594] <... memfd_create resumed>) = 3 [pid 5063] <... umount2 resumed>) = 0 [pid 8594] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8593] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8590] <... mount resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8590] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5064] unlink("./353/binderfs" [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8590] chdir("./file0" [pid 5063] newfstatat(AT_FDCWD, "./349/file0", [pid 8590] <... chdir resumed>) = 0 [pid 5064] <... unlink resumed>) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8590] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5064] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8590] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] openat(AT_FDCWD, "./349/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8590] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] close(4) = 0 [pid 5063] rmdir("./349/file0" [pid 8594] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] <... rmdir resumed>) = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8590] <... open resumed>) = 4 [pid 5063] close(3 [pid 8590] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] <... close resumed>) = 0 [pid 8590] <... open resumed>) = 5 [pid 5063] rmdir("./349") = 0 [pid 8590] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8590] ftruncate(4, 33587195 [pid 5064] <... umount2 resumed>) = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5064] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./353/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./353/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [ 319.262148][ T8595] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5064] getdents64(4, [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./353/file0" [pid 8590] <... ftruncate resumed>) = 0 [pid 8590] unlink("./bus" [pid 5064] <... rmdir resumed>) = 0 [pid 8594] <... write resumed>) = 2097152 [pid 8593] <... write resumed>) = 2097152 [pid 8590] <... unlink resumed>) = 0 [pid 5064] getdents64(3, [pid 8594] munmap(0x7f41e0600000, 138412032 [pid 8593] munmap(0x7f41e0600000, 138412032 [pid 8590] sendfile(-1, -1, NULL, 281474978811909 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8594] <... munmap resumed>) = 0 [pid 8593] <... munmap resumed>) = 0 [pid 8590] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5064] close(3 [pid 8590] exit_group(0 [pid 5064] <... close resumed>) = 0 [pid 8594] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8593] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8590] <... exit_group resumed>) = ? [pid 5064] rmdir("./353" [pid 8594] <... openat resumed>) = 4 [pid 8593] <... openat resumed>) = 4 [pid 8594] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... rmdir resumed>) = 0 [pid 8593] ioctl(4, LOOP_SET_FD, 3 [pid 5064] mkdir("./354", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8590] +++ exited with 0 +++ [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8590, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5062] umount2("./348", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./348", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] umount2("./348/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8594] <... ioctl resumed>) = 0 [pid 8593] <... ioctl resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./348/binderfs", [pid 8594] close(3 [pid 8593] close(3 [pid 5063] <... ioctl resumed>) = 0 [pid 8594] <... close resumed>) = 0 [pid 8593] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8594] close(4) = 0 [pid 8593] close(4 [pid 5063] close(3 [pid 5062] unlink("./348/binderfs" [pid 5063] <... close resumed>) = 0 [pid 8593] <... close resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8593] mkdir("./file0", 0777 [pid 8594] mkdir("./file0", 0777 [pid 8593] <... mkdir resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 8596 attached [pid 5062] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8596] set_robust_list(0x55555745a660, 24) = 0 [pid 8594] <... mkdir resumed>) = 0 [ 319.354888][ T8593] loop4: detected capacity change from 0 to 4096 [ 319.362366][ T8594] loop0: detected capacity change from 0 to 4096 [pid 8593] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8596 [pid 5062] <... umount2 resumed>) = 0 [pid 8596] chdir("./350" [pid 8594] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8596] <... chdir resumed>) = 0 [pid 8596] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8596] setpgid(0, 0 [pid 5062] newfstatat(AT_FDCWD, "./348/file0", [pid 8596] <... setpgid resumed>) = 0 [pid 8596] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8596] <... openat resumed>) = 3 [pid 5062] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8596] write(3, "1000", 4 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8596] <... write resumed>) = 4 [pid 5062] openat(AT_FDCWD, "./348/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8596] close(3) = 0 [pid 5062] <... openat resumed>) = 4 [pid 8596] symlink("/dev/binderfs", "./binderfs" [pid 5062] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8596] <... symlink resumed>) = 0 [pid 5062] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 8596] memfd_create("syzkaller", 0) = 3 [pid 5062] close(4 [pid 8596] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./348/file0") = 0 [pid 5062] getdents64(3, [pid 8594] <... mount resumed>) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 8594] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8594] chdir("./file0") = 0 [pid 8594] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8593] <... mount resumed>) = 0 [pid 5064] close(3 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8594] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8593] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] <... close resumed>) = 0 [pid 5062] close(3 [pid 8594] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8593] <... openat resumed>) = 3 [pid 8593] chdir("./file0" [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] <... close resumed>) = 0 [pid 8593] <... chdir resumed>) = 0 [pid 8593] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5062] rmdir("./348" [pid 8593] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8599 [pid 5062] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 8599 attached [pid 8596] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5062] mkdir("./349", 0777 [pid 8599] set_robust_list(0x55555745a660, 24 [pid 5062] <... mkdir resumed>) = 0 [pid 8599] <... set_robust_list resumed>) = 0 [pid 8594] <... open resumed>) = 4 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8594] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8599] chdir("./354" [pid 8594] <... open resumed>) = 5 [pid 5062] <... openat resumed>) = 3 [pid 8599] <... chdir resumed>) = 0 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 8599] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8599] setpgid(0, 0) = 0 [pid 8594] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8599] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8594] <... mmap resumed>) = 0x20000000 [pid 8599] <... openat resumed>) = 3 [pid 8599] write(3, "1000", 4) = 4 [ 319.457936][ T8597] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 319.483114][ T8598] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8594] ftruncate(4, 33587195 [pid 8599] close(3) = 0 [pid 8593] <... open resumed>) = 4 [pid 8599] symlink("/dev/binderfs", "./binderfs" [pid 8593] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8599] <... symlink resumed>) = 0 [pid 8593] <... open resumed>) = 5 [pid 8594] <... ftruncate resumed>) = 0 [pid 8593] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8599] memfd_create("syzkaller", 0 [pid 8594] unlink("./bus" [pid 8593] <... mmap resumed>) = 0x20000000 [pid 8599] <... memfd_create resumed>) = 3 [pid 8599] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8593] ftruncate(4, 33587195 [pid 8594] <... unlink resumed>) = 0 [pid 8594] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8594] exit_group(0 [pid 8599] <... mmap resumed>) = 0x7f41e0600000 [pid 8594] <... exit_group resumed>) = ? [pid 8593] <... ftruncate resumed>) = 0 [pid 8593] unlink("./bus" [pid 8594] +++ exited with 0 +++ [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8594, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5061] umount2("./355", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./355", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", [pid 5062] <... ioctl resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 5062] close(3 [pid 8596] <... write resumed>) = 2097152 [pid 8593] <... unlink resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8596] munmap(0x7f41e0600000, 138412032 [pid 8593] sendfile(-1, -1, NULL, 281474978811909 [pid 5061] umount2("./355/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8593] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5062] <... close resumed>) = 0 [pid 8593] exit_group(0 [pid 8599] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8593] <... exit_group resumed>) = ? [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8596] <... munmap resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8596] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5061] newfstatat(AT_FDCWD, "./355/binderfs", [pid 8596] <... openat resumed>) = 4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] unlink("./355/binderfs") = 0 [pid 5061] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8596] ioctl(4, LOOP_SET_FD, 3 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8600 ./strace-static-x86_64: Process 8600 attached [pid 8593] +++ exited with 0 +++ [pid 8600] set_robust_list(0x55555745a660, 24 [pid 8596] <... ioctl resumed>) = 0 [pid 8600] <... set_robust_list resumed>) = 0 [pid 8596] close(3 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8593, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8600] chdir("./349" [pid 8596] <... close resumed>) = 0 [pid 5065] umount2("./347", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = 0 [pid 8600] <... chdir resumed>) = 0 [pid 8596] close(4 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8600] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8596] <... close resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./347", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8600] <... prctl resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 8600] setpgid(0, 0 [pid 5065] newfstatat(3, "", [pid 8600] <... setpgid resumed>) = 0 [pid 8596] mkdir("./file0", 0777 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8600] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8596] <... mkdir resumed>) = 0 [pid 5065] getdents64(3, [pid 8600] <... openat resumed>) = 3 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8600] write(3, "1000", 4 [pid 8596] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] umount2("./347/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(AT_FDCWD, "./355/file0", [pid 8600] <... write resumed>) = 4 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8600] close(3 [pid 5065] newfstatat(AT_FDCWD, "./347/binderfs", [pid 5061] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8600] <... close resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8600] symlink("/dev/binderfs", "./binderfs" [pid 8599] <... write resumed>) = 2097152 [pid 5065] unlink("./347/binderfs" [pid 8600] <... symlink resumed>) = 0 [pid 8599] munmap(0x7f41e0600000, 138412032 [pid 5065] <... unlink resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./355/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8600] memfd_create("syzkaller", 0 [pid 5065] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... openat resumed>) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [ 319.632840][ T8596] loop2: detected capacity change from 0 to 4096 [pid 8600] <... memfd_create resumed>) = 3 [pid 8599] <... munmap resumed>) = 0 [pid 8596] <... mount resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 5061] getdents64(4, [pid 8600] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8599] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8599] <... openat resumed>) = 4 [pid 5061] close(4) = 0 [pid 5061] rmdir("./355/file0") = 0 [pid 8600] <... mmap resumed>) = 0x7f41e0600000 [pid 8596] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8599] ioctl(4, LOOP_SET_FD, 3 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./355") = 0 [pid 5061] mkdir("./356", 0777 [pid 8596] <... openat resumed>) = 3 [pid 5061] <... mkdir resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5065] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./347/file0", [pid 8596] chdir("./file0" [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8596] <... chdir resumed>) = 0 [pid 5065] umount2("./347/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8596] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./347/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8596] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] <... openat resumed>) = 4 [pid 8596] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] newfstatat(4, "", [pid 8599] <... ioctl resumed>) = 0 [pid 8599] close(3 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8599] <... close resumed>) = 0 [pid 5065] getdents64(4, [pid 8599] close(4 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, [pid 8599] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8599] mkdir("./file0", 0777 [pid 5065] close(4) = 0 [pid 5065] rmdir("./347/file0") = 0 [pid 8599] <... mkdir resumed>) = 0 [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 8599] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./347") = 0 [pid 5065] mkdir("./348", 0777) = 0 [pid 8596] <... open resumed>) = 4 [ 319.691641][ T8601] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 319.706201][ T8599] loop3: detected capacity change from 0 to 4096 [pid 8600] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 8596] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8599] <... mount resumed>) = 0 [pid 8596] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] <... ioctl resumed>) = 0 [pid 8599] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8596] <... mmap resumed>) = 0x20000000 [pid 8599] chdir("./file0" [pid 8596] ftruncate(4, 33587195 [pid 8599] <... chdir resumed>) = 0 [pid 8599] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8599] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] close(3 [pid 8596] <... ftruncate resumed>) = 0 [pid 8600] <... write resumed>) = 2097152 [pid 8599] <... open resumed>) = 4 [pid 8596] unlink("./bus" [pid 8600] munmap(0x7f41e0600000, 138412032 [ 319.751812][ T8602] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8599] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] <... close resumed>) = 0 [pid 8599] <... open resumed>) = 5 [pid 8599] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8603 attached [pid 8599] <... mmap resumed>) = 0x20000000 [pid 8603] set_robust_list(0x55555745a660, 24) = 0 [pid 8599] ftruncate(4, 33587195 [pid 8603] chdir("./356" [pid 8599] <... ftruncate resumed>) = 0 [pid 8603] <... chdir resumed>) = 0 [pid 8600] <... munmap resumed>) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8603 [pid 8603] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8600] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8599] unlink("./bus" [pid 8600] <... openat resumed>) = 4 [pid 8596] <... unlink resumed>) = 0 [pid 8603] setpgid(0, 0 [pid 8596] sendfile(-1, -1, NULL, 281474978811909 [pid 8603] <... setpgid resumed>) = 0 [pid 8596] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8603] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8600] ioctl(4, LOOP_SET_FD, 3 [pid 8599] <... unlink resumed>) = 0 [pid 8596] exit_group(0 [pid 8599] sendfile(-1, -1, NULL, 281474978811909 [pid 8596] <... exit_group resumed>) = ? [pid 8603] write(3, "1000", 4 [pid 8599] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8599] exit_group(0 [pid 8603] <... write resumed>) = 4 [pid 5065] <... ioctl resumed>) = 0 [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8599] <... exit_group resumed>) = ? [pid 8603] close(3./strace-static-x86_64: Process 8604 attached ) = 0 [pid 8600] <... ioctl resumed>) = 0 [pid 8599] +++ exited with 0 +++ [pid 8596] +++ exited with 0 +++ [pid 8603] symlink("/dev/binderfs", "./binderfs" [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8599, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8596, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 8604] set_robust_list(0x55555745a660, 24 [pid 8603] <... symlink resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8604 [pid 8604] <... set_robust_list resumed>) = 0 [pid 8603] memfd_create("syzkaller", 0 [pid 8600] close(3 [pid 8603] <... memfd_create resumed>) = 3 [pid 8603] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8604] chdir("./348" [pid 8600] <... close resumed>) = 0 [pid 5064] umount2("./354", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] umount2("./350", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8604] <... chdir resumed>) = 0 [pid 8603] <... mmap resumed>) = 0x7f41e0600000 [pid 8600] close(4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8604] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8600] <... close resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./354", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] openat(AT_FDCWD, "./350", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8604] <... prctl resumed>) = 0 [pid 8600] mkdir("./file0", 0777 [pid 5064] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 3 [pid 8604] setpgid(0, 0 [pid 8600] <... mkdir resumed>) = 0 [pid 5064] newfstatat(3, "", [pid 5063] newfstatat(3, "", [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8604] <... setpgid resumed>) = 0 [pid 5064] getdents64(3, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8604] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8600] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] getdents64(3, [pid 8604] <... openat resumed>) = 3 [pid 5064] umount2("./354/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [ 319.851974][ T8600] loop1: detected capacity change from 0 to 4096 [pid 8604] write(3, "1000", 4 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./350/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8604] <... write resumed>) = 4 [pid 5064] newfstatat(AT_FDCWD, "./354/binderfs", [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8604] close(3 [pid 5064] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] newfstatat(AT_FDCWD, "./350/binderfs", [pid 8604] <... close resumed>) = 0 [pid 5064] unlink("./354/binderfs" [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8604] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... unlink resumed>) = 0 [pid 5063] unlink("./350/binderfs" [pid 5064] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... unlink resumed>) = 0 [pid 8604] <... symlink resumed>) = 0 [pid 5063] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8604] memfd_create("syzkaller", 0) = 3 [pid 8604] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8603] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] <... umount2 resumed>) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5063] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] newfstatat(AT_FDCWD, "./350/file0", [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] newfstatat(AT_FDCWD, "./354/file0", [pid 5063] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./350/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] umount2("./354/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] <... openat resumed>) = 4 [pid 5063] newfstatat(4, "", [pid 5064] openat(AT_FDCWD, "./354/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] newfstatat(4, "", [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, [pid 5064] getdents64(4, [pid 8600] <... mount resumed>) = 0 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8600] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5064] getdents64(4, [pid 5063] getdents64(4, [pid 8600] <... openat resumed>) = 3 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8600] chdir("./file0" [pid 5064] close(4 [pid 5063] close(4 [pid 8600] <... chdir resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 8600] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5064] rmdir("./354/file0" [pid 5063] rmdir("./350/file0" [pid 8600] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8600] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] <... rmdir resumed>) = 0 [pid 8604] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] getdents64(3, [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 8603] <... write resumed>) = 2097152 [pid 8603] munmap(0x7f41e0600000, 138412032 [pid 5064] close(3 [pid 5063] <... close resumed>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] rmdir("./350" [pid 5064] rmdir("./354" [pid 5063] <... rmdir resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 5063] mkdir("./351", 0777 [pid 8603] <... munmap resumed>) = 0 [pid 5064] mkdir("./355", 0777 [pid 5063] <... mkdir resumed>) = 0 [pid 8603] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] <... mkdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8603] <... openat resumed>) = 4 [pid 5063] <... openat resumed>) = 3 [ 319.970804][ T8605] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8603] ioctl(4, LOOP_SET_FD, 3 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8603] <... ioctl resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8603] close(3) = 0 [pid 8603] close(4) = 0 [pid 8600] <... open resumed>) = 4 [pid 8603] mkdir("./file0", 0777 [pid 8604] <... write resumed>) = 2097152 [pid 8603] <... mkdir resumed>) = 0 [pid 8600] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8603] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8600] <... open resumed>) = 5 [pid 8600] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8604] munmap(0x7f41e0600000, 138412032 [pid 8600] <... ftruncate resumed>) = 0 [pid 8600] unlink("./bus" [pid 8604] <... munmap resumed>) = 0 [ 320.019005][ T8603] loop0: detected capacity change from 0 to 4096 [pid 8600] <... unlink resumed>) = 0 [pid 8600] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8600] exit_group(0 [pid 8604] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8600] <... exit_group resumed>) = ? [pid 8604] <... openat resumed>) = 4 [pid 8604] ioctl(4, LOOP_SET_FD, 3 [pid 8603] <... mount resumed>) = 0 [pid 8603] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8603] chdir("./file0" [pid 5064] <... ioctl resumed>) = 0 [pid 8604] <... ioctl resumed>) = 0 [pid 8604] close(3) = 0 [pid 8603] <... chdir resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 8604] close(4 [pid 8603] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8604] <... close resumed>) = 0 [pid 8603] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5063] close(3 [pid 8603] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5063] <... close resumed>) = 0 [pid 8600] +++ exited with 0 +++ [pid 5064] close(3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8600, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 8604] mkdir("./file0", 0777 [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5064] <... close resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8607 [pid 5062] umount2("./349", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5062] openat(AT_FDCWD, "./349", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8604] <... mkdir resumed>) = 0 [pid 8603] <... open resumed>) = 4 [pid 5062] <... openat resumed>) = 3 ./strace-static-x86_64: Process 8607 attached [pid 8604] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8603] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] newfstatat(3, "", [pid 8607] set_robust_list(0x55555745a660, 24 [pid 8603] <... open resumed>) = 5 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 320.076546][ T8606] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 320.094328][ T8604] loop4: detected capacity change from 0 to 4096 ./strace-static-x86_64: Process 8608 attached [pid 8607] <... set_robust_list resumed>) = 0 [pid 8603] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8608 [pid 5062] getdents64(3, [pid 8608] set_robust_list(0x55555745a660, 24 [pid 8607] chdir("./351" [pid 8603] <... mmap resumed>) = 0x20000000 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8608] <... set_robust_list resumed>) = 0 [pid 8607] <... chdir resumed>) = 0 [pid 5062] umount2("./349/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8608] chdir("./355" [pid 8607] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8603] ftruncate(4, 33587195 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8608] <... chdir resumed>) = 0 [pid 8607] <... prctl resumed>) = 0 [pid 5062] newfstatat(AT_FDCWD, "./349/binderfs", [pid 8608] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8607] setpgid(0, 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] unlink("./349/binderfs" [pid 8608] <... prctl resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 8608] setpgid(0, 0 [pid 8607] <... setpgid resumed>) = 0 [pid 8608] <... setpgid resumed>) = 0 [pid 8607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8603] <... ftruncate resumed>) = 0 [pid 5062] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8608] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8607] <... openat resumed>) = 3 [pid 8608] <... openat resumed>) = 3 [pid 8603] unlink("./bus" [pid 8607] write(3, "1000", 4 [pid 8608] write(3, "1000", 4 [pid 8607] <... write resumed>) = 4 [pid 8608] <... write resumed>) = 4 [pid 8607] close(3 [pid 8608] close(3 [pid 8607] <... close resumed>) = 0 [pid 8608] <... close resumed>) = 0 [pid 8607] symlink("/dev/binderfs", "./binderfs" [pid 8608] symlink("/dev/binderfs", "./binderfs" [pid 8607] <... symlink resumed>) = 0 [pid 8608] <... symlink resumed>) = 0 [pid 8607] memfd_create("syzkaller", 0 [pid 8608] memfd_create("syzkaller", 0 [pid 8607] <... memfd_create resumed>) = 3 [pid 8603] <... unlink resumed>) = 0 [pid 8603] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8608] <... memfd_create resumed>) = 3 [pid 8607] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8603] exit_group(0 [pid 8607] <... mmap resumed>) = 0x7f41e0600000 [pid 8603] <... exit_group resumed>) = ? [pid 8608] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5062] <... umount2 resumed>) = 0 [pid 5062] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8603] +++ exited with 0 +++ [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./349/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8603, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=4 /* 0.04 s */} --- [pid 5062] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] restart_syscall(<... resuming interrupted clone ...> [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... restart_syscall resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./349/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5062] newfstatat(4, "", [pid 5061] umount2("./356", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] getdents64(4, [pid 5061] openat(AT_FDCWD, "./356", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5061] <... openat resumed>) = 3 [pid 5062] getdents64(4, [pid 5061] newfstatat(3, "", [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] close(4 [pid 5061] getdents64(3, [pid 5062] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] rmdir("./349/file0" [pid 5061] umount2("./356/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8604] <... mount resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] newfstatat(AT_FDCWD, "./356/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] close(3) = 0 [pid 8608] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8607] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8604] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5062] rmdir("./349" [pid 5061] unlink("./356/binderfs" [pid 8604] <... openat resumed>) = 3 [pid 5061] <... unlink resumed>) = 0 [pid 5062] <... rmdir resumed>) = 0 [ 320.200832][ T8609] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8604] chdir("./file0" [pid 5062] mkdir("./350", 0777 [pid 5061] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8604] <... chdir resumed>) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 8604] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8608] <... write resumed>) = 2097152 [pid 8607] <... write resumed>) = 2097152 [pid 8604] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] <... umount2 resumed>) = 0 [pid 8608] munmap(0x7f41e0600000, 138412032 [pid 8607] munmap(0x7f41e0600000, 138412032 [pid 8604] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5062] <... openat resumed>) = 3 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] newfstatat(AT_FDCWD, "./356/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./356/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", [pid 8608] <... munmap resumed>) = 0 [pid 8607] <... munmap resumed>) = 0 [pid 8604] <... open resumed>) = 4 [pid 8608] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8607] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8604] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8608] <... openat resumed>) = 4 [pid 8608] ioctl(4, LOOP_SET_FD, 3 [pid 8607] <... openat resumed>) = 4 [pid 8604] <... open resumed>) = 5 [pid 5061] getdents64(4, [pid 8607] ioctl(4, LOOP_SET_FD, 3 [pid 8608] <... ioctl resumed>) = 0 [pid 8604] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8608] close(3 [pid 8604] <... mmap resumed>) = 0x20000000 [pid 8608] <... close resumed>) = 0 [pid 5061] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4) = 0 [pid 8608] close(4) = 0 [pid 5061] rmdir("./356/file0" [pid 8608] mkdir("./file0", 0777 [pid 8604] ftruncate(4, 33587195 [pid 5061] <... rmdir resumed>) = 0 [pid 8608] <... mkdir resumed>) = 0 [pid 5061] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8607] <... ioctl resumed>) = 0 [pid 5061] close(3 [pid 8607] close(3) = 0 [pid 5061] <... close resumed>) = 0 [pid 8607] close(4 [pid 8608] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8607] <... close resumed>) = 0 [pid 5061] rmdir("./356" [pid 8607] mkdir("./file0", 0777 [pid 5062] <... ioctl resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8607] <... mkdir resumed>) = 0 [pid 5062] close(3 [pid 5061] mkdir("./357", 0777) = 0 [pid 8604] <... ftruncate resumed>) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8607] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] <... close resumed>) = 0 [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... openat resumed>) = 3 [pid 8604] unlink("./bus" [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8604] <... unlink resumed>) = 0 [pid 8604] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8604] exit_group(0) = ? ./strace-static-x86_64: Process 8610 attached [ 320.296366][ T8608] loop3: detected capacity change from 0 to 4096 [ 320.296540][ T8607] loop2: detected capacity change from 0 to 4096 [pid 8610] set_robust_list(0x55555745a660, 24 [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8610 [pid 8610] <... set_robust_list resumed>) = 0 [pid 8608] <... mount resumed>) = 0 [pid 8610] chdir("./350" [pid 8608] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8604] +++ exited with 0 +++ [pid 8610] <... chdir resumed>) = 0 [pid 8608] <... openat resumed>) = 3 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8604, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=5 /* 0.05 s */} --- [pid 8610] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8608] chdir("./file0" [pid 5065] umount2("./348", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8607] <... mount resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8607] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] openat(AT_FDCWD, "./348", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8607] <... openat resumed>) = 3 [pid 5065] <... openat resumed>) = 3 [pid 8607] chdir("./file0" [pid 5065] newfstatat(3, "", [pid 8607] <... chdir resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8607] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] getdents64(3, [pid 8610] setpgid(0, 0 [pid 8608] <... chdir resumed>) = 0 [pid 8607] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8610] <... setpgid resumed>) = 0 [pid 8608] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8607] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] umount2("./348/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] newfstatat(AT_FDCWD, "./348/binderfs", [pid 8608] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8610] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8608] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] unlink("./348/binderfs" [pid 8610] write(3, "1000", 4 [pid 5065] <... unlink resumed>) = 0 [pid 5065] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8610] <... write resumed>) = 4 [pid 8610] close(3) = 0 [pid 8610] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8610] memfd_create("syzkaller", 0) = 3 [pid 8608] <... open resumed>) = 4 [ 320.355236][ T8611] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 320.388346][ T8612] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8610] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8608] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8610] <... mmap resumed>) = 0x7f41e0600000 [pid 8608] <... open resumed>) = 5 [pid 5065] <... umount2 resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 8608] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8607] <... open resumed>) = 4 [pid 8607] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8608] <... ftruncate resumed>) = 0 [pid 8607] <... open resumed>) = 5 [pid 8607] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8607] ftruncate(4, 33587195 [pid 5065] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] close(3 [pid 5065] newfstatat(AT_FDCWD, "./348/file0", [pid 5061] <... close resumed>) = 0 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5065] umount2("./348/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 8607] <... ftruncate resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./348/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8607] unlink("./bus" [pid 5065] <... openat resumed>) = 4 ./strace-static-x86_64: Process 8613 attached [pid 5065] newfstatat(4, "", [pid 8613] set_robust_list(0x55555745a660, 24 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8613 [pid 8613] <... set_robust_list resumed>) = 0 [pid 5065] getdents64(4, [pid 8613] chdir("./357" [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8613] <... chdir resumed>) = 0 [pid 5065] getdents64(4, [pid 8613] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8613] <... prctl resumed>) = 0 [pid 5065] close(4 [pid 8613] setpgid(0, 0 [pid 8608] <... unlink resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 8613] <... setpgid resumed>) = 0 [pid 5065] rmdir("./348/file0" [pid 8613] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8608] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... rmdir resumed>) = 0 [pid 8613] <... openat resumed>) = 3 [pid 8608] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8607] <... unlink resumed>) = 0 [pid 5065] getdents64(3, [pid 8613] write(3, "1000", 4 [pid 8607] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8613] <... write resumed>) = 4 [pid 8607] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8608] exit_group(0 [pid 5065] close(3 [pid 8613] close(3 [pid 8608] <... exit_group resumed>) = ? [pid 8607] exit_group(0 [pid 5065] <... close resumed>) = 0 [pid 8613] <... close resumed>) = 0 [pid 8607] <... exit_group resumed>) = ? [pid 5065] rmdir("./348" [pid 8613] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... rmdir resumed>) = 0 [pid 8613] <... symlink resumed>) = 0 [pid 5065] mkdir("./349", 0777 [pid 8613] memfd_create("syzkaller", 0) = 3 [pid 5065] <... mkdir resumed>) = 0 [pid 8613] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8610] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8608] +++ exited with 0 +++ [pid 8607] +++ exited with 0 +++ [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8608, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=2 /* 0.02 s */} --- [pid 5065] <... openat resumed>) = 3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8607, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 5064] umount2("./355", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./355", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] umount2("./351", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./351", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5064] <... openat resumed>) = 3 [pid 5063] <... openat resumed>) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, [pid 5063] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(3, [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5063] umount2("./351/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./351/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./351/binderfs") = 0 [pid 5064] umount2("./355/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] newfstatat(AT_FDCWD, "./355/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./355/binderfs") = 0 [pid 5064] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 8613] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5063] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] <... umount2 resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./351/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./351/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./351/file0" [pid 5064] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... rmdir resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] getdents64(3, [pid 5064] newfstatat(AT_FDCWD, "./355/file0", [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./351") = 0 [pid 5064] umount2("./355/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] mkdir("./352", 0777 [pid 5064] openat(AT_FDCWD, "./355/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5063] <... mkdir resumed>) = 0 [pid 8610] <... write resumed>) = 2097152 [pid 5064] <... openat resumed>) = 4 [pid 8610] munmap(0x7f41e0600000, 138412032) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 5064] newfstatat(4, "", [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5064] getdents64(4, [pid 8610] <... openat resumed>) = 4 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8610] ioctl(4, LOOP_SET_FD, 3 [pid 8613] <... write resumed>) = 2097152 [pid 5064] getdents64(4, [pid 5065] close(3) = 0 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8614 attached [pid 8614] set_robust_list(0x55555745a660, 24 [pid 8613] munmap(0x7f41e0600000, 138412032 [pid 8610] <... ioctl resumed>) = 0 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8614 [pid 5064] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8614] <... set_robust_list resumed>) = 0 [pid 5064] close(4 [pid 8614] chdir("./349" [pid 5064] <... close resumed>) = 0 [pid 8614] <... chdir resumed>) = 0 [pid 5064] rmdir("./355/file0" [pid 8614] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8610] close(3 [pid 8614] <... prctl resumed>) = 0 [pid 8610] <... close resumed>) = 0 [pid 5064] <... rmdir resumed>) = 0 [pid 8610] close(4 [pid 8614] setpgid(0, 0 [pid 8610] <... close resumed>) = 0 [pid 8614] <... setpgid resumed>) = 0 [pid 8613] <... munmap resumed>) = 0 [pid 8610] mkdir("./file0", 0777 [pid 5064] getdents64(3, [pid 8614] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8613] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8614] <... openat resumed>) = 3 [pid 8613] <... openat resumed>) = 4 [pid 5064] close(3 [pid 8614] write(3, "1000", 4 [pid 8613] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... close resumed>) = 0 [pid 8614] <... write resumed>) = 4 [pid 8610] <... mkdir resumed>) = 0 [pid 5064] rmdir("./355" [pid 8610] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] <... rmdir resumed>) = 0 [pid 8614] close(3 [pid 8613] <... ioctl resumed>) = 0 [pid 8614] <... close resumed>) = 0 [pid 8614] symlink("/dev/binderfs", "./binderfs" [pid 8613] close(3 [pid 5064] mkdir("./356", 0777 [pid 8614] <... symlink resumed>) = 0 [pid 8613] <... close resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 8614] memfd_create("syzkaller", 0 [pid 8613] close(4) = 0 [pid 8613] mkdir("./file0", 0777 [pid 8614] <... memfd_create resumed>) = 3 [pid 8613] <... mkdir resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [ 320.596080][ T8610] loop1: detected capacity change from 0 to 4096 [ 320.633881][ T8613] loop0: detected capacity change from 0 to 4096 [pid 8614] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5064] <... openat resumed>) = 3 [pid 8613] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5064] ioctl(3, LOOP_CLR_FD [pid 5063] <... ioctl resumed>) = 0 [pid 5063] close(3) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8616 attached [pid 8610] <... mount resumed>) = 0 [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8616 [pid 8610] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 8614] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8610] chdir("./file0") = 0 [pid 8610] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8616] set_robust_list(0x55555745a660, 24 [pid 8610] <... openat resumed>) = -1 EBUSY (Device or resource busy) [ 320.681813][ T8615] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8616] <... set_robust_list resumed>) = 0 [pid 8616] chdir("./352") = 0 [pid 8616] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8610] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8616] <... prctl resumed>) = 0 [pid 8610] <... open resumed>) = 4 [pid 8610] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8616] setpgid(0, 0) = 0 [pid 8616] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8610] <... open resumed>) = 5 [pid 8616] write(3, "1000", 4) = 4 [pid 8613] <... mount resumed>) = 0 [pid 8613] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8616] close(3 [pid 8613] <... openat resumed>) = 3 [pid 8616] <... close resumed>) = 0 [pid 8613] chdir("./file0" [pid 8610] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8616] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8610] <... mmap resumed>) = 0x20000000 [pid 8613] <... chdir resumed>) = 0 [pid 8616] memfd_create("syzkaller", 0 [pid 8613] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8616] <... memfd_create resumed>) = 3 [pid 8616] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8613] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8610] ftruncate(4, 33587195 [pid 5064] <... ioctl resumed>) = 0 [pid 8616] <... mmap resumed>) = 0x7f41e0600000 [pid 8613] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] close(3) = 0 [ 320.730719][ T8617] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8618 attached [pid 8610] <... ftruncate resumed>) = 0 [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8618 [pid 8618] set_robust_list(0x55555745a660, 24) = 0 [pid 8616] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8618] chdir("./356") = 0 [pid 8613] <... open resumed>) = 4 [pid 8610] unlink("./bus" [pid 8618] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8613] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8618] setpgid(0, 0 [pid 8614] <... write resumed>) = 2097152 [pid 8613] <... open resumed>) = 5 [pid 8613] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8614] munmap(0x7f41e0600000, 138412032 [pid 8613] <... mmap resumed>) = 0x20000000 [pid 8618] <... setpgid resumed>) = 0 [pid 8613] ftruncate(4, 33587195 [pid 8618] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8614] <... munmap resumed>) = 0 [pid 8613] <... ftruncate resumed>) = 0 [pid 8618] write(3, "1000", 4) = 4 [pid 8614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8610] <... unlink resumed>) = 0 [pid 8618] close(3 [pid 8614] <... openat resumed>) = 4 [pid 8613] unlink("./bus" [pid 8618] <... close resumed>) = 0 [pid 8610] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8610] exit_group(0) = ? [pid 8618] symlink("/dev/binderfs", "./binderfs" [pid 8614] ioctl(4, LOOP_SET_FD, 3 [pid 8613] <... unlink resumed>) = 0 [pid 8618] <... symlink resumed>) = 0 [pid 8613] sendfile(-1, -1, NULL, 281474978811909 [pid 8618] memfd_create("syzkaller", 0 [pid 8613] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8613] exit_group(0 [pid 8618] <... memfd_create resumed>) = 3 [pid 8613] <... exit_group resumed>) = ? [pid 8618] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8610] +++ exited with 0 +++ [pid 8618] <... mmap resumed>) = 0x7f41e0600000 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8610, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5062] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5062] umount2("./350", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] openat(AT_FDCWD, "./350", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 8616] <... write resumed>) = 2097152 [pid 5062] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] getdents64(3, [pid 8614] <... ioctl resumed>) = 0 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8616] munmap(0x7f41e0600000, 138412032 [pid 8614] close(3 [pid 5062] umount2("./350/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8616] <... munmap resumed>) = 0 [pid 8614] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] newfstatat(AT_FDCWD, "./350/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8614] close(4 [pid 5062] unlink("./350/binderfs" [pid 8614] <... close resumed>) = 0 [pid 5062] <... unlink resumed>) = 0 [pid 8614] mkdir("./file0", 0777 [pid 8613] +++ exited with 0 +++ [pid 5062] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8614] <... mkdir resumed>) = 0 [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8613, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=8 /* 0.08 s */} --- [pid 8616] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8614] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8616] <... openat resumed>) = 4 [pid 8616] ioctl(4, LOOP_SET_FD, 3 [pid 5061] umount2("./357", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 320.856715][ T8614] loop4: detected capacity change from 0 to 4096 [pid 5062] <... umount2 resumed>) = 0 [pid 5061] openat(AT_FDCWD, "./357", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5061] newfstatat(3, "", [pid 8618] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(3, [pid 5062] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] umount2("./357/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] newfstatat(AT_FDCWD, "./350/file0", [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8616] <... ioctl resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] newfstatat(AT_FDCWD, "./357/binderfs", [pid 8616] close(3) = 0 [pid 8616] close(4) = 0 [pid 8616] mkdir("./file0", 0777) = 0 [pid 8616] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] unlink("./357/binderfs" [pid 8614] <... mount resumed>) = 0 [pid 5062] openat(AT_FDCWD, "./350/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] <... unlink resumed>) = 0 [pid 5062] newfstatat(4, "", [pid 5061] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8618] <... write resumed>) = 2097152 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8614] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] <... umount2 resumed>) = 0 [pid 8614] <... openat resumed>) = 3 [pid 8614] chdir("./file0") = 0 [pid 8614] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5062] getdents64(4, [pid 8614] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8614] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [ 320.911398][ T8616] loop2: detected capacity change from 0 to 4096 [ 320.938731][ T8619] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5062] getdents64(4, [pid 5061] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8618] munmap(0x7f41e0600000, 138412032 [pid 8614] <... open resumed>) = 4 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5062] close(4) = 0 [pid 5062] rmdir("./350/file0" [pid 8616] <... mount resumed>) = 0 [pid 8616] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5062] <... rmdir resumed>) = 0 [pid 5062] getdents64(3, [pid 8614] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 8616] chdir("./file0") = 0 [pid 8616] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5062] close(3 [pid 8616] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5062] <... close resumed>) = 0 [pid 5062] rmdir("./350" [pid 8616] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] <... rmdir resumed>) = 0 [pid 5061] newfstatat(AT_FDCWD, "./357/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5062] mkdir("./351", 0777 [pid 5061] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5061] openat(AT_FDCWD, "./357/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5061] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... mkdir resumed>) = 0 [pid 5061] getdents64(4, [pid 8614] <... open resumed>) = 5 [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5061] getdents64(4, [pid 8614] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] <... openat resumed>) = 3 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 8618] <... munmap resumed>) = 0 [pid 5061] <... close resumed>) = 0 [pid 5061] rmdir("./357/file0" [pid 8618] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8614] <... mmap resumed>) = 0x20000000 [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] <... rmdir resumed>) = 0 [pid 8618] <... openat resumed>) = 4 [pid 5061] getdents64(3, [pid 8618] ioctl(4, LOOP_SET_FD, 3 [pid 8614] ftruncate(4, 33587195 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5061] close(3) = 0 [pid 5061] rmdir("./357") = 0 [pid 5061] mkdir("./358", 0777 [pid 8618] <... ioctl resumed>) = 0 [pid 8616] <... open resumed>) = 4 [pid 8614] <... ftruncate resumed>) = 0 [pid 8618] close(3 [pid 8616] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] <... mkdir resumed>) = 0 [pid 8618] <... close resumed>) = 0 [pid 8614] unlink("./bus" [pid 8618] close(4 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 8618] <... close resumed>) = 0 [pid 8616] <... open resumed>) = 5 [pid 5061] <... openat resumed>) = 3 [pid 8618] mkdir("./file0", 0777 [pid 8616] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] ioctl(3, LOOP_CLR_FD [pid 8616] <... mmap resumed>) = 0x20000000 [pid 8616] ftruncate(4, 33587195 [pid 8618] <... mkdir resumed>) = 0 [pid 8614] <... unlink resumed>) = 0 [pid 8618] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [ 320.994578][ T8620] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 321.025651][ T8618] loop3: detected capacity change from 0 to 4096 [pid 8614] sendfile(-1, -1, NULL, 281474978811909 [pid 8616] <... ftruncate resumed>) = 0 [pid 8614] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8614] exit_group(0) = ? [pid 8616] unlink("./bus") = 0 [pid 8616] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8616] exit_group(0) = ? [pid 8614] +++ exited with 0 +++ [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8614, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- [pid 5065] umount2("./349", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... ioctl resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./349", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] close(3 [pid 5065] <... openat resumed>) = 3 [pid 5062] <... close resumed>) = 0 [pid 8616] +++ exited with 0 +++ [pid 5065] newfstatat(3, "", [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5061] <... ioctl resumed>) = 0 [pid 5061] close(3) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555745a650) = 8622 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8616, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 ./strace-static-x86_64: Process 8623 attached ./strace-static-x86_64: Process 8622 attached [pid 8618] <... mount resumed>) = 0 [pid 5065] getdents64(3, [pid 5063] umount2("./352", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8623 [pid 8623] set_robust_list(0x55555745a660, 24 [pid 8622] set_robust_list(0x55555745a660, 24 [pid 8618] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] umount2("./349/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8618] <... openat resumed>) = 3 [pid 8623] <... set_robust_list resumed>) = 0 [pid 8622] <... set_robust_list resumed>) = 0 [pid 8618] chdir("./file0" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] openat(AT_FDCWD, "./352", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8623] chdir("./351" [pid 8622] chdir("./358" [pid 8618] <... chdir resumed>) = 0 [pid 5065] newfstatat(AT_FDCWD, "./349/binderfs", [pid 5063] <... openat resumed>) = 3 [pid 8623] <... chdir resumed>) = 0 [pid 8622] <... chdir resumed>) = 0 [pid 8618] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] newfstatat(3, "", [pid 8623] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8622] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8618] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5065] unlink("./349/binderfs" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8623] <... prctl resumed>) = 0 [pid 8622] <... prctl resumed>) = 0 [pid 8618] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] <... unlink resumed>) = 0 [pid 5063] getdents64(3, [pid 8623] setpgid(0, 0 [pid 8622] setpgid(0, 0 [pid 5065] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8623] <... setpgid resumed>) = 0 [pid 8622] <... setpgid resumed>) = 0 [pid 5063] umount2("./352/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8623] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8622] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8618] <... open resumed>) = 4 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8623] <... openat resumed>) = 3 [pid 8622] <... openat resumed>) = 3 [pid 8618] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5063] newfstatat(AT_FDCWD, "./352/binderfs", [pid 8623] write(3, "1000", 4 [pid 8622] write(3, "1000", 4 [pid 8623] <... write resumed>) = 4 [pid 8622] <... write resumed>) = 4 [pid 8618] <... open resumed>) = 5 [pid 8623] close(3 [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8623] <... close resumed>) = 0 [pid 8622] close(3 [pid 8618] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] unlink("./352/binderfs" [pid 8623] symlink("/dev/binderfs", "./binderfs" [pid 8622] <... close resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 8623] <... symlink resumed>) = 0 [pid 8622] symlink("/dev/binderfs", "./binderfs" [pid 8618] <... mmap resumed>) = 0x20000000 [pid 5063] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8622] <... symlink resumed>) = 0 [ 321.112414][ T8621] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8618] ftruncate(4, 33587195 [pid 8622] memfd_create("syzkaller", 0 [pid 8618] <... ftruncate resumed>) = 0 [pid 5065] <... umount2 resumed>) = 0 [pid 8623] memfd_create("syzkaller", 0 [pid 8622] <... memfd_create resumed>) = 3 [pid 8618] unlink("./bus" [pid 5065] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... umount2 resumed>) = 0 [pid 8623] <... memfd_create resumed>) = 3 [pid 8622] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8623] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8622] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] newfstatat(AT_FDCWD, "./349/file0", [pid 5063] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8623] <... mmap resumed>) = 0x7f41e0600000 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] newfstatat(AT_FDCWD, "./352/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] umount2("./349/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5063] umount2("./352/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] openat(AT_FDCWD, "./349/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5063] openat(AT_FDCWD, "./352/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] newfstatat(4, "", [pid 5063] <... openat resumed>) = 4 [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8618] <... unlink resumed>) = 0 [pid 5063] newfstatat(4, "", [pid 8618] sendfile(-1, -1, NULL, 281474978811909 [pid 5065] getdents64(4, [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8618] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8618] exit_group(0 [pid 5065] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 5065] getdents64(4, [pid 8618] <... exit_group resumed>) = ? [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5063] close(4) = 0 [pid 5063] rmdir("./352/file0") = 0 [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5063] close(3) = 0 [pid 5063] rmdir("./352" [pid 5065] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4 [pid 5063] <... rmdir resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5063] mkdir("./353", 0777 [pid 5065] rmdir("./349/file0") = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 8623] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8622] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8618] +++ exited with 0 +++ [pid 5065] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8618, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} --- [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5065] close(3) = 0 [pid 5063] <... openat resumed>) = 3 [pid 5064] umount2("./356", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] rmdir("./349" [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] ioctl(3, LOOP_CLR_FD [pid 5064] openat(AT_FDCWD, "./356", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5064] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5065] <... rmdir resumed>) = 0 [pid 5064] umount2("./356/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5065] mkdir("./350", 0777 [pid 5064] newfstatat(AT_FDCWD, "./356/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./356/binderfs") = 0 [pid 5064] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5064] <... umount2 resumed>) = 0 [pid 5065] <... openat resumed>) = 3 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5064] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8623] <... write resumed>) = 2097152 [pid 8622] <... write resumed>) = 2097152 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8623] munmap(0x7f41e0600000, 138412032 [pid 8622] munmap(0x7f41e0600000, 138412032 [pid 5064] newfstatat(AT_FDCWD, "./356/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8623] <... munmap resumed>) = 0 [pid 8622] <... munmap resumed>) = 0 [pid 5063] <... ioctl resumed>) = 0 [pid 5064] umount2("./356/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./356/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] newfstatat(4, "", [pid 8622] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8623] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8622] <... openat resumed>) = 4 [pid 5064] getdents64(4, [pid 8623] <... openat resumed>) = 4 [pid 8623] ioctl(4, LOOP_SET_FD, 3 [pid 8622] ioctl(4, LOOP_SET_FD, 3 [pid 5064] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./356/file0") = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./356") = 0 [pid 5064] mkdir("./357", 0777 [pid 8623] <... ioctl resumed>) = 0 [pid 8622] <... ioctl resumed>) = 0 [pid 5065] <... ioctl resumed>) = 0 [pid 5064] <... mkdir resumed>) = 0 [pid 5063] close(3 [pid 8622] close(3) = 0 [pid 5063] <... close resumed>) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8623] close(3 [pid 8622] close(4 [pid 5065] close(3 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 8623] <... close resumed>) = 0 [pid 8622] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] <... openat resumed>) = 3 [pid 8623] close(4 [pid 8622] mkdir("./file0", 0777 [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8623] <... close resumed>) = 0 [pid 8622] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 8624 attached [pid 8623] mkdir("./file0", 0777 [pid 8622] mount("/dev/loop0", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5063] <... clone resumed>, child_tidptr=0x55555745a650) = 8625 ./strace-static-x86_64: Process 8625 attached [pid 8623] <... mkdir resumed>) = 0 [pid 8625] set_robust_list(0x55555745a660, 24) = 0 [pid 8625] chdir("./353") = 0 [pid 8624] set_robust_list(0x55555745a660, 24 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8624 [pid 8625] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8624] <... set_robust_list resumed>) = 0 [pid 8625] <... prctl resumed>) = 0 [pid 8625] setpgid(0, 0 [pid 8624] chdir("./350" [pid 8625] <... setpgid resumed>) = 0 [pid 8625] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8624] <... chdir resumed>) = 0 [pid 8624] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8623] mount("/dev/loop1", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 8624] <... prctl resumed>) = 0 [pid 8625] <... openat resumed>) = 3 [pid 8624] setpgid(0, 0 [pid 8625] write(3, "1000", 4) = 4 [pid 8625] close(3 [pid 8624] <... setpgid resumed>) = 0 [pid 8625] <... close resumed>) = 0 [pid 8625] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8624] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8625] memfd_create("syzkaller", 0 [ 321.312151][ T8623] loop1: detected capacity change from 0 to 4096 [ 321.321328][ T8622] loop0: detected capacity change from 0 to 4096 [pid 8624] write(3, "1000", 4 [pid 8625] <... memfd_create resumed>) = 3 [pid 8625] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8624] <... write resumed>) = 4 [pid 8625] <... mmap resumed>) = 0x7f41e0600000 [pid 8624] close(3) = 0 [pid 8624] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8624] memfd_create("syzkaller", 0) = 3 [pid 8624] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 8625] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8624] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8623] <... mount resumed>) = 0 [pid 8622] <... mount resumed>) = 0 [pid 5064] <... ioctl resumed>) = 0 [pid 8623] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8622] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8623] <... openat resumed>) = 3 [pid 8623] chdir("./file0" [pid 8622] <... openat resumed>) = 3 [pid 8623] <... chdir resumed>) = 0 [pid 8622] chdir("./file0" [pid 8623] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 8622] <... chdir resumed>) = 0 [pid 8623] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8622] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 8622] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [ 321.393807][ T8626] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 321.407724][ T8627] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 8623] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5064] close(3 [pid 8623] <... open resumed>) = 4 [pid 8622] <... open resumed>) = 4 [pid 8623] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 8622] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 8622] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 8623] <... open resumed>) = 5 [pid 8623] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 8623] ftruncate(4, 33587195 [pid 5064] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8628 attached [pid 8628] set_robust_list(0x55555745a660, 24) = 0 [pid 8623] <... ftruncate resumed>) = 0 [pid 8622] <... ftruncate resumed>) = 0 [pid 8624] <... write resumed>) = 2097152 [pid 8628] chdir("./357" [pid 8624] munmap(0x7f41e0600000, 138412032 [pid 8623] unlink("./bus" [pid 8622] unlink("./bus" [pid 5064] <... clone resumed>, child_tidptr=0x55555745a650) = 8628 [pid 8628] <... chdir resumed>) = 0 [pid 8624] <... munmap resumed>) = 0 [pid 8628] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 8624] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 8628] <... prctl resumed>) = 0 [pid 8624] <... openat resumed>) = 4 [pid 8623] <... unlink resumed>) = 0 [pid 8628] setpgid(0, 0 [pid 8625] <... write resumed>) = 2097152 [pid 8624] ioctl(4, LOOP_SET_FD, 3 [pid 8623] sendfile(-1, -1, NULL, 281474978811909 [pid 8628] <... setpgid resumed>) = 0 [pid 8623] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8622] <... unlink resumed>) = 0 [pid 8628] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8623] exit_group(0 [pid 8622] sendfile(-1, -1, NULL, 281474978811909 [pid 8623] <... exit_group resumed>) = ? [pid 8628] <... openat resumed>) = 3 [pid 8622] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 8622] exit_group(0 [pid 8628] write(3, "1000", 4 [pid 8625] munmap(0x7f41e0600000, 138412032 [pid 8622] <... exit_group resumed>) = ? [pid 8625] <... munmap resumed>) = 0 [pid 8628] <... write resumed>) = 4 [pid 8625] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8624] <... ioctl resumed>) = 0 [pid 8623] +++ exited with 0 +++ [pid 8628] close(3 [pid 8625] <... openat resumed>) = 4 [pid 8624] close(3 [pid 5062] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8623, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 8628] <... close resumed>) = 0 [pid 8625] ioctl(4, LOOP_SET_FD, 3 [pid 8624] <... close resumed>) = 0 [pid 8622] +++ exited with 0 +++ [pid 8628] symlink("/dev/binderfs", "./binderfs" [pid 5061] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8622, si_uid=0, si_status=0, si_utime=0, si_stime=6 /* 0.06 s */} --- [pid 8624] close(4 [pid 5062] umount2("./351", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8628] <... symlink resumed>) = 0 [pid 8625] <... ioctl resumed>) = 0 [pid 8624] <... close resumed>) = 0 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8628] memfd_create("syzkaller", 0 [pid 8625] close(3 [pid 8624] mkdir("./file0", 0777 [pid 5062] openat(AT_FDCWD, "./351", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] umount2("./358", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8628] <... memfd_create resumed>) = 3 [pid 8625] <... close resumed>) = 0 [pid 8624] <... mkdir resumed>) = 0 [pid 5062] <... openat resumed>) = 3 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8628] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8625] close(4 [pid 8624] mount("/dev/loop4", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] newfstatat(3, "", [pid 5061] openat(AT_FDCWD, "./358", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8628] <... mmap resumed>) = 0x7f41e0600000 [pid 8625] <... close resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] <... openat resumed>) = 3 [pid 8625] mkdir("./file0", 0777 [pid 5062] getdents64(3, [pid 5061] newfstatat(3, "", [pid 8625] <... mkdir resumed>) = 0 [pid 8625] mount("/dev/loop2", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] umount2("./351/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 321.514184][ T8624] loop4: detected capacity change from 0 to 4096 [ 321.546564][ T8625] loop2: detected capacity change from 0 to 4096 [pid 5061] getdents64(3, [pid 5062] newfstatat(AT_FDCWD, "./351/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8624] <... mount resumed>) = 0 [pid 5062] unlink("./351/binderfs" [pid 8624] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5061] umount2("./358/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8624] <... openat resumed>) = 3 [pid 5062] <... unlink resumed>) = 0 [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8624] chdir("./file0" [pid 5062] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] newfstatat(AT_FDCWD, "./358/binderfs", [pid 8624] <... chdir resumed>) = 0 [pid 5061] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8624] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5061] unlink("./358/binderfs" [pid 8624] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 5061] <... unlink resumed>) = 0 [pid 8624] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5061] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8628] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8625] <... mount resumed>) = 0 [pid 5061] <... umount2 resumed>) = 0 [pid 8625] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 8624] <... open resumed>) = 4 [pid 5062] <... umount2 resumed>) = 0 [pid 8625] <... openat resumed>) = 3 [pid 8624] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8625] chdir("./file0" [pid 8624] <... open resumed>) = 5 [pid 5062] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8625] <... chdir resumed>) = 0 [pid 8624] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5061] newfstatat(AT_FDCWD, "./358/file0", [pid 8625] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 8624] <... mmap resumed>) = 0x20000000 [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8625] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8624] ftruncate(4, 33587195 [pid 5062] newfstatat(AT_FDCWD, "./351/file0", [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8625] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 8624] <... ftruncate resumed>) = 0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5061] umount2("./358/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5062] umount2("./351/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5061] openat(AT_FDCWD, "./358/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8624] unlink("./bus" [pid 5062] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8625] <... open resumed>) = 4 [pid 8625] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5061] <... openat resumed>) = 4 [pid 8625] <... open resumed>) = 5 [ 321.597119][ T8629] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 321.634094][ T8630] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5062] openat(AT_FDCWD, "./351/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5061] newfstatat(4, "", [pid 8625] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5062] <... openat resumed>) = 4 [pid 5061] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 8625] <... mmap resumed>) = 0x20000000 [pid 8624] <... unlink resumed>) = 0 [pid 5061] getdents64(4, [pid 8625] ftruncate(4, 33587195 [pid 8624] sendfile(-1, -1, NULL, 281474978811909 [pid 5062] newfstatat(4, "", [pid 8624] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5061] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8624] exit_group(0 [pid 5062] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] getdents64(4, [pid 8624] <... exit_group resumed>) = ? [pid 5062] getdents64(4, [pid 8625] <... ftruncate resumed>) = 0 [pid 5061] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] close(4 [pid 8628] <... write resumed>) = 2097152 [pid 5062] <... getdents64 resumed>0x555557463730 /* 2 entries */, 32768) = 48 [pid 8628] munmap(0x7f41e0600000, 138412032 [pid 8625] unlink("./bus" [pid 5062] getdents64(4, [pid 5061] <... close resumed>) = 0 [pid 8628] <... munmap resumed>) = 0 [pid 5062] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 5061] rmdir("./358/file0" [pid 8624] +++ exited with 0 +++ [pid 5062] close(4 [pid 5065] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8624, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5062] <... close resumed>) = 0 [pid 5065] umount2("./350", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] rmdir("./351/file0" [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8628] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 8625] <... unlink resumed>) = 0 [pid 5065] openat(AT_FDCWD, "./350", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5062] <... rmdir resumed>) = 0 [pid 5061] <... rmdir resumed>) = 0 [pid 8625] sendfile(-1, -1, NULL, 281474978811909 [pid 8628] <... openat resumed>) = 4 [pid 8625] <... sendfile resumed>) = -1 EBADF (Bad file descriptor) [pid 5065] <... openat resumed>) = 3 [pid 5062] getdents64(3, [pid 5061] getdents64(3, [pid 8628] ioctl(4, LOOP_SET_FD, 3 [pid 8625] exit_group(0 [pid 5065] newfstatat(3, "", [pid 5062] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] close(3 [pid 8625] <... exit_group resumed>) = ? [pid 5062] <... close resumed>) = 0 [pid 5061] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5062] rmdir("./351" [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5062] <... rmdir resumed>) = 0 [pid 5062] mkdir("./352", 0777 [pid 8628] <... ioctl resumed>) = 0 [pid 8625] +++ exited with 0 +++ [pid 5065] getdents64(3, [pid 5061] close(3 [pid 8628] close(3 [pid 5063] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8625, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 8628] <... close resumed>) = 0 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5061] <... close resumed>) = 0 [pid 8628] close(4 [pid 5065] umount2("./350/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5062] <... mkdir resumed>) = 0 [pid 5061] rmdir("./358" [pid 5063] umount2("./353", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8628] <... close resumed>) = 0 [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5061] <... rmdir resumed>) = 0 [pid 5063] openat(AT_FDCWD, "./353", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5065] newfstatat(AT_FDCWD, "./350/binderfs", [pid 5063] newfstatat(3, "", [pid 8628] mkdir("./file0", 0777 [pid 5065] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5061] mkdir("./359", 0777 [pid 8628] <... mkdir resumed>) = 0 [pid 5065] unlink("./350/binderfs" [pid 5063] getdents64(3, [pid 5065] <... unlink resumed>) = 0 [pid 5061] <... mkdir resumed>) = 0 [pid 5065] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 5062] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5063] umount2("./353/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8628] mount("/dev/loop3", "./file0", "nilfs2", MS_SYNCHRONOUS|MS_I_VERSION, "" [pid 5062] <... openat resumed>) = 3 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5062] ioctl(3, LOOP_CLR_FD [pid 5061] <... openat resumed>) = 3 [pid 5065] <... umount2 resumed>) = 0 [pid 5063] newfstatat(AT_FDCWD, "./353/binderfs", [pid 5061] ioctl(3, LOOP_CLR_FD [pid 5063] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] unlink("./353/binderfs" [pid 5065] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8628] <... mount resumed>) = 0 [pid 5063] <... unlink resumed>) = 0 [pid 8628] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8628] <... openat resumed>) = 3 [pid 5065] newfstatat(AT_FDCWD, "./350/file0", [pid 8628] chdir("./file0" [pid 5065] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5063] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8628] <... chdir resumed>) = 0 [pid 5065] umount2("./350/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8628] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5065] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8628] <... openat resumed>) = -1 EBUSY (Device or resource busy) [pid 8628] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_DIRECT|O_NOATIME, 000 [pid 5065] openat(AT_FDCWD, "./350/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] <... umount2 resumed>) = 0 [pid 5065] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5065] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5065] close(4) = 0 [pid 5065] rmdir("./350/file0") = 0 [pid 8628] <... open resumed>) = 4 [pid 5065] getdents64(3, [pid 8628] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5065] <... getdents64 resumed>0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5065] close(3 [pid 8628] <... open resumed>) = 5 [pid 5065] <... close resumed>) = 0 [pid 5065] rmdir("./350") = 0 [ 321.714314][ T8628] loop3: detected capacity change from 0 to 4096 [ 321.751525][ T8631] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [pid 5063] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8628] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8628] <... mmap resumed>) = 0x20000000 [pid 5065] mkdir("./351", 0777 [pid 5063] newfstatat(AT_FDCWD, "./353/file0", [pid 8628] ftruncate(4, 33587195 [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5065] <... mkdir resumed>) = 0 [pid 5065] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5063] umount2("./353/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8628] <... ftruncate resumed>) = 0 [pid 5063] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] <... openat resumed>) = 3 [pid 5063] openat(AT_FDCWD, "./353/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5065] ioctl(3, LOOP_CLR_FD [pid 5063] newfstatat(4, "", [pid 8628] unlink("./bus" [pid 5063] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5063] getdents64(4, [pid 8628] <... unlink resumed>) = 0 [pid 5063] <... getdents64 resumed>0x555557463730 /* 0 entries */, 32768) = 0 [pid 8628] sendfile(-1, -1, NULL, 281474978811909) = -1 EBADF (Bad file descriptor) [pid 8628] exit_group(0) = ? [pid 5063] close(4) = 0 [pid 5062] <... ioctl resumed>) = 0 [pid 5061] <... ioctl resumed>) = 0 [pid 5063] rmdir("./353/file0" [pid 5062] close(3 [pid 5063] <... rmdir resumed>) = 0 [pid 5062] <... close resumed>) = 0 [pid 5061] close(3 [pid 8628] +++ exited with 0 +++ [pid 5062] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5063] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8628, si_uid=0, si_status=0, si_utime=0, si_stime=7 /* 0.07 s */} --- [pid 5062] <... clone resumed>, child_tidptr=0x55555745a650) = 8632 ./strace-static-x86_64: Process 8632 attached [pid 5064] umount2("./357", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8632] set_robust_list(0x55555745a660, 24 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8632] <... set_robust_list resumed>) = 0 [pid 5064] openat(AT_FDCWD, "./357", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 8632] chdir("./352" [pid 5064] <... openat resumed>) = 3 [pid 5064] newfstatat(3, "", [pid 8632] <... chdir resumed>) = 0 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5063] close(3 [pid 5064] getdents64(3, [pid 8632] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5063] <... close resumed>) = 0 [pid 5063] rmdir("./353" [pid 8632] <... prctl resumed>) = 0 [pid 8632] setpgid(0, 0) = 0 [pid 8632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5064] <... getdents64 resumed>0x55555745b6f0 /* 4 entries */, 32768) = 112 [pid 8632] write(3, "1000", 4 [pid 5063] <... rmdir resumed>) = 0 [pid 8632] <... write resumed>) = 4 [pid 8632] close(3 [pid 5064] umount2("./357/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5063] mkdir("./354", 0777 [pid 5061] <... close resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5064] newfstatat(AT_FDCWD, "./357/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5064] unlink("./357/binderfs") = 0 [pid 5063] <... mkdir resumed>) = 0 [pid 5061] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5064] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8632] <... close resumed>) = 0 [pid 8632] symlink("/dev/binderfs", "./binderfs") = 0 [pid 8632] memfd_create("syzkaller", 0) = 3 [pid 8632] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5063] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 8633 attached [pid 8633] set_robust_list(0x55555745a660, 24 [pid 5063] <... openat resumed>) = 3 [pid 5061] <... clone resumed>, child_tidptr=0x55555745a650) = 8633 [pid 5063] ioctl(3, LOOP_CLR_FD [pid 8633] <... set_robust_list resumed>) = 0 [pid 8633] chdir("./359") = 0 [pid 8633] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8633] setpgid(0, 0) = 0 [pid 8633] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 8633] write(3, "1000", 4) = 4 [pid 5065] <... ioctl resumed>) = 0 [pid 5064] <... umount2 resumed>) = 0 [pid 8633] close(3 [pid 5065] close(3 [pid 8633] <... close resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 8633] symlink("/dev/binderfs", "./binderfs" [pid 5065] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 8634 attached [pid 8634] set_robust_list(0x55555745a660, 24 [pid 5065] <... clone resumed>, child_tidptr=0x55555745a650) = 8634 [pid 8634] <... set_robust_list resumed>) = 0 [pid 8634] chdir("./351") = 0 [pid 8634] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8634] setpgid(0, 0 [pid 5064] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 8634] <... setpgid resumed>) = 0 [pid 8633] <... symlink resumed>) = 0 [pid 5064] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 8634] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8633] memfd_create("syzkaller", 0 [pid 8632] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 5064] newfstatat(AT_FDCWD, "./357/file0", [pid 8633] <... memfd_create resumed>) = 3 [pid 5064] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 8634] <... openat resumed>) = 3 [pid 8633] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f41e0600000 [pid 5064] umount2("./357/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5064] openat(AT_FDCWD, "./357/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5064] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5064] getdents64(4, 0x555557463730 /* 2 entries */, 32768) = 48 [pid 5064] getdents64(4, 0x555557463730 /* 0 entries */, 32768) = 0 [pid 5064] close(4) = 0 [pid 5064] rmdir("./357/file0") = 0 [pid 5064] getdents64(3, 0x55555745b6f0 /* 0 entries */, 32768) = 0 [pid 5064] close(3) = 0 [pid 5064] rmdir("./357") = 0 [pid 5064] mkdir("./358", 0777) = 0 [pid 5064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 8634] write(3, "1000", 4 [pid 5064] ioctl(3, LOOP_CLR_FD [pid 8634] <... write resumed>) = 4 [pid 5063] <... ioctl resumed>) = 0 [pid 8634] close(3 [pid 5063] close(3 [pid 8634] <... close resumed>) = 0 [pid 5063] <... close resumed>) = 0 [pid 8634] symlink("/dev/binderfs", "./binderfs" [pid 8633] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 8634] <... symlink resumed>) = 0 [pid 5063] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555745a650) = 8635 ./strace-static-x86_64: Process 8635 attached [pid 8634] memfd_create("syzkaller", 0 [pid 8635] set_robust_list(0x55555745a660, 24 [pid 8634] <... memfd_create resumed>) = 3 [pid 8632] <... write resumed>) = 2097152 [pid 8634] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 8635] <... set_robust_list resumed>) = 0 [pid 8634] <... mmap resumed>) = 0x7f41e0600000 [pid 8635] chdir("./354") = 0 [pid 8635] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 8635] setpgid(0, 0) = 0 [pid 8635] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 8633] <... write resumed>) = 2097152 [pid 8635] <... openat resumed>) = 3 [pid 8635] write(3, "1000", 4) = 4 [pid 8633] munmap(0x7f41e0600000, 138412032 [pid 8635] close(3 [pid 8633] <... munmap resumed>) = 0 [pid 8632] munmap(0x7f41e0600000, 138412032) = 0 [pid 8635] <... close resumed>) = 0 [pid 8633] openat(AT_